CVE Vulnerability Catalog

The WP Remote Users Sync plugin for WordPress is vulnerable to unauthorized access of data and addition of data due to a missing capability check on the 'refresh_logs_async' functions in versions up to and including 1.2.11. This allows authenticated attackers with subscriber privileges or above to view logs.

The WP Remote Users Sync plugin for WordPress is vulnerable to Server Side Request Forgery via the 'notify_ping_remote' AJAX function in versions up to and including 1.2.12. This allows authenticated attackers with subscriber-level permissions or above to make web requests to arbitrary locations, potentially querying and modifying information from internal services.

Version 1.0 of webchess was found to contain a SQL injection vulnerability via the $playerID parameter in mainmenu.php. However, there is controversy regarding this vulnerability as a third party claims that playerID is a session variable controlled by the server, making it impossible to exploit.

Version 1.3 of Schoolmate was found to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters in DeleteFunctions.php.

Doctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter at myAppoinment.php. There is a dispute regarding whether the userid is a session variable controlled by the server.

Missing encryption in the RFID tag of Suleve 5-in-1 Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device.

Missing encryption in the RFID tag of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device.

Missing encryption in the RFID tag of Etekcity 3-in-1 Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device.

COMFAST CF-XR11 version V2.7.2 has a command injection vulnerability detected at function sub_415588. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameters interface and display_name.

Version 2.7.2 of the COMFAST CF-XR11 device contains a vulnerability that allows an attacker to execute arbitrary code via the protal_delete_picname parameter in the sub_41171C function in the bin/webmgnt file.

The Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to set up CIM connection.

The Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter.

The Broadcom RAID Controller web interface is vulnerable due to insecure defaults lacking an HTTP Strict-Transport-Security policy.

Broadcom RAID Controller is vulnerable to privilege escalation to root due to the creation of insecure folders by the Web GUI.

Broadcom RAID Controller is vulnerable to privilege escalation by taking advantage of session prints in the log file.

The Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions.

The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not provide X-Content-Type-Options headers.

The Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation.

The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not safeguard cookies with the Secure attribute.

The Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux.