CVE Vulnerability Catalog

A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.

Wtyczka Online Booking & Scheduling Calendar dla WordPressa od vcita jest podatna na atak typu Stored Cross-Site Scripting poprzez parametr 'business_id' w wersjach do 4.3.0 włącznie, z powodu niewystarczającej sanitizacji wejścia i ucieczki wyjścia. Umożliwia to nieautoryzowanym atakującym wstrzykiwanie dowolnych skryptów webowych na stronach, które będą wykonywane, gdy użytkownik uzyska dostęp do zainfekowanej strony.

A vulnerability in Microsoft Edge (Chromium-based) allows for elevation of privilege, potentially leading to unauthorized access to the system.

Wtyczka User Email Verification dla WooCommerce w WordPressie jest podatna na obejście uwierzytelnienia w wersjach do 3.5.0 włącznie. Problem wynika z słabości w generowaniu losowych tokenów w funkcji resend_verification_email, co pozwala nieautoryzowanym atakującym na podszywanie się pod użytkowników i wywoływanie weryfikacji adresu e-mail dla dowolnych kont, w tym kont administracyjnych.

The Tenda AC8V4.0-V16.03.34.06 device was found to contain a stack overflow vulnerability via the shareSpeed parameter in the fromSetWifiGusetBasic function.

Memory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption, potentially allowing arbitrary code execution. This affects Firefox for Android, Firefox, and Focus for Android versions prior to 112.

Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This affects Firefox for Android, Firefox, and Focus for Android versions prior to 112.

Firefox improperly handled downloads of files ending in .desktop, which can be interpreted to run attacker-controlled commands. This bug only affects Firefox for Linux on certain distributions.

When handling the filename directive in the Content-Disposition header, the filename would be truncated if it contained a NULL character. This could lead to reflected file download attacks potentially tricking users to install malware.

Multiple race conditions in font initialization could have led to memory corruption and execution of attacker-controlled code. This affects Firefox for Android, Firefox, and Focus for Android versions prior to 112.

An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

ChuanhuChatGPT, a graphical user interface for ChatGPT, has a vulnerability in versions 20230526 and prior that allows unauthorized access to the config.json file when authentication is not configured. An attacker can exploit this vulnerability to steal API keys from the configuration file.

The Mobatime web application has a vulnerability allowing unrestricted upload of files with dangerous types, enabling a malicious user to upload a web shell to the web server.

Wtyczka Web Directory Free dla WordPressa jest podatna na atak typu SQL Injection poprzez parametr 'post_id' w wersjach do 1.6.8 włącznie, z powodu niewystarczającego zabezpieczenia dostarczonego przez użytkownika oraz braku odpowiedniego przygotowania istniejącego zapytania SQL. Umożliwia to uwierzytelnionym atakującym z uprawnieniami na poziomie współpracownika dodawanie dodatkowych zapytań SQL do już istniejących zapytań.

The BT21 x BTS Wallpaper app 12 for Android allows unauthorized apps to request permission to modify the database storing user preferences, which is loaded into memory when the app is opened. An attacker can tamper with this data to cause an escalation of privilege attack.

Vite, a frontend tooling, has a vulnerability that allows bypassing server options (`server.fs.deny`) using double forward-slash (//). This enables unauthenticated users to read files from the Vite application's root path, including default `fs.deny` settings.

OpenProject is web-based project management software. In versions prior to 12.5.6, the `robots.txt` file was publicly accessible, revealing identifiers of all public projects even when the entire instance required login.

Heap buffer overflow in the erofs_read_one_data function in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image.

A heap buffer overflow in the erofsfsck_dirent_iter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image.