CVE Vulnerability Catalog

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems.

Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by an attacker who can estimate when the password was generated.

A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue.

Two Zephyr syscalls (smbus_smbalert_remove_cb() and smbus_host_notify_remove_cb()) forwarded a caller-supplied struct smbus_callback *cb pointer into kernel-mode driver code without any memory validation. On builds with CONFIG_USERSPACE and an SMBus driver supporting SMBALERT or Host Notify, a user-mode thread could unregister a callback registered by a supervisor-mode component or trigger a kernel fault via a bogus pointer. The fix removes both syscall entry points.

A flaw has been found in itsourcecode Leave Management System 1.0. This vulnerability affects unknown code of the file /module/leave/controller.php. Executing a manipulation of the argument LEAVEID can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the mounttargetipmap volumeAttribute. To remediate this issue, users should upgrade to version v3.5.0 or later.

Broken Access Control vulnerability in WP Project Manager up to version 4.0.7 allows a subscriber to gain unauthorized access to administrative functions.

Missing Authorization vulnerability in Review Schema version 3.1.0 allows exploitation of incorrectly configured access control security levels.

Unauthenticated Insecure Direct Object References (IDOR) in WPFunnels up to version 3.13.1 allows an attacker to access resources without authorization.

Broken Access Control vulnerability in Aruba Migration Tool up to version 1.0.4 allows a subscriber to gain unauthorized access to administrative functions.

Unauthenticated Insecure Direct Object References (IDOR) in Bus Ticket Booking with Seat Reservation up to version 5.9.3 allows an attacker to access resources without authorization.

Vulnerability in boks_ksllogsd allows an authenticated KSL client to supply an oversized digest name, leading to a heap buffer overflow.

HCL BigFix Service Management has an information disclosure vulnerability because two exposed API endpoints return sensitive data, potentially enabling further serious attacks.

HCL BigFix Service Management has an information disclosure vulnerability that allows an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling discovery of hidden administrative API endpoints.

Unauthenticated bypass vulnerability in hCaptcha for WP up to version 5.3.0 allows an attacker to bypass security mechanisms.

Vulnerability in Next.js versions 16.3.0 to 16.3.7 causes incorrect cache keying for 'use cache' handlers, potentially leaking return values across different root params.

iControl is affected by an insecure CORS policy, allowing a malicious website to execute cross-origin requests with credentials. An attacker could access and exfiltrate sensitive data within the victim's active session.

Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp. For a paletted image, getsamples() with type "float" allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one channel writes past its end. An attacker-supplied image controls the overflowing bytes through its palette.

WpTravelly plugin has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control levels. Affects versions up to 2.3.1.

ProfileGrid plugin has an authorization bypass through user-controlled key vulnerability, allowing exploitation of incorrectly configured access control levels. Affects versions up to 6.0.0.2.