CVE Vulnerability Catalog

The Developer Loggers for Simple History plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.5 via the enabled_loggers parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.

A cross-site scripting (XSS) vulnerability in the Search widget in Liferay Portal and Liferay DXP allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_portal_search_web_portlet_SearchPortlet_userId parameter.

Liferay Portal 7.3.0 through 7.4.3.111 and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, and 7.3 GA through update 35 does not perform an authorization check when users attempt to view a display page template. Remote attackers can view display page templates via crafted URLs.

A stored XSS vulnerability in the search-autootaxi.php endpoint of the ATSMS web application. Improper input sanitization allows injection of arbitrary JavaScript, which is stored and executed when the report page is accessed.

The Human Resource Integrated System 1.0 by code-projects is vulnerable to Cross Site Scripting (XSS) in the Add Child Information section, specifically in the Childs Name field. This allows an attacker to inject malicious scripts that may execute in the administrator's browser.

A Cross Site Scripting (XSS) vulnerability was found in code-projects Document Management System 1.0. An attacker can inject malicious JavaScript code in the "Company" field when adding files, allowing theft of the admin's session cookies.

W systemie HumanSuite firmy Patika Global Technologies występuje podatność na ataki typu Cross-Site Scripting (XSS) oraz phishing z powodu niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych. Problem dotyczy wersji przed 53.21.0.

Podatność CVE-2025-8057 dotyczy systemu HumanSuite firmy Patika Global Technologies i polega na obejściu autoryzacji poprzez klucz kontrolowany przez użytkownika. Problem ten występuje w wersjach przed 53.21.0.

In the Linux kernel, the net/mlx5 HWS function hws_action_get_shared_stc_nic allocates memory for shared_stc when an invalid stc_type is provided, but jumps to unlock_and_out without freeing it, causing a memory leak. The fix jumps to the free_shared_stc label to ensure proper cleanup.

A vulnerability in the Linux kernel's mISDN hfcpci driver causes an ODEBUG warning when unloading the module if the timer is not initialized. The issue occurs with CONFIG_DEBUG_OBJECTS_TIMERS enabled and triggers a WARNING message. The fix initializes the timer using the DEFINE_TIMER macro and uses mod_timer instead of manual timeout updates.

In the Linux kernel, the net/mlx5 driver triggers a lockdep assertion during sync reset unload event handling. The issue is caused by double-locking the devlink lock when the reset is initiated via the devlink reload fw_activate option.

In the Linux kernel, the fbnic driver invoked phylink_resume from the service task without holding the required RTNL lock, triggering a locking assertion during PM resume. The fix moves phylink resume out of service_task into the open/close paths, enforcing correct locking and bringing the phylink interface online together with the network interface.

In the Linux kernel, the net/mlx5 HWS error path of hws_pool_buddy_init() does not free the allocator structure itself during buddy allocator cleanup, causing a memory leak. The fix adds the missing kfree() to properly release all allocated memory.

W systemie Workcube ERP występuje podatność na atak typu XSS (Cross-site Scripting) z powodu niewłaściwego neutralizowania danych wejściowych podczas generowania stron internetowych. Problem dotyczy wersji od V12 do V14 przed wersją Cognitive.

Podatność CVE-2025-7355 dotyczy aplikacji Beefull, w której występuje możliwość obejścia autoryzacji poprzez klucz kontrolowany przez użytkownika. Umożliwia to wykorzystanie zaufanych identyfikatorów.

In the Linux kernel trace/fgraph subsystem, a missing unregister of the PM notifier occurs when start_graph_tracing fails, causing a warning on the next write to function_profile_enabled. The fix adds unregister_pm_notifier in the exception path.

In the Linux kernel, in the io_uring/kbuf subsystem, when importing and using buffers, buf->len is considered unsigned, but it is converted to signed int when committing. This can lead to unexpected behavior if the buffer is large enough to be interpreted as a negative value. The fix makes the min_t calculation unsigned.

In the Linux kernel, in the drm/msm/dpu driver, drm_atomic_get_new_connector_state() can return NULL if the connector is not part of the atomic state. A missing check leads to a NULL pointer dereference in dpu_encoder_needs_modeset. The fix adds a NULL check, following the pattern used in dpu_encoder_update_topology().

In the Linux kernel SMB filesystem (fs/smb), an inconsistent reference count update was found in smb2_compound_op. This can lead to resource leaks because the -ENOMEM error path does not drop the cfile reference. The fix adds a goto label "out" to ensure cleanup logic is executed.

In the Linux kernel io_uring/kbuf subsystem, ring-provided buffers are mapped from userspace, so their lengths should be read with READ_ONCE() to avoid inconsistent reads. The fix ensures a stable read of the buffer length and stops the incremental commit loop when a zero-sized buffer is encountered.