CVE Vulnerability Catalog

A flaw was found in the Authorization Services component of Keycloak. The issue occurs in the policy evaluation endpoint, which is used by administrators to test how access policies apply to specific users. Due to missing authorization checks, a delegated administrator with limited viewing privileges can access the full profile and role information of any user in the realm, even if they are not permitted to view user details.

A vulnerability in BioStar BIOS Update Utility 1.9.7.3 affects the function sub_110BC in BSMEM64_W10.sys (IOCTL Handler component). Manipulation of the PhysicalAddress/Size arguments results in a write-what-where condition. Local access is required, and the exploit has been made public.

A vulnerability has been found in xuxueli xxl-job up to 3.4.2/3.5.0. It affects unknown code in JobInfoController.java of the Task Management Interface. Manipulation of the argument name/author leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted but did not respond.

A vulnerability in the drogon library (up to version 1.9.13) affects the makeCriteria function in orm_lib/src/Criteria.cc (ORM component). Manipulation of the filter argument leads to SQL injection. The attack can be performed remotely, and the exploit is publicly available.

The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user's session.

The Web to Print Online Designer WordPress plugin before 2.15.0 does not validate the type or extension of uploaded files, and hands the token protecting those uploads to any visitor who asks for it. This allows unauthenticated attackers to upload arbitrary files, including PHP ones, and run code on the server.

A vulnerability in the drogon library (up to version 1.9.13) affects the Mapper::orderBy function in Mapper.h (ORM Mapper component). Manipulation of the sort argument leads to SQL injection. The attack can be performed remotely, and the exploit is publicly available.

A security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. The affected function is sub_1105C in BS_HWMIO64_W10.sys in the IOCTL Handler component, where manipulation of the PhysicalAddress argument leads to a write-what-where condition. The attack requires local access and the exploit is publicly disclosed.

A weakness has been identified in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. The affected file is /send_order.cgi?parameter=loginout in the Cookie Handler component, where manipulation of the session_id argument causes command injection. Remote exploitation is possible and the exploit is publicly available.

This CVE was rejected — reason: this is rejected. No further vulnerability information is available.

A vulnerability was discovered in the Feiyu Star Router B-MB5E202-210322-r11656 (Chengdu Feiyuxing Technology) in /send_order.cgi?parameter=del_expmac. Manipulation of the mac argument leads to command injection. The attack can be launched remotely and the exploit has been publicly released.

A vulnerability was identified in Hangzhou Shunwang Technology shzh 10.7.2.693 in the sub_180004AC0 function of shdrv_x64.sys (IRP_MJ_DEVICE_CONTROL Handler). Manipulation of the PID argument leads to denial of service. The attack must be carried out locally.

nvm before 0.40.8 is vulnerable to path traversal in nvm_alias(), where a requested version or alias is treated as a filename under $NVM_DIR/alias without containment checks. A name containing '..' allows reading the first non-comment line of any file readable by the user, e.g. via .nvmrc in an untrusted repository. There is no integrity or availability impact and no code execution.

A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. The vulnerability affects the function sub_1105C in BS_RVSIO64.sys in the IOCTL Handler component, where manipulation of the PhysicalAddress argument results in a write-what-where condition. The attack requires local access and the exploit is now public.

A vulnerability was detected in BioStar VIVID LED DJ 4.0.2411.1500 in the sub_1105C function of BS_LED64.sys (IOCTL Handler). Manipulation of the AssociatedIrp argument leads to a write-what-where condition. Local access is required and the exploit has been publicly disclosed.

A vulnerability was detected in QCMS up to 6.0.6 in the self_Tmp function of Lib/Config/Controllers.php (Content Detail Page). Manipulation of the ID argument leads to SQL injection. The attack can be performed remotely and the exploit has been publicly disclosed.

A vulnerability was found in RooCMS up to 1.2.2/1.3.4/1.4RC2 in the eval function of roocms/site_pagePHP.php (Frontend Rendering). Manipulation of the content argument leads to code injection. The attack can be launched remotely and the exploit has been publicly disclosed.

A flaw was found in WuzhiCMS up to 4.1.0 in /index.php?m=member&v=Login (Login component). Manipulation of the forward argument causes open redirect. The attack can be initiated remotely and the exploit has been published.

A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected function is vlan_load_form_uci in /usr/bin/routerd, where manipulation of the wan_num argument leads to buffer overflow. The attack can be initiated remotely and the exploit is publicly disclosed.

A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. The affected function is wan_config_set_vlan in /usr/bin/routerd, where manipulation of the vlan_wanX.ports argument leads to buffer overflow. The attack can be performed remotely and the exploit is publicly available.