CVE Vulnerability Catalog

Multiple reflected XSS vulnerabilities in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38 allow attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload injected into the VIEWSTATE parameter.

CVE-2023-41640 describes an improper error handling vulnerability in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38, allowing attackers to obtain sensitive technical information via a crafted SQL query.

An arbitrary file upload vulnerability in the Gestione Documentale module of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted file.

An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted HTML file.

CVE-2023-41636 describes a SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38, allowing attackers to access the database and execute arbitrary commands via a crafted SQL query.

A XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component of GruppoSCAI RealGimm v1.1.37p38 allows attackers to read any file in the filesystem via supplying a crafted XML file.

IBM Security Verify Information Queue versions 10.0.4 and 10.0.5 could allow a remote attacker to obtain sensitive information that could aid in further attacks against the system.

IBM Security Verify Information Queue versions 10.0.4 and 10.0.5 could allow a remote attacker to obtain sensitive information that could aid in further attacks against the system.

IBM Security Verify Information Queue versions 10.0.4 and 10.0.5 stores sensitive information in plain clear text, which can be read by a local user.

CVE-2023-41741 describes a vulnerability that exposes sensitive information to unauthorized actors in the cgi component of Synology Router Manager (SRM) before version 1.3.1-9346-6. Remote attackers can obtain sensitive information via unspecified vectors.

CVE-2023-41740 describes an improper limitation of a pathname to a restricted directory in the cgi component of Synology Router Manager (SRM) before version 1.3.1-9346-6. This allows remote attackers to read specific files via unspecified vectors.

CVE-2023-41739 in Synology Router Manager (SRM) before version 1.3.1-9346-6 has an uncontrolled resource consumption vulnerability that can be exploited by remote authenticated users to conduct denial-of-service attacks.

CVE-2023-41738 describes an improper neutralization of special elements used in OS commands in Directory Domain Functionality in Synology Router Manager (SRM) before version 1.3.1-9346-6. This allows remote authenticated users to execute arbitrary commands via unspecified vectors.

The Order Tracking Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the order status parameter in versions up to and including 3.3.6 due to insufficient input sanitization and output escaping. This allows authenticated attackers (admin or higher) to inject arbitrary web scripts on pages.

The Order Tracking Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the start_date and end_date parameters in versions up to and including 3.3.6 due to insufficient input sanitization and output escaping.

The Woo Custom Emails for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wcemails_edit' parameter in versions up to and including 2.2 due to insufficient input sanitization and output escaping.

The WooCommerce PDF Invoice Builder for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the GetInvoiceDetail function in versions up to and including 1.2.89. This allows subscribers to view arbitrary invoices if they can guess the order id and invoice id.

The WooCommerce PDF Invoice Builder for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the SaveCustomField function in versions up to and including 1.2.90. This allows unauthenticated attackers to create invoice fields if they can trick an admin into performing an action such as clicking on a link.

The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via admin settings in versions up to and including 1.2.90 due to insufficient input sanitization and output escaping.

The Waiting: One-click countdowns plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 0.6.2. This is due to missing or incorrect nonce validation on its AJAX actions, allowing unauthenticated attackers to create and delete countdowns.