CVE Vulnerability Catalog

The Simple Light Weight Social Share plugin versions <= 2.0 has a stored Cross-Site Scripting (XSS) vulnerability with admin+ authorization. An attacker can exploit this vulnerability to inject malicious scripts that will be executed in the user's browser context.

The Noël Jackson Art Direction plugin versions <= 0.2.4 has a stored Cross-Site Scripting (XSS) vulnerability for users with contributor privileges and above.

The EmbedPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the 'embedpress_calendar' shortcode in versions up to and including 3.8.2 due to insufficient input sanitization and output escaping on user supplied attributes.

The EmbedPress plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the 'admin_post_remove' and 'remove_private_data' functions in versions up to and including 3.8.2. This allows authenticated attackers with subscriber privileges or above to delete plugin settings.

The Smartypants SP Project & Document Manager plugin versions up to 4.67 contains a stored Cross-Site Scripting (XSS) vulnerability with admin authorization. An attacker can exploit this flaw to inject malicious scripts that will be executed in the victim's browser context.

The AnsPress plugin versions up to 4.3.0 contain a stored Cross-Site Scripting (XSS) vulnerability in the context of authorization (editor+).

An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS, which insecurely configures the operating system, resulting in local network traffic being sent in plaintext outside the VPN tunnel. This allows an adversary to trick the victim into sending arbitrary IP traffic in plaintext.

An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS, causing all IP traffic to the VPN server's IP address to be sent in plaintext, even if not generated by the VPN client. This allows an adversary to trick the victim into sending plaintext traffic and deanonymize them.

WireGuard client version 0.5.3 on Windows insecurely configures the operating system and firewall, leading to the blocking of traffic to a local network using non-RFC1918 IP addresses. This allows an adversary to trick the victim into blocking IP traffic to selected addresses and services even while the VPN is enabled.

An issue was discovered in LWsystems Benno MailArchiv version 2.10.1 that allows attackers to exploit an XSS vulnerability via JavaScript content in a mailbox.

The Crash Reporter (crash_reporter.php) component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 mishandles input sanitization.

In OPNsense Community Edition before version 23.7 and Business Edition before version 23.4.2, there is a cross-site scripting (XSS) vulnerability in the act parameter of system_certmanager.php that allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

A reflected XSS vulnerability in OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 in the component /ui/diagnostics/log/core/ allows attackers to inject arbitrary JavaScript via the URL path.

A Cross-Site Request Forgery (CSRF) vulnerability in the System Halt API (/system/halt) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

An open redirect in the Login page of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL.

In Sentry, an error tracking and performance monitoring platform, there is a vulnerability that allows an attacker to retrieve a valid access token for another user during the OAuth token exchange. This issue affects versions from 10.0.0 to prior to 23.7.2 due to incorrect credential validation.

The uthenticode library prior to the 2.x series did not check Extended Key Usages (EKU) in certificates, violating the Authenticode X.509 certificate profile. This allows a malicious user to create a 'signed' PE file that uthenticode would mistakenly validate using a certificate that is not entitled to produce code signatures.

A flaw was found in the exFAT driver of the Linux kernel related to the file name reconstruction function. This vulnerability allows a local privileged attacker to overflow the kernel stack, potentially leading to privilege escalation.

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause memory corruption when an authenticated user opens a tampered log file from GP-Pro EX.

Adobe Dimension version 3.4.9 is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR.