CVE Vulnerability Catalog

A vulnerability has been found in the Agro-School Management System 1.0 affecting the doAddQuestion function in the btn_functions.php file. Manipulation of the Question argument leads to cross-site scripting (XSS) attacks.

A vulnerability was found in 07FLY CRM up to version 1.2.0, leading to cross site scripting (XSS) attacks through manipulation of the User Profile Handler component code. The attack can be initiated remotely.

In JetBrains Ktor versions before 2.3.1, headers containing authentication data could be added to the exception's message.

A vulnerability has been found in Guangdong Pythagorean OA Office System up to version 4.50.31, affecting an unknown functionality of the Schedule Handler component. Manipulation of the argument 'description' leads to cross site scripting.

A vulnerability was found in SourceCodester Lost and Found Information System 1.0 that allows basic cross site scripting attacks through manipulation of the First Name/Middle Name/Last Name arguments on the Manage User Page.

A vulnerability was found in yiwent Vip Video Analysis 1.0, affecting some unknown functionality of the file admin/admincore.php. The manipulation leads to cross site scripting (XSS) attacks that can be launched remotely.

A vulnerability was found in BeipyVideoResolution up to version 2.6, allowing cross site scripting attacks through manipulation in an unknown function of the file admin/admincore.php.

A vulnerability was found in SourceCodester Local Service Search Engine Management System version 1.0 that allows cross-site scripting (XSS) attacks through manipulation of the POST parameter in the /admin/ajax.php file. Inputting a malicious script like <script>alert(document.cookie)</script> can lead to unauthorized access to user data.

The Calendar app for Nextcloud discloses some internal paths of the website when the SMTP server is unavailable. It is recommended to update the Calendar app to version 3.5.5 or 4.2.3.

Nextcloud Mail is a mail app in Nextcloud that is vulnerable to a blind SSRF attack. This attack allows sending GET requests to services running on the same web server.

Craft is a CMS for creating custom digital experiences on the web. The platform does not filter input and encode output in Quick Post validation error message, which can deliver an XSS payload.

An information disclosure vulnerability in curl before v8.1.0 during HTTP(S) transfers. If the same handle was previously used for a PUT request with a read callback and then for a POST with CURLOPT_POSTFIELDS set, libcurl may erroneously invoke the read callback and send wrong data or use memory after free.

The Object module in Liferay Portal versions 7.4.3.4 to 7.4.3.60 and Liferay DXP 7.4 before update 61 does not segment object definitions by virtual instance in searches. This allows remote authenticated users in one virtual instance to view object definitions from a second virtual instance.

The Object module in Liferay Portal versions 7.4.3.4 to 7.4.3.48 and Liferay DXP 7.4 before update 49 does not properly isolate objects in different virtual instances. This allows remote authenticated users in one virtual instance to view objects in a different virtual instance via the OAuth 2 scope administration page.

Dgraph is a distributed GraphQL database. Existing audit logs are vulnerable to brute force attacks due to nonce collisions — the first 12 bytes come from a baseIv and the last 4 bytes from the length of the encrypted log line, causing the same nonce to be reused many times. All audit logs generated by Dgraph versions <v23.0.0 are affected.

Jenkins SAML Single Sign On (SSO) Plugin 2.1.0 and earlier unconditionally disables SSL/TLS certificate validation for connections to miniOrange or the configured IdP to retrieve SAML metadata.

A vulnerability in Solid Edge SE2023 (versions < V223.0 Update 3 and < V223.0 Update 2) is an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This could allow an attacker to disclose sensitive information.

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1) and CC716 (All versions >= V2.0 < V2.1). The filename in the upload feature of the web based management of the affected device is susceptible to a path traversal vulnerability. This could allow an authenticated privileged remote attacker to write any file with the extension `.db`.

SCALANCE LPE9403 (versions < V2.1) contains a path traversal vulnerability in the `deviceinfo` binary via the `mac` parameter. An authenticated attacker with SSH access can read the contents of any file named `address`.

A vulnerability in SCALANCE LPE9403 (versions < V2.1) is that the `i2c` mutex file is created with permissions `-rw-rw-rw-`. An authenticated attacker with SSH access could interfere with the integrity of the mutex and the data it protects.