CVE Vulnerability Catalog

A cross-site scripting (XSS) vulnerability has been found in code-projects Simple Inventory System 1.0. It affects an unknown part of the file /register.php in the User Registration component. Manipulation of the last_name argument leads to XSS. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

A flaw has been found in code-projects Simple Inventory System 1.0. The issue affects some unknown functionality of the file inventorymanagement.sql in the Database Backup File Handler component. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been published and may be used.

A vulnerability was detected in open62541 up to 1.5.5 in the function UA_DataValue_backend_copyRange of the History Backend component. Manipulation leads to use after free. The attack can be launched remotely, and the exploit is publicly available.

A cross-site scripting vulnerability was found in Employee Leave Managing System 1.0 in the employee profile update function. Manipulation of the Name argument in editaction.php allows remote script execution. The exploit has been publicly disclosed.

The WordPress plugin '爱采集数据采集和发布插件' through version 1.0.0 does not restrict which handler methods can be invoked and lacks capability or nonce checks, allowing unauthenticated users to create user accounts and taxonomy terms.

GROWI contains an incorrect authorization vulnerability. If exploited, an unauthenticated attacker could retrieve other users' bookmark data.

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.

GROWI contains an authorization bypass vulnerability through user-controlled key in bookmark folder APIs. An authenticated attacker could retrieve, tamper with, and/or delete other users' bookmark data.

NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter.

NSP is vulnerable to stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker can embed malicious code that executes when another user views the content.

WaveSuite is affected by insufficient role-based access control in the CPB Log Files feature. An authenticated low-privilege user can access pages restricted to higher-privilege roles by directly requesting the URL in the browser.

A weakness has been identified in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This impacts the function AdminDao.doGet of the file code/src/service/AdminDao.java of the component Administrative Servlet. Executing a manipulation of the argument action can lead to authorization bypass. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

A security flaw was discovered in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. The function CourseDao.course_ranking in CourseDao.java is vulnerable to SQL injection via the cno argument. The attack can be initiated remotely, and the exploit is public.

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The function monitored_item_event_filter_treatment_bs__init_event_filter_ctx_and_result in subscription_mgr.c is vulnerable to use after free via the EventFilter argument. The attack may be performed remotely, and the exploit is public. A patch is available.

A vulnerability was determined in Systerel S2OPC up to 1.7.3 in the function set_range_matrix_on_string_array of src/Common/opcua_types/sopc_builtintypes.c in the String Array Range Writing component. This manipulation causes out-of-bounds read. The attack can be carried out remotely. The project was informed but has not responded.

A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703 in the setUploadSetting function of /cgi-bin/cstecgi.cgi. Manipulation of the FileName argument leads to a stack-based buffer overflow. The attack can be executed remotely, and the exploit has been made public.

A SQL injection vulnerability was found in itsourcecode Online Medicine Delivery System 1.0 in the Customer::find_phone function of /passwordrecover.php, part of the Password Recovery Interface. Manipulation of the phonenumber argument leads to SQL injection. Remote exploitation is possible, and the exploit has been disclosed.

A SQL injection vulnerability was found in itsourcecode Online Medicine Delivery System 1.0 in the loadResultList function of /index.php?q=product, part of the Product Category Filter Interface. Manipulation of the Category argument leads to SQL injection. The attack may be launched remotely, and the exploit has been published.

In ash_phoenix (from 1.2.17 before 2.3.25), a vulnerability allows disclosure of sensitive information in error messages. The entire raw submitted param map is written into an exception message, potentially exposing secrets in logs and crash reports.

A Permissive Regular Expression vulnerability in ash-project ash_phoenix lets a remote client select the tenant an Ash application uses, or degrade the request, by sending a crafted Host header. AshPhoenix.Helpers.get_subdomain/2 stripped the root domain with String.replace(host, ~r/.?#{root_host}/, ""), causing wildcard matching and global unanchored replacement. The issue affects ash_phoenix from 2.1.26 before 2.3.25.