CVE Vulnerability Catalog

Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'fromGetWirelessRepeat' function.

The Tenda AC6 device has a command execution vulnerability in the 'sub_ADF3C' function. In the 'formSetIptv' function, the 'list' and 'vlanId' parameters are passed unfiltered, allowing for arbitrary command execution.

The 'sub_3A1D0' function in Tenda AC6 firmware contains a command execution vulnerability, allowing attackers to remotely execute code.

The Tenda AC6 device has a command execution vulnerability in the 'sub_ADD50' function. In the 'formSetIptv' function, unfiltered passing of the 'list' and 'vlanId' fields as parameters to the 'sub_ADD50' function allows for command execution.

In Splunk Enterprise versions below 8.2.12, 9.0.6, and 9.1.1, an attacker can create an external lookup that calls a legacy internal function. This allows the attacker to insert code into the Splunk platform installation directory.

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code located on a separate disk.

In Splunk Enterprise versions earlier than 8.2.12, 9.0.6, and 9.1.1, a dynamic link library (DLL) references an insecure path for the OPENSSLDIR build definition. An attacker can exploit this reference to install malicious code, leading to privilege escalation on the Windows machine.

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can execute a specially crafted query that allows for the serialization of untrusted data. This enables the attacker to execute arbitrary code.

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can use the `printf` SPL function to perform a denial of service (DoS) against the Splunk Enterprise instance.

In Splunk Enterprise versions lower than 9.0.6 and 8.2.12, a malicious actor can send a malformed SAML request to the `/saml/acs` REST endpoint which can cause a denial of service through a crash or hang of the Splunk daemon.

In Splunk Enterprise versions below 9.1.1, 9.0.6, and 8.2.12, an attacker can craft a special web request that can result in reflected cross-site scripting (XSS) on the “/app/search/table” web endpoint. Exploitation of this vulnerability can lead to the execution of arbitrary commands on the Splunk platform instance.

The MPEmbed WP Matterport Shortcode plugin versions up to 2.1.4 has a stored Cross-Site Scripting (XSS) vulnerability for users with contributor permissions and above.

The Breadcrumb simple plugin in versions <= 1.3 has a stored Cross-Site Scripting (XSS) vulnerability with authentication (admin+).

The SpamReferrerBlock plugin versions up to 2.22 has a stored Cross-Site Scripting (XSS) vulnerability with authentication (admin+).

The POEditor WordPress plugin before 0.9.8 lacks CSRF checks in various places, which could allow attackers to make logged in admins perform unwanted actions, such as resetting the plugin's settings and updating its API key.

The User Activity Tracking and Log WordPress plugin before 4.0.9 does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin's license via CSRF attacks.

The Ninja Forms plugin for WordPress before version 3.6.26 was affected by an HTML Injection security vulnerability.

The Simple Blog Card WordPress plugin before version 1.32 does not ensure that posts displayed via a shortcode are public, allowing authenticated users, such as subscribers, to access arbitrary post titles and their content, including drafts, private posts, and password-protected ones.

The Simple Blog Card WordPress plugin before 1.31 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

The All Users Messenger WordPress plugin through version 1.24 does not prevent non-administrator users from deleting messages.