CVE Vulnerability Catalog

Arbitrary code execution vulnerability in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows changing XCom sidecar image and resources via Airflow connection. Exploitation requires elevated permissions (Op or Admin).

Zulip, a team collaboration tool, has a cross-site scripting (XSS) vulnerability in tooltips on the message feed. An attacker can craft a malicious topic for a message that, when hovered over by a victim, executes JavaScript code controlled by the attacker.

Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allows arbitrary file overwrite and possibly code execution via crafted world data that contains a symlink.

In ebankIT 6, the public endpoints /public/token/Email/generate and /public/token/SMS/generate allow generation of OTP messages to any e-mail address or phone number without validation. It cannot be exploited with e-mail addresses or phone numbers that are registered in the application.

The Supsystic Easy Google Maps plugin versions up to 1.11.7 has a Cross-Site Request Forgery (CSRF) vulnerability. An attacker can exploit this flaw to perform unauthorized actions on behalf of an authenticated user.

The WooCommerce Product Vendors plugin versions <= 2.1.76 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts in the user's context.

The WooCommerce Follow-Up Emails (AutomateWoo) plugin versions up to 4.9.40 contains an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious JavaScript code.

The EventPrime plugin versions up to 2.8.6 have an unauthenticated reflected XSS (Cross-Site Scripting) vulnerability. An attacker can exploit this flaw to inject malicious scripts in the user's context.

The Awesome Motive Duplicator Pro plugin versions up to 4.5.11 contain an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.

The vulnerability in ntpd-rs, an NTP implementation written in Rust, is due to the lack of validation of NTS cookie lengths in received NTP packets. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects.

The Talend Data Catalog remote harvesting server before version 8.0-20230413 contains an /upgrade endpoint that allows an unauthenticated WAR file to be deployed on the server.

A lateral privilege escalation vulnerability in XXL-Job v2.4.1 allows users to execute arbitrary commands on another user's account via a crafted POST request to the /jobinfo/ component.

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via the 'id' parameter in /eval/admin/manage_task.php.

In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the WFTPD directory. NOTE: this is a product from 2006.

IceCMS v1.0.0 has insecure permissions, leading to unauthorized access to the API and disclosure of sensitive information.

Brak sprawdzenia uprawnień dostępu w kliencie M-Files przed wersją 23.5.12598.0 (z wyłączeniem 23.2 SR2 i nowszych) umożliwia podniesienie uprawnień za pomocą aplikacji rozszerzeń interfejsu użytkownika.

A vulnerability in CBOT Chatbot related to improper enforcement of message integrity during transmission in a communication channel allows an adversary to conduct an Adversary in the Middle (AiTM) attack.

A vulnerability in CBOT Chatbot allows authorization bypass through a user-controlled key, leading to authentication abuse and bypass.