CVE Vulnerability Catalog

SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system.

A vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. It affects an unknown part of the file /admin/edit.php. Manipulation of the argument ID leads to SQL injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be used.

A weakness has been identified in PHPJabbers Restaurant Menu Maker up to version 1.1. It affects some unknown functionality of the file /preview.php. Manipulation of the argument theme causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. It affects an unknown functionality of the file /admin/sales-reports-detail.php. Manipulation of the arguments fromdate/todate results in SQL injection. The attack can be launched remotely. The exploit has been released to the public and may be exploited.

A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. It affects an unknown function of the file /admin/view-appointment.php. Manipulation of the argument viewid leads to SQL injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

The fio tool (up to version 3.41) has a use-after-free vulnerability in the __parse_jobs_ini function in init.c. The attack requires local execution, and the exploit has been publicly disclosed.

A vulnerability has been found in fuyang_lipengjun platform 1.0. The impacted element is the function SysSmsLogController of the file /sys/smslog/queryAll. Such manipulation leads to improper authorization. The attack may be performed remotely. The exploit has been disclosed to the public and may be used.

In Liferay Portal 7.4.0 through 7.4.3.112 and Liferay DXP (listed versions), audit events record a user's password reminder answer. A remote authenticated user can obtain a user's password reminder answer via the audit events.

Insecure Direct Object Reference (IDOR) vulnerability with commerce order notes in Liferay Portal 7.3.5 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote authenticated users from one virtual instance to add a note to an order in a different virtual instance via the _com_liferay_commerce_order_web_internal_portlet_CommerceOrderPortlet_commerceOrderId parameter.

A flaw has been found in fuyang_lipengjun platform 1.0. The affected element is the function TopicCategoryController of the file /topiccategory/queryAll. This manipulation causes improper authorization. The attack is possible to be carried out remotely. The exploit has been published and may be used.

A vulnerability was detected in fuyang_lipengjun platform 1.0. It impacts the function TopicController of the file /topic/queryAll. The manipulation results in improper authorization. The attack can be executed remotely. The exploit is now public and may be used.

A vulnerability was detected in the fuyang_lipengjun platform 1.0 in the UserCouponController function of /usercoupon/queryAll. Manipulation leads to improper authorization, and the attack can be performed remotely. The exploit has been publicly disclosed and may be used.

Batch Engine in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 does not properly check permissions with import and export tasks, allowing remote authenticated users to access exported data via REST APIs.

DNN (formerly DotNetNuke) prior to version 10.1.0 allows arbitrary themes to be loaded through query parameters. If an installed theme had a vulnerability, it could be loaded on unsuspecting clients without the site owner's knowledge. This issue has been patched in version 10.1.0.

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

A vulnerability was found in D-Link DIR-823X (versions 240126/240802/250416) in an unknown functionality of /usr/sbin/goahead. Manipulation of the port argument leads to command injection. The attack can be initiated remotely and the exploit has been publicly disclosed.

In @conventional-changelog/git-client before version 2.0.0, an argument injection vulnerability exists in the getTags() API, allowing extra parameters to be passed to the git log command. This can lead to overwriting arbitrary files via the --output= option.

SCRAM (Salted Challenge Response Authentication Mechanism) is part of the SASL authentication mechanisms. Prior to version 3.2, the Java implementation of SCRAM contains a timing attack vulnerability because Arrays.equals was used to compare values such as client proofs and server signatures, performing a short-circuit comparison. Differences in execution time could allow an attacker to infer sensitive authentication material.

A restriction bypass vulnerability in is-localhost-ip version 2.0.0 could allow attackers to perform Server-Side Request Forgery (SSRF).

The Make Column Clickable Elementor plugin (up to version 1.6.0) contains a Stored XSS vulnerability due to improper input neutralization during web page generation. This allows an attacker to inject a persistent script.