CVE Vulnerability Catalog

The Simple Author Box WordPress plugin before version 2.52 does not verify a user ID before outputting information about that user, leading to arbitrary user information disclosure to users with a role as low as Contributor.

The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitize and escape several parameters before using it in a SQL statement as part of its exportation feature, allowing unauthenticated attackers to conduct SQL injection attacks.

The Custom Field For WP Job Manager plugin before version 1.2 does not sanitize and escape some of its settings, which could allow high privilege users such as admins to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata. This may lead to disclosure of uninitialized and previously used memory.

A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands within the context of the system.

A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through version 1.2.5.23, which could allow a malicious actor to access sensitive information and execute arbitrary database and management operations.

QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured before checking whether Flexible Data Placement is enabled.

Multiple reflected XSS vulnerabilities were found in different JSP files in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 with unsanitized parameters. An attacker can modify these parameters to craft a malicious XSS payload.

Multiple stored XSS vulnerabilities were found in different JSP files in OpenMNS Horizon 31.0.8 and earlier versions up to 32.0.2 due to unsanitized parameters. An attacker can store malicious data in the database, which can then be loaded onto JSP or Angular templates.

IBM TXSeries for Multiplatforms versions 8.1, 8.2, and 9.1 is vulnerable to a denial of service due to improper enforcement of the timeout on individual read operations. A remote attacker could exploit this vulnerability by conducting slowloris-type attacks.

The Facsimile Support product for IBM i versions 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor could gain access to a command line with elevated privileges allowing root access to the host operating system.

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), leading to a pointer/overflow issue. This can only occur for xterm installations configured at compile time to use a certain experimental feature.

An issue was discovered in MariaDB MaxScale before version 23.02.3, where a user-entered password in the 'maxctrl create service' command is stored in cleartext in the .cnf file.

A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request.

A heap-based buffer overflow vulnerability exists in the GitHub repository radareorg/radare2 prior to version 5.9.0.

Wtyczka AdFoxly – Ad Manager, AdSense Ads & Ads.Txt w wersjach do 1.8.5 zawiera podatność na nieautoryzowane odzwierciedlone ataki typu Cross-Site Scripting (XSS). Atakujący może wykorzystać tę lukę do wstrzyknięcia złośliwego kodu JavaScript.

Code Projects Hospital Information System version 1.0 is vulnerable to Cross Site Scripting (XSS) attacks. An attacker can exploit this vulnerability to inject malicious code into the application.

A memory exhaustion vulnerability in ONLYOFFICE Document Server versions 4.0.3 through 7.3.2 allows a remote attacker to cause a denial of service via a crafted JavaScript file.

An out-of-bounds memory access vulnerability in ONLYOFFICE DocumentServer versions 4.0.3 through 7.3.2. A remote attacker can execute arbitrary code using a crafted JavaScript file.

A use-after-free vulnerability in ONLYOFFICE DocumentServer versions 4.0.3 through 7.3.2 allows remote attackers to execute arbitrary code via a crafted JavaScript file.