CVE Vulnerability Catalog

A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser. Browser self-protection should be enabled to mitigate this issue.

An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser. Browser self-protection should be enabled to mitigate this issue.

An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to revert the browser’s security controls.

A security flaw has been discovered in CodeAstro Gym Management System 1.0. An unknown function in /admin/view-member-report.php is affected. Manipulation of the ID argument results in SQL injection. The attack can be initiated remotely and the exploit has been released.

Pakiet npm `expr-eval` jest podatny na zanieczyszczenie prototypu. Atakujący, mając dostęp do interfejsu express eval, może wykorzystać model dziedziczenia oparty na prototypach w JavaScript do wykonania dowolnego kodu.

On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.

W systemie rezerwacji hotelowej Simple Online Hotel Reservation System w wersji 1.0 wykryto podatność. Problem dotyczy nieznanego przetwarzania pliku /admin/edit_account.php, które umożliwia wstrzyknięcie SQL poprzez manipulację argumentem admin_id.

W systemie rezerwacji hotelowej Simple Online Hotel Reservation System w wersji 1.0 wykryto podatność, która dotyczy nieznanego kodu w pliku /add_query_reserve.php. Manipulacja argumentem room_id prowadzi do wstrzyknięcia SQL, co umożliwia zdalne przeprowadzenie ataku.

Memos is a privacy-first, lightweight note-taking service that uses Access Tokens to authenticate application access. When a user changes their password, the existing list of Access Tokens stay valid instead of expiring. If a user finds that their account has been compromised, they can update their password. In versions up to and including 0.18.1, though, the bad actor will still have access to their account because the bad actor's Access Token stays on the list as a valid token. The user will have to manually delete the bad actor's Access Token to secure their account. The list of Access Tokens has a generic Description which makes it hard to pinpoint a bad actor in a list of Access Tokens. A known patched version of Memos isn't available. To improve Memos security, all Access Tokens will need to be revoked when a user changes their password. This removes the session for all the user's devices and prompts the user to log in again. One can treat the old Access Tokens as "invalid" because those Access Tokens were created with the older password.

A vulnerability exists in QuickCMS version 6.8 where sensitive admin credentials are hardcoded in a configuration file and stored in plaintext. This flaw allows attackers with access to the source code or the server file system to retrieve authentication details, potentially leading to privilege escalation. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.

In Search Guard FLX versions 3.1.2 and earlier, when a search is triggered from a Signals watch, the Document-Level Security (DLS) rule is not enforced, allowing access to all documents in the queried indices, despite DLS being correctly enforced elsewhere.

Rockwell Automation Arena® suffers from a stack-based buffer overflow vulnerability. The specific flaw exists within the parsing of DOE files. Local attackers are able to exploit this issue to potentially execute arbitrary code on affected installations of Arena®. Exploiting the vulnerability requires opening a malicious DOE file.

QuickCMS is vulnerable to multiple Stored XSS in the language editor functionality (languages). A malicious attacker with admin privileges can inject arbitrary HTML and JS into the website, which will be rendered/executed on every page. By default, an admin user is not able to add JavaScript into the website.

Podatność CVE-2025-8855 dotyczy systemu Brokerage Automation w wersjach przed 1.1.71 i umożliwia obejście autoryzacji poprzez manipulację danymi kontrolowanymi przez użytkownika oraz słaby mechanizm odzyskiwania hasła. Wykorzystanie tej luki może prowadzić do nieautoryzowanego dostępu do systemu.

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'SCodes' parameter in all versions up to and including 2.2.23 due to insufficient escaping and lack of preparation on the SQL query. This allows authenticated attackers with administrator-level access and above to append additional SQL queries to extract sensitive information from the database.

W NCP-HG100 w wersji 1.4.48.16 i wcześniejszych występuje problem z niewłaściwym neutralizowaniem specjalnych elementów używanych w poleceniach systemu operacyjnego, co prowadzi do podatności na atak typu 'OS Command Injection'. W przypadku wykorzystania tej luki, zdalny atakujący, który uzyskał dane uwierzytelniające do strony zarządzania produktem, może wykonać dowolne polecenie systemowe z uprawnieniami roota.

Wtyczka Creta Testimonial Showcase dla WordPressa przed wersją 1.2.4 jest podatna na atak typu Local File Inclusion. Umożliwia to uwierzytelnionym atakującym z dostępem na poziomie edytora i wyżej do dołączenia i wykonania dowolnych plików na serwerze, co pozwala na wykonanie kodu PHP w tych plikach.

IQ-Support opracowany przez IQ Service International ma podatność na nieautoryzowane odczyty plików, co pozwala zdalnym atakującym bez uwierzytelnienia wykorzystać przejście przez względną ścieżkę do pobierania dowolnych plików systemowych.

IQ-Support developed by IQ Service International has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to access specific APIs to obtain sensitive information from the internal network.