CVE Vulnerability Catalog

A critical vulnerability was found in SourceCodester Inventory Management System 1.0, affecting an unknown part of the file catagory_data.php. Manipulation of the argument columns[1][data] leads to SQL injection.

CVE-2023-4012 affects ntpd, which crashes when the server is not NTS-enabled (no certificate) and receives a request from an NTS-enabled client (mode 3).

A vulnerability in Microsoft Edge (Chromium-based) allows for a security feature bypass. An attacker could exploit this flaw to gain access to protected resources.

CVE-2023-38045 describes an improper neutralization of input during web page generation in the oneVote component for Joomla, allowing Cross-site Scripting (XSS) targeting non-script elements.

CVE-2023-38044 describes an improper neutralization of special elements used in SQL commands, leading to SQL Injection vulnerabilities.

CVE-2023-34477 vulnerability concerns improper neutralization of special elements used in SQL commands, leading to SQL injection.

CVE-2023-34476 vulnerability concerns improper neutralization of special elements used in SQL commands, allowing for SQL Injection attacks.

The MultiParcels Shipping for WooCommerce plugin before version 1.15.4 does not sanitize and escape various parameters before outputting them back on the page, leading to a reflected Cross-Site Scripting (XSS) vulnerability. This can be exploited against high privilege users such as admins.

The Bubble Menu WordPress plugin before 3.0.5 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

The Quiz And Survey Master WordPress plugin before version 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.

The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting vulnerability.

The WP Shopping Pages plugin for WordPress through version 1.14 lacks CSRF checks in some places and is missing sanitization and escaping, which could allow attackers to make logged in admins add Stored XSS payloads via a CSRF attack.

The MultiParcels Shipping For WooCommerce plugin before version 1.14.14 lacks authorization when deleting shipments, allowing any authenticated user, such as a subscriber, to delete arbitrary shipments.

A flaw was found in the Linux kernel's TUN/TAP functionality, which could allow a local user to bypass network filters and gain unauthorized access to some resources. The issues stem from incorrect or incomplete patches for CVE-2023-1076.

A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.

Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary code and gain access to sensitive information via the plugin Upload function.

Versions of vim/vim from 9.0.1367-1 to 9.0.1367-3 contain a divide by zero error, which may lead to unexpected application behavior.

The Custom Field Template plugin by Hiroaki Miyashita in versions <= 2.5.9 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.

In Fujitsu Software Infrastructure Manager (ISM) before version 2.8.0.061, authorization credentials are insecurely collected and stored in cleartext in the file /var/log/fujitsu/ServerViewSuite/ism/FirmwareManagement/FirmwareManagement.log. This occurs when users test the connection to a firmware repository or regularly authenticate against a configured remote firmware repository, if a backslash character is used in the user credentials (ID or password).

In DRM/oemcrypto, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to remote escalation of privilege with System execution privileges needed.