CVE Vulnerability Catalog

Wtyczka Propovoice: All-in-One Client Management System dla WordPress jest podatna na odczyt dowolnych plików w wersjach do 1.7.6.7 włącznie, poprzez funkcję send_email(). Umożliwia to nieautoryzowanym atakującym odczyt zawartości dowolnych plików na serwerze, co może zawierać wrażliwe informacje.

Wtyczka Catalog Importer, Scraper & Crawler dla WordPress jest podatna na wstrzykiwanie kodu PHP we wszystkich wersjach do i włącznie z 5.1.4. Problem wynika z polegania na przewidywalnym tokenie numerycznym bez odpowiedniej autoryzacji oraz niebezpiecznego użycia funkcji eval() na danych dostarczonych przez użytkownika.

Stored XSS vulnerability in Jobify plugin for WordPress (up to 1.4.4) via the 'keyword' parameter due to insufficient input sanitization and output escaping. Allows authenticated attackers with Contributor-level access and above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Altiris Core Agent Updater package (AeXNSC.exe) is prone to an elevation of privileges vulnerability through DLL hijacking.

The CatFolders – Tame Your WordPress Media Library by Category plugin for WordPress is vulnerable to time-based SQL Injection via the CSV Import contents in all versions up to, and including, 2.5.2 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

kalcaddle kodbox 1.61 has a path traversal vulnerability in the fileGet/fileSave functions in app/controller/explorer/editor.class.php via the path argument. The attack can be initiated remotely, and the exploit has been publicly disclosed.

A weakness has been identified in 299ko up to 2.0.0. Affected by this issue is the function getSentDir/delete of the file plugin/filemanager/controllers/FileManagerAPIController.php. Executing manipulation can lead to path traversal. It is possible to launch the attack remotely and the exploit has been made available to the public.

An Open Redirect vulnerability was found in Freshwork up to version 1.2.3 in the file /api/v2/logout. By manipulating the post_logout_redirect_uri argument, an attacker can redirect the user to a malicious site. The vulnerability can be exploited remotely, and the exploit has been publicly disclosed. Upgrading to version 1.2.3 fixes the issue.

Hoverfly to narzędzie do symulacji API typu open source. W wersjach 1.11.3 i wcześniejszych, punkt końcowy WebSocket /api/v2/ws/logs nie jest chroniony przez to samo oprogramowanie uwierzytelniające, które zabezpiecza REST API administracyjne, co pozwala nieautoryzowanym atakującym na dostęp do logów aplikacji w czasie rzeczywistym.

Liferay Portal 7.4.3.73 through 7.4.3.128 and Liferay DXP in specific versions are vulnerable to Reflected Cross-Site Scripting. Remote attackers can inject arbitrary web script or HTML via the /c/portal/comment/discussion/get_editor path.

A security vulnerability has been detected in yanyutao0402 ChanCMS 3.3.0. The affected element is the function CollectController of the file /cms/collect/getArticle. The manipulation of the argument taskUrl leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Mockoon umożliwia projektowanie i uruchamianie mock API. W wersjach przed 9.2.0, konfiguracja mock API do serwowania plików statycznych jest podatna na ataki typu Path Traversal i LFI, co pozwala atakującemu na dostęp do dowolnego pliku w systemie plików serwera mock.

An improper access control vulnerability in Liferay Portal 7.4.0 through 7.4.3.124 and Liferay DXP (2024.Q2.0-2024.Q2.8, 2024.Q1.1-2024.Q1.12, 7.4 GA through update 92) allows guest users to obtain object entries information via the API Builder.

A weakness has been identified in yanyutao0402 ChanCMS up to 3.3.0 affecting the Search function of the file app/modules/api/service/Api.js. Manipulation of the key argument leads to SQL injection. The attack can be launched remotely and the exploit has been made available to the public. The vendor did not respond.

Papermerge DMS up to 3.5.3 contains a flaw in the Authorization Token Handler that results in improper authorization. The attack can be performed remotely and a public exploit is available. The vendor was contacted but did not respond.

Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

A use-after-free vulnerability in the Service Worker mechanism in Google Chrome on Desktop prior to 140.0.7339.127. A remote attacker could potentially exploit heap corruption via a crafted HTML page.

Nieautoryzowany użytkownik może wysłać dużą ilość danych do interfejsu Stork UI, co może prowadzić do problemów z pamięcią i wykorzystaniem dysku na serwerze Stork. Problem ten dotyczy wersji Stork od 1.0.0 do 2.3.0.

The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests (IRP_MJ_READ/IRP_MJ_WRITE) sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive information disclosure, denial of service, or local privilege escalation.

Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 through 7.4.3.128 and Liferay DXP 2024 Q2.0 through 2024.Q2.9, 2024.Q1.1 through 2024.Q1.12, and 7.4 update 45 through update 92. Remote attackers can execute arbitrary web script or HTML in the My Workflow Tasks page.