CVE Vulnerability Catalog

The Absolute Privacy plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 2.1. This is due to missing nonce validation on the 'abpr_profileShortcode' function, allowing unauthenticated attackers to change user email and password via a forged request.

An issue was discovered in Avira Phantom VPN through 2.23.1 for macOS, causing the VPN client to insecurely configure the operating system. As a result, all IP traffic to the VPN server's IP address is sent in plaintext outside the VPN tunnel, allowing attackers to intercept this traffic.

A CSRF issue was discovered in LWsystems Benno MailArchiv version 2.10.1.

A vulnerability in KramerAV VIA Connect (2) and VIA Go (2) devices prior to version 4.0.1.1326 allows local code execution at the root level when the screen is visible and remote mouse connection is enabled.

In OPNsense Community Edition before version 23.7 and Business Edition before version 23.4.2, insecure permissions exist for the configd.socket file.

OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 were found to have insecure permissions on the /tmp directory. This vulnerability could allow a local attacker to access sensitive data or escalate privileges.

CVE-2023-38997 describes a directory traversal vulnerability in the Captive Portal templates of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2, allowing attackers to execute arbitrary system commands as root via a crafted ZIP archive.

HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service mesh incorrectly allows/denies access regardless of service identities. Fixed in 1.16.1.

gRPC contains a vulnerability that may lead to unwanted disconnects between clients and servers in exceptional cases. Three vectors were found that can lead to DoS attacks related to unbounded memory buffering and unbounded CPU consumption in the HPACK parser.

Adobe Dimension version 3.4.9 is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Dimension version 3.4.9 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by a XML Injection (aka Blind XPath Injection) vulnerability that could lead to minor arbitrary file system read. Exploitation of this issue does not require user interaction.

In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, a remote attacker with SNMPv2 write privileges may use a special SNMP request to gain full access to the device.

In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, a remote attacker with SNMPv2 write privileges may use a special SNMP request to gain full access to the device.

In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, an unauthenticated remote attacker can access upload-functions of the HTTP API. This might cause certificate errors for SSL-connections and might result in a partial denial-of-service.

In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, an authenticated remote attacker can execute code with root permissions with a specially crafted HTTP POST when uploading a certificate to the device.

In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 daemon.

In PHOENIX CONTACT's WP 6xxx series web panels in versions prior to 4.0.10, the SNMP daemon is running with root privileges, allowing a remote attacker with knowledge of the SNMPv2 r/w community string to execute system commands as root.

The FULL - Customer plugin for WordPress is vulnerable to Arbitrary File Upload via the /install-plugin REST route in versions up to and including 2.2.3 due to improper authorization. This allows authenticated attackers with subscriber-level permissions and above to execute code by installing plugins from arbitrary remote locations.

The Real Estate Manager plugin for WordPress is vulnerable to privilege escalation in versions up to and including 7.2 due to insufficient restriction on the 'rem_save_profile_front' function. This allows authenticated attackers with minimal permissions, such as a subscriber, to modify their user role by supplying the 'wp_capabilities' parameter during a profile update.