CVE Vulnerability Catalog

Discourse is an open source discussion platform. Prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches, unauthorized users could obtain information about restricted-visibility topic tags.

Discourse is an open source discussion platform that prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches did not impose an upper limit on limit parameters in multiple controller actions. This lack of restriction may allow users to generate database queries that could exhaust server resources.

Discourse is an open source discussion platform, where prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches, a malicious user can delay the defer queue processing on sites hosted in the same multisite installation.

Discourse is an open source discussion platform, where prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches, a malicious user can edit a post in a topic and cause a DoS with a carefully crafted edit reason.

Discourse is an open source discussion platform, where prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches, more users than permitted could be created from invite links. The issue is patched in versions 3.0.6 and 3.1.0.beta7.

Version 2.2.0 and below of university compass was found to contain a code injection vulnerability in the component org.compass.core.executor.DefaultExecutorManager.configure. This vulnerability can be exploited by passing an unchecked argument.

Versions oscore v2.2.6 and below were found to contain a code injection vulnerability in the component com.opensymphony.util.EJBUtils.createStateless. This vulnerability can be exploited by passing an unchecked argument.

Versions wix-embedded-mysql v4.6.1 and below were found to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability can be exploited by passing an unchecked argument.

Versions of stanford-parser v3.9.2 and below were found to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream. This vulnerability can be exploited by passing an unchecked argument.

FFmpeg version 0.7.0 and below contains a code injection vulnerability in the component net.bramp.ffmpeg.FFmpeg.<constructor>. This vulnerability is exploited by passing an unchecked argument.

Versions quartz-jobs 2.3.2 and below contain a code injection vulnerability in the component org.quartz.jobs.ee.jms.SendQueueMessageJob.execute. This vulnerability is exploited by passing an unchecked argument.

Versions bboss-persistent v6.0.9 and below were found to contain a code injection vulnerability in the component com.frameworkset.common.poolman.util.SQLManager.createPool. This vulnerability is exploited by passing an unchecked argument.

Versions of webmagic-extension v0.9.0 and below were discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader.

Duke v1.2 and below was found to contain a code injection vulnerability via the component no.priv.garshol.duke.server.CommonJTimer.init.

BoofCV 0.42 was discovered to contain a code injection vulnerability via the component boofcv.io.calibration.CalibrationIO.load. This vulnerability can be exploited by loading a crafted camera calibration file.

Version 3.5.1 of jeecg-boot was found to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.

PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail.

In the Discourse discussion platform prior to version 3.1.0.beta7 of the `beta` and `tests-passed` branches, a CSP (Content Security Policy) nonce reuse vulnerability was discovered that could allow cross-site scripting (XSS) attacks to bypass CSP protection for anonymous users. Version 3.1.0.beta7 contains a patch.

In CODESYS Development System versions 3.5.9.0 to 3.5.17.0 and CODESYS Scripting versions 4.0.0.0 to 4.1.0.0, unsafe directory permissions allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.

A vulnerability has been found in Mingsoft MCMS up to version 5.3.1 that allows cross site scripting attacks through manipulation of the 'style' argument in the search.do file. The attack can be initiated remotely.