CVE Vulnerability Catalog

Stormshield Endpoint Security Evolution versions 2.0.0 through 2.4.2 has insecure permissions. An ACL entry on the SES Evolution agent directory containing the agent logs displayed in the GUI allows interactive users to read data, which could allow access to information reserved for administrators.

Stormshield Endpoint Security Evolution versions 2.0.0 through 2.3.2 have insecure permissions. An interactive user can use the SES Evolution agent to create arbitrary files with local system privileges.

i-doit Open v24 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the timeout parameter on the login page.

Cloudexplorer-lite is an open source cloud software stack that did not enforce strong passwords in versions prior to 1.2.0. Weak passwords can be easily guessed, making the system vulnerable to brute force attacks.

Shopware is an open source e-commerce software. The mail validation in the registration process had some flaws, allowing the construction of different email addresses that ultimately resulted in the same address shared by multiple accounts.

Shopware is an open source e-commerce software. Due to an incorrect configuration in the `.htaccess` file, the configuration file of the Javascript (`themes/package-lock.json`) could be read in production environments, allowing attackers to determine the specific Shopware version in a deployment.

Improper access control exists in the GitHub repository plantuml/plantuml prior to version 1.2023.9.

A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content via DNS lookups. All versions before 7.14.3 are affected.

A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to obtain sensitive information. Successful exploitation requires an attacker to first obtain a valid agent authentication token.

A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write unauthorized objects. Successful exploitation requires an attacker to first obtain a valid agent authentication token.

Input Validation vulnerability in Apache Airflow ODBC and MSSQL Providers. It requires DAG code to use `get_sqlalchemy_connection` and access to connection resources to exploit it.

The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.0.0. This is due to a missing capability check on the ajax_store_save() function, allowing authenticated attackers with minimal permissions, such as a subscriber, to modify plugin settings and inject malicious web scripts.

The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.0.0. This is due to missing nonce validation on the ajax_store_save() function, allowing unauthenticated attackers to modify plugin settings and inject malicious web scripts via a forged request.

The MainWP Child plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 4.4.1.1 due to insufficient controls on the storage of back-up files. This allows unauthenticated attackers to extract sensitive data, including the entire installations database, if a backup occurs and the deletion of the back-up files fails.

The EmbedPress plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key in the 'lock_content_form_handler' and 'display_password_form' functions in versions up to and including 3.7.3. This allows unauthenticated attackers to decrypt and view password protected content.

DataEase is a data visualization analysis tool that, in affected versions, has a missing authorization check. This allows unauthorized users to manipulate dashboards created by the administrator.

DataEase, a data visualization analysis tool, has a privilege bypass vulnerability that allows ordinary users to access the user database. Exposed information includes md5 hashes of passwords, usernames, email addresses, and phone numbers.

OpenFGA versions v1.1.0 and prior are vulnerable to a DoS attack when Check and ListObjects calls are executed against authorization models that contain circular relationship definitions. Users are affected if they are using these versions and executing these calls on vulnerable models.

An authenticated LXCA user with elevated privileges may delete folders in the LXCA filesystem through a specifically crafted web API call due to insufficient input validation.

An authenticated LXCA user with elevated privileges may replace filesystem data through a specifically crafted web API call due to insufficient input validation.