CVE Vulnerability Catalog

A buffer overflow vulnerability was discovered in TP-LINK Archer C50v2, C20v1, and C2v1 routers when processing crafted data. This may lead to a Denial of Service (DoS).

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to an insecure direct object reference vulnerability that could allow an unauthenticated user to view profile information, including user login names and encrypted passwords.

AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a directory traversal vulnerability that could allow an unauthenticated user to directly access any file outside the webroot.

The Easy Captcha plugin in versions up to 1.0 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.

Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.0.5, and 6.1 prior to 6.1.2 could be susceptible to authorization rule misconfiguration if the application uses requestMatchers(String) and multiple servlets, one of them being Spring MVC’s DispatcherServlet.

In Hazelcast versions 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services do not properly check client permissions, allowing authenticated users to execute tasks on members without the required permissions.

The CodePeople Booking Calendar Contact Form plugin versions <= 1.2.40 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious JavaScript code.

Podatność CVE-2022-34155 dotyczy wtyczki miniOrange OAuth Single Sign On – SSO (OAuth Client) i pozwala na ominięcie procesu uwierzytelniania. Problem ten występuje w wersjach od n/a do 6.23.3.

Ap Page Builder, in versions lower than 1.7.8.2, could allow a remote attacker to send a specially crafted SQL query to the product_one_img parameter to retrieve the information stored in the database.

The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'edit_group' handler in versions up to and including 5.5.2. This allows authenticated attackers with group ownership to update group options, including the 'associate_role' parameter, which defines the member's role.

The ProfileGrid plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'profile_magic_check_smtp_connection' function in versions up to and including 5.5.1. This allows authenticated attackers with subscriber-level permissions or above to arbitrarily update site options.

The Export and Import Users and Customers plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'hf_update_customer' function called via an AJAX action in versions up to and including 2.4.1.

xHTTP 72f812d has a double free in close_connection in xhttp.c via a malformed HTTP request method.

On Crestron 3-Series Control Systems before version 1.8001.0187, crafting and sending a specific BACnet packet can cause a crash.

The XPRTLD web application in Veritas InfoScale Operations Manager (VIOM) before version 8.0.0.410 allows an authenticated attacker to upload all types of files to the server. An authenticated attacker can then execute the malicious file, leading to command execution on the remote server.

In iperf3 versions before 3.14, a vulnerability allows peers to cause an integer overflow and heap corruption via a crafted length field.

CVE-2023-34141 describes a command injection vulnerability in the access point management feature of Zyxel ATP, USG FLEX, USG20(W)-VPN, VPN, and NXC firmware. An attacker on the local network can trick an authorized administrator into adding their IP address to the managed AP list, allowing them to execute OS commands on the affected device.

CVE-2023-34139 is a command injection vulnerability in the Free Time WiFi hotspot feature of Zyxel USG FLEX and VPN devices. An unauthenticated, LAN-based attacker could execute OS commands on an affected device.

CVE-2023-34138 describes a command injection vulnerability in the hotspot management feature of the Zyxel ATP, USG FLEX, and VPN series firmware versions 4.60 through 5.36 Patch 2. A LAN-based attacker could execute OS commands on an affected device if they trick an authorized administrator into adding their IP address to the list of trusted RADIUS clients.