CVE Vulnerability Catalog

Château versions up to 1.2.1 are vulnerable to unauthenticated PHP object injection.

Zoya versions up to 1.4 contain a vulnerability to unauthenticated PHP object injection, which may lead to unauthorized access to the system.

There is an unauthenticated PHP Object Injection vulnerability in Manufaktur Solutions versions <= 1.1.1.

There is a vulnerability in Eldon versions up to 1.4.1 that allows unauthenticated PHP object injection.

There is an unauthenticated PHP Object Injection vulnerability in ShiftUp versions up to 1.3.

Versions of Royal Elementor Addons Pro below 1.7.1041 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious JavaScript code.

There is an unauthenticated local file inclusion vulnerability in Atomlab versions <= 2.4.5.

There is an unauthenticated PHP Object Injection vulnerability in SingleMalt <= 1.5 versions.

Hiroshi versions up to 1.5.1 are vulnerable to unauthenticated PHP object injection.

Uppercase versions below 1.2.2 are vulnerable to unauthenticated local file inclusion.

There is an unauthenticated PHP Object Injection vulnerability in Konsept <= 1.9 versions.

There is an unauthenticated local file inclusion vulnerability in Solene Core versions <= 2.3.2.

In Alukas versions below 3.0.0, there is an unauthenticated PHP Object Injection vulnerability.

There is an unauthenticated PHP Object Injection vulnerability in PressMart versions <= 1.2.26.

A buffer overflow vulnerability exists in Zephyr's Bluetooth Classic Hands-Free Profile (HFP) driver. The cind_handle_values() function fails to validate the index against the 20-element ind_table[] array, allowing a remote attacker (malicious AG) to write a controlled value out of bounds, causing memory corruption and potential denial of service of the Bluetooth stack.

The EMV JobBank has a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels.

There is an unauthenticated local file inclusion vulnerability in Line Agency versions <= 1.3.1.

Versions of Etude up to 1.6 are vulnerable to unauthenticated local file inclusion. An attacker can exploit this vulnerability to gain access to system files.

There is an unauthenticated local file inclusion vulnerability in Eventicity versions <= 1.5.

Gunslinger versions up to 1.7 are vulnerable to unauthenticated local file inclusion.