CVE Vulnerability Catalog

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

Vulnerability related to configuration defects in the media module of certain products. Successful exploitation of this vulnerability may lead to unauthorized access.

Vulnerability related to out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may lead to other apps being executed with escalated privileges.

The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to and including 3.0.4 via the 'wp_abspath' parameter. This allows unauthenticated attackers to include and execute arbitrary remote code on the server, provided that allow_url_include is enabled.

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. This issue exists because of an incomplete fix for CVE-2022-24439.

EmpowerID versions before 7.205.0.1 allow an attacker to bypass MFA requirements if the first factor (username and password) is known. Knowing the first factor enables changing the account's email address, to which MFA codes are then sent.

In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar files, insufficient length checking may lead to a stack buffer overflow, potentially resulting in memory corruption or RCE.

A vulnerability was discovered in Veritas NetBackup Snapshot Manager before version 10.2.0.1 that allowed untrusted clients to interact with the RabbitMQ service. This was caused by improper validation of the client certificate due to misconfiguration of the RabbitMQ service.

A SQL injection vulnerability was discovered in iCMS v7.0.16 within the bakupdata function. Attackers can exploit this flaw to execute unauthorized database queries.

A SQL injection vulnerability was discovered in iCMS version 7.0.16 via the 'where' parameter in admincp.php. An attacker can exploit this flaw to execute unauthorized database queries.

A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE).

All UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring enabled and default settings are vulnerable to an integer overflow, potentially allowing Remote Code Execution (RCE).

In version 1.0 of PHPJabbers Document Creator, there is a SQL injection (SQLi) vulnerability in the 'column' parameter of index.php.

CVE-2023-39776 describes a vulnerability in PHPJabbers Ticket Support Script v3.2 that allows attackers to execute arbitrary code by uploading a crafted file.

EZ softmagic MP3 Audio Converter version 2.7.3.700 was found to contain a buffer overflow vulnerability.

Code-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection attacks, allowing an attacker to manipulate SQL queries executed by the application. The application fails to properly validate user-supplied input in the login id and password fields.