CVE Vulnerability Catalog

The Neo | Barber Shop WordPress theme (neocut) by BuddhaThemes contains a Deserialization of Untrusted Data vulnerability, allowing Object Injection. This issue affects Neo | Barber Shop versions up to and including 3.5.

The Education Center WordPress theme (education) by ThemeREX contains an Improper Neutralization of Input During Web Page Generation vulnerability, allowing Reflected XSS. This issue affects Education Center versions up to and including 3.6.12.

The Dashboard Notes WordPress plugin (dashboard-notes) by MIGHTYminnow contains a Cross-Site Request Forgery (CSRF) vulnerability. This issue affects Dashboard Notes versions up to and including 1.0.3.

Before 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop Installer.exe install -package. An attacker able to provide a crafted package and convince a user to approve the Docker-signed UAC prompt could execute attacker-controlled installer actions as LocalSystem.

The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system.

A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, and this code runs with the privileges of the affected service account.

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion. This issue affects Werkstatt: from n/a through 4.8.3.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designthemes Whistle - Sports Club whistle-sports-club allows Reflected XSS. This issue affects Whistle - Sports Club: from n/a through 4.2.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Voldor voldor allows Reflected XSS. This issue affects Voldor: from n/a through 1.0.0.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Ogency ogency allows Reflected XSS. This issue affects Ogency: from n/a through 1.0.0.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Treck treck allows Reflected XSS. This issue affects Treck: from n/a through 1.0.0.

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.

Missing Authorization vulnerability in ThemeHunk Th Shop Mania th-shop-mania allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Th Shop Mania: from n/a through 1.9.1.

Deserialization of Untrusted Data vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-for-woocommerce allows Object Injection. This issue affects Product Configurator for WooCommerce: from n/a through 1.7.5.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Delight Star Inc. WP Associate Post R2 wp-associate-post-r2 allows Reflected XSS. This issue affects WP Associate Post R2: from n/a through 5.0.1.

Reflected XSS vulnerability in the AcyMailing SMTP Newsletter WordPress plugin. Improper input neutralization during page generation allows an attacker to inject malicious script.

Deserialization of untrusted data vulnerability in the Quiz And Survey Master WordPress plugin, allowing object injection.

Improper input validation vulnerability in Apache Camel Karavan. When a deployment is started, Karavan applies all resources from kubernetes.yaml without restricting resource kinds, security-sensitive pod options, or namespace.

Path traversal vulnerability in Apache Camel Karavan. A project file name supplied via the API is used verbatim as a path segment, allowing file writes outside the project directory to any writable location.

In Apache CXF, STSTokenValidator stored the SAML assertion signature verification result in an object shared across all requests, allowing one request to read another's result. A remote, unauthenticated attacker could send a forged assertion signed with an untrusted certificate that was accepted as trusted without reaching the STS. Only services using STSTokenValidator without alwaysValidateToSts set are affected.