CVE Vulnerability Catalog

In the Linux kernel, a refcount leak in nfsd_set_fh_dentry() occurs when an NFSv3 (or v2) client uses a pseudo-root filehandle. The export is stored in svc_fh but the reference is dropped, leading to a double free and potential use-after-free.

The WP 2FA WordPress plugin does not generate backup codes with enough entropy, which could allow attackers to bypass the second factor by brute forcing them.

Nieautoryzowany zdalny atakujący może wysłać specjalnie przygotowane polecenie odczytu Modbus do urządzenia, co prowadzi do odmowy usługi.

Cross-Site Scripting (XSS) vulnerability stored in the Taclia web application, where the uploaded SVG images are not properly sanitized. This allows attackers to embed malicious scripts in SVG files such as image profiles, which are then stored on the server and executed in the context of any user who accesses the compromised resource.

A Looker user with Developer role could create a database connection using Denodo driver and manipulate LookML to execute a malicious command. Looker-hosted and Self-hosted are vulnerable; hosted is mitigated, self-hosted needs upgrade.

A Looker user with Developer role could create a database connection using IBM DB2 driver and manipulate LookML to execute a malicious command due to inadequate filtering. Looker-hosted and Self-hosted are vulnerable; hosted is mitigated, self-hosted needs upgrade.

An attacker with viewer permissions in Looker could craft a malicious URL that, when opened by a Looker admin, would execute an attacker-supplied script. Exploitation required at least one Looker extension installed on the instance.

A sensitive information disclosure vulnerability exists in the error handling component of ATISoluciones CIGES Application version 2.15.6 and earlier. When certain unexpected conditions trigger unhandled exceptions, the application returns detailed error messages and stack traces to the client. This may expose internal filesystem paths, SQL queries, database connection details, or environment configuration data to remote unauthenticated attackers. This issue allows information gathering and reconnaissance but does not enable direct system compromise.

A Server-Side Request Forgery (SSRF) vulnerability was found in Streamity Xtream IPTV Player up to version 2.8, in the file public/proxy.php. The flaw can be exploited remotely and a public exploit is already available. Version 2.8.1 contains the fix (commit c70bfb8d36b47bfd64c5ec73917e1d9ddb97af92).

A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. Manipulation of the txtconfirm_password argument causes SQL injection, exploitable remotely. The exploit has been published and may be used.

W systemie śledzenia COVID itsourcecode w wersji 1.0 wykryto podatność, która dotyczy nieznanego przetwarzania pliku /login.php. Manipulacja argumentem 'code' prowadzi do wstrzyknięcia SQL.

Wtyczka Broken Link Manager dla WordPressa w wersji do 0.6.5 nie sanitizuje i nie ucieka parametru przed jego wyświetleniem na stronie, co prowadzi do podatności na Reflected Cross-Site Scripting. Może to być wykorzystane przeciwko użytkownikom o wysokich uprawnieniach, takim jak administratorzy.

The Guest posting / Frontend Posting / Front Editor WordPress plugin before version 5.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue. This affects versions prior to 5.0.0.

The Backup Migration WordPress plugin before 2.0.0 does not properly generate its backup path in certain server configurations, allowing unauthenticated users to fetch a log that discloses the backup filename. The backup archive is then downloadable without authentication.

Wtyczka eCommerce dla WordPressa w wersjach do 2.9.0 nie sanitizuje i nie ucieka parametru przed jego wyświetleniem na stronie, co prowadzi do podatności na odzwierciedlone ataki Cross-Site Scripting (XSS). Atak ten może być wykorzystany przeciwko użytkownikom o wysokich uprawnieniach, takim jak administratorzy.

Wtyczka Ads Pro - Multi-Purpose WordPress Advertising Manager jest podatna na atak typu SQL Injection opartego na czasie poprzez parametr 'site_id' we wszystkich wersjach do 4.95 włącznie. Problem wynika z niewystarczającego zabezpieczenia dostarczonego przez użytkownika oraz braku odpowiedniego przygotowania istniejącego zapytania SQL.

Zidentyfikowano słabość w projekcie Question Paper Generator 1.0, która dotyczy nieznanej części pliku /signupscript.php w komponencie obsługi parametrów POST. Manipulacja argumentem Fname może prowadzić do wstrzyknięcia SQL.

FMS developed by Otsuka Information Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript in the user's browser through phishing attacks.

W projekcie Jonnys Liquor 1.0 odkryto lukę bezpieczeństwa w pliku /detail.php, która dotyczy nieznanej funkcjonalności komponentu GET Parameter Handler. Manipulacja argumentem Product prowadzi do wstrzyknięcia SQL, co umożliwia zdalne wykorzystanie tej podatności.

SQL injection vulnerability in /schedule_edit1.php of itsourcecode Student Information System 1.0. Manipulation of the schedule_id argument allows remote SQL injection. The exploit is publicly available.