CVE Vulnerability Catalog

The 404 Redirection Manager plugin version 1.0 for WordPress contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through unsanitized user input.

The WordPress Booking Calendar Contact Form plugin version 1.0.23 contains an unauthenticated blind SQL injection vulnerability in the shortcode function that fails to sanitize the calendar parameter before using it in database queries.

The WordPress Booking Calendar Contact Form plugin version 1.0.23 contains an unauthenticated blind SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter.

WordPress CP Polls version 1.0.8 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through unsanitized file upload functionality. Attackers can upload files containing script payloads with event handlers, enabling arbitrary JavaScript execution in the browsers of users viewing the affected content.

Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a path traversal vulnerability in the documentName parameter of the /safe/selfservice/openselfservicedocument endpoint. This allows an authenticated attacker with any role or permission level to traverse out of the intended document directory and download arbitrary files accessible to the application.

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains missing authorization checks on multiple web application endpoints. An authenticated attacker with minimal privileges can access endpoints that are not visible in the frontend but remain directly reachable.

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an incorrect authorization vulnerability in the WebSocket communication used by the SafeController WebMessageBroker. An authenticated attacker with valid low-privileged branch user credentials can manipulate WebSocket messages, allowing access to restricted functions in other branches.

The Wertheim SafeController Family 65000, AssemblyVersion 6.11.8130.22319, uses weak custom cryptographic algorithms with hard-coded cryptographic keys to protect communication. An attacker in a man-in-the-middle position can decrypt the data traffic.

The Wertheim SafeController 5400 (AssemblyVersion 6.11.8130.22320) uses RS-485 communication between the server and the microcontroller without cryptographic protection. An attacker with access to the communication path can sniff and replay RS-485 messages.

The application executing the JavaScript script embedded in the PDF within the sandbox fails to intercept some dangerous interfaces, allowing remote scripts to be loaded and resulting in arbitrary code execution.

Multiple printer drivers from Ricoh and Konica Minolta contain a privilege escalation vulnerability. An attacker with local access can elevate privileges using a specially crafted driver.

Quick.CMS deserializes user-controlled data received over plaintext HTTP without ensuring integrity or authenticity. Attackers can tamper with serialized payloads in transit and inject malicious objects, leading to remote code execution. Exploitation is triggered automatically when an administrator accesses the admin panel.

Vulnerability in Yealink SIP-T46U version 108.86.0.118 in the Web FastCGI Service component (mod_webd.BlueToothTest function in /api/inner/bttest). Manipulation of btMac/pin/reserved arguments leads to stack-based buffer overflow. Attack requires local network access.

Vulnerability in Yealink SIP-T46U version 108.86.0.118 in the Firmware Chunk Upload Handler component (sprintf function in /api/upgrade/upgrade). Manipulation of uid/start_offset arguments leads to stack-based buffer overflow. Attack requires local network access.

Vulnerability in Yealink SIP-T46U version 108.86.0.118 in the Firmware Chunk Upload Handler component (mod_upgrade.SparePartsUpload function in /api/upgrade/accupgradebychunk). Manipulation of uid argument leads to stack-based buffer overflow. Attack requires local network access.

Vulnerability in Yealink SIP-T46U version 108.87.50.1 in the Web FastCGI Service component (StartReportInformation function in /api/inner/beforewifitest). Manipulation of port argument leads to stack-based buffer overflow. Attack requires local network access.

Vulnerability in the kernel driver dvdfabio.sys in DVDFab Virtual Drive 2.0.0.5. An unknown function in the library leads to improper privilege management. Local access required. Exploit has been published.

A security flaw was discovered in Qihoo 360 Total Security 6.0 affecting the RpcStringBindingComposeW function of the Nucleus Engine Monitoring Logic component. Manipulating the NetworkAddr argument leads to protection mechanism failure. The attack requires local access and the exploit has been publicly released.

A vulnerability was found in ShopXO up to version 6.7.1 in the functions OrderClose, OrderSuccess, PayLogOrderClose, and GoodsGiveIntegral in the file app/api/controller/Crontab.php of the Scheduled Task Endpoint component. Manipulation can lead to authorization bypass. The attack can be executed remotely, and the exploit has been publicly disclosed.

A stack-based buffer overflow vulnerability has been detected in the libeay32.dll.html library of TinyWeb Server up to version 1.94 on Win32. The attack involves manipulating the Authorization argument in the Header Handler component. The exploit is publicly available and the vendor did not respond.