CVE Vulnerability Catalog

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the qsm_dashboard_delete_result function. This affects all versions up to and including 10.3.1.

The Appointment Booking and Scheduling Calendar Plugin – WP Timetics plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the update and register_routes functions in all versions up to, and including, 1.0.36. This makes it possible for unauthenticated attackers to view and modify booking details.

W serii OpenBlocks w wersjach przed FW5.0.8 występuje problem z ominięciem uwierzytelniania, który może pozwolić atakującemu na ominięcie uwierzytelnienia administratora i zmianę hasła.

The Phlox theme for WordPress (all versions up to and including 2.17.7) is vulnerable to Stored Cross-Site Scripting via the `data-caption` HTML attribute due to insufficient input sanitization and output escaping. An authenticated attacker with Contributor-level access or above can inject arbitrary web scripts into pages that execute whenever a user accesses the injected page.

Wtyczka FS Registration Password dla WordPressa jest podatna na eskalację uprawnień poprzez przejęcie konta we wszystkich wersjach do i włącznie z 1.0.1. Problem wynika z niewłaściwej walidacji tożsamości użytkownika przed aktualizacją hasła.

Wtyczka BuddyPress Xprofile Custom Field Types dla WordPressa jest podatna na nieautoryzowane usuwanie plików z powodu niewystarczającej walidacji ścieżek plików w funkcji 'delete_field' we wszystkich wersjach do i włącznie z 1.2.8. Umożliwia to uwierzytelnionym atakującym, posiadającym dostęp na poziomie Subskrybenta i wyżej, usuwanie dowolnych plików na serwerze.

Wtyczka AS Password Field w domyślnym formularzu rejestracyjnym dla WordPressa jest podatna na eskalację uprawnień poprzez przejęcie konta we wszystkich wersjach do 2.0.0 włącznie. Problem wynika z braku odpowiedniej weryfikacji tożsamości użytkownika przed aktualizacją hasła.

The iccDEV library in versions 2.3.1 and below has undefined behavior in the CIccCLUT::Init function, which initializes and sets the size of a CLUT. This issue is fixed in version 2.3.1.1.

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have a Heap-based Buffer Overflow in its CIccMBB::Validate function which checks tag data validity. This issue is fixed in version 2.3.1.1.

The iccDEV library in versions 2.3.1.1 and below contains Use After Free, Heap-based Buffer Overflow, Integer Overflow or Wraparound, and Out-of-bounds Write vulnerabilities in the CIccSparseMatrix::CIccSparseMatrix function. This issue is fixed in version 2.3.1.2.

The iccDEV library in versions 2.3.1.1 and earlier is prone to Undefined Behavior (UB) and Out of Memory errors. This issue is fixed in version 2.3.1.2.

An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent. A local attacker may influence the application to load a DLL from an attacker-controlled location, potentially resulting in arbitrary code execution.

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in the CIccXform::Create() function, where it deletes the hint. This issue is fixed in version 2.3.1.1.

The iccDEV library in versions 2.3.1 and below contains overflows and underflows in the CIccXmlArrayType::ParseTextCountNum() function. This vulnerability affects users processing ICC color profiles. The issue is fixed in version 2.3.1.1.

In dpe, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. User interaction is not needed for exploitation.

In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

In the dpe component, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. User interaction is needed for exploitation.

In dpe, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. User interaction is needed for exploitation.

In the geniezone component, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. User interaction is not needed for exploitation.