CVE Vulnerability Catalog

Unauthenticated Cross Site Scripting (XSS) in EmbedPress versions up to and including 4.5.6.

A heap-based buffer overflow vulnerability exists in the memcached client of Apache Portable Runtime Utility. This issue affects versions from 1.3.0 through 1.6.3.

A heap-based buffer overflow vulnerability exists in the redis client of Apache Portable Runtime Utility. This issue affects versions from 1.6.0 through 1.6.3. Users are recommended to upgrade to version 1.6.4, which fixes the issue.

Unauthenticated Cross Site Scripting (XSS) in Popup Maker versions up to and including 1.23.0.

Unauthenticated Cross Site Request Forgery (CSRF) in Tracking Code Manager versions up to and including 2.6.0.

Unauthenticated Cross Site Scripting (XSS) in Forminator versions up to and including 1.56.0.

Unauthenticated Cross Site Scripting (XSS) vulnerability in NextGEN Gallery versions up to 4.2.3. An attacker can inject malicious script without authentication.

Unauthenticated Broken Access Control vulnerability in JetFormBuilder versions up to 3.6.4.1. Allows unauthorized users to access functions they should not have permissions for.

Contributor Privilege Escalation vulnerability in Forminator versions up to 1.56.0. A user with Contributor role can escalate their privileges.

Unauthenticated Cross Site Scripting (XSS) vulnerability in JetEngine versions up to 3.8.13.1. An attacker can inject malicious script without authentication.

The apr_password_validate() function in APR-util versions 1.6.3 and earlier did not perform constant-time comparisons of hashes or passwords, potentially leaking their content via a side-channel timing attack, especially on platforms without crypt() such as Windows, BeOS, NetWare, or Android.

Cryptographic timing side-channel vulnerability in the backend authentication mechanism of OMICRON StationScout before version 3.05. Allows an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate clients. An attacker can gain full access to the system configuration, allowing modification, reset, or unauthorized alteration of system parameters or injecting network traffic into the connected network.

Cryptographic timing side-channel vulnerability in the backend authentication mechanism of OMICRON StationGuard before version 4.10. Allows an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate clients. An attacker can gain full access to the system configuration, allowing modification, reset, or unauthorized alteration of system parameters.

Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket() that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The mUniquePacketID field is read directly from the UDP wire-format packet header without bounds checking, causing the server to allocate one CacheItem per missing packet ID gap, exhausting available host memory and propagating an uncaught std::bad_alloc exception to std::terminate().

Missing Authorization vulnerability in Soflyy Breakdance allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Breakdance: from n/a before 2.7.

A security flaw has been discovered in Shibby Tomato 1.28.0000. This affects the function sub_40F88C of the file /tmp/ppp/wanoptions. The manipulation of the argument ppp_custom results in os command injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This project is superseded by FreshTomato.

In Apache CXF's DefaultEncryptingOAuthDataProvider, revoked access tokens still decrypt successfully, and TokenIntrospectionService reports active:true. The same applies to refresh tokens. This violates the RFC stipulations that 'The authorization server MUST invalidate the token.' and 'introspection of a revoked token MUST return {"active":false}'. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.

A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issue.

A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issue is the function new_qoslimit_start of the file /etc/qoslimit. The manipulation of the argument new_qoslimit_enable leads to os command injection. The attack may be initiated remotely. The exploit is publicly available and might be used. This project is superseded by FreshTomato.

The FormGent – Next-Gen AI Form Builder for WordPress plugin is vulnerable to Stored Cross-Site Scripting via form submission fields in all versions up to, and including, 1.9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.