CVE Vulnerability Catalog

The MStore API plugin for WordPress is vulnerable to Unauthenticated Blind SQL Injection via the 'id' parameter in versions up to and including 4.0.1 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query.

CVE-2023-35932 affects the jcvi library, which is used for genome assembly, annotation, and comparative genomics. It contains a vulnerability related to configuration injection when user input is treated in an unsanitized format and can reach the configuration file.

In Nextcloud Server versions 25.0.0 to 25.0.7 and 26.0.0 to 26.0.2, as well as in Nextcloud Enterprise Server versions 19.0.0 to 19.0.13.9, there was a vulnerability that allowed users to access another user's login credentials and take over their account. This issue has been patched in newer versions of the software.

NextCloud Server and NextCloud Enterprise Server have a vulnerability that allows a malicious server to modify or delete VCards in the system address book when two servers are registered as trusted and exchange share secrets. This affects versions from 25.0.0 to 25.0.7 and from 26.0.0 to 26.0.2, as well as various versions of Nextcloud Enterprise Server.

The Nextcloud End-to-end encryption app provides the ability to implement end-to-end encryption on the client side. By providing an invalid metadata file, an attacker can make previously dropped files inaccessible.

NextCloud Server and NextCloud Enterprise Server have a vulnerability that allows an attacker to bruteforce password reset links in specific versions of the software. This affects versions 25.0.0 to 25.0.7 and 26.0.0 to 26.0.2 for NextCloud Server and various versions of NextCloud Enterprise Server.

NextCloud Server and NextCloud Enterprise Server provide file storage for a productivity platform. In versions 26.0.0 to 26.0.2, an attacker could supply a URL that redirects an unsuspecting user from a legitimate domain to an attacker's site.

PHP-IMAP prior to version 5.3.0 has a remote code execution vulnerability due to unsanitized attachment filenames. An attacker can exploit this vulnerability by sending a malicious attachment, leading to code execution on the server.

The AWS Cloud Development Kit (AWS CDK) has a vulnerability related to overly permissive trust policies for the `CreationRole` and `default MastersRole` in versions `aws-cdk-lib` from 2.0.0 to 2.80.0 and `@aws-cdk/aws-eks` from 1.57.0 to 1.202.0.

Vega is a decentralized trading platform that prior to version 0.71.6 had a vulnerability allowing a malicious validator to trick the Vega network into re-processing past Ethereum events. This could lead to unauthorized increases in a user's account balance without additional deposits.

Knowage is an open source analytics and business intelligence suite. In versions 6.0.0 through prior to 8.1.8, an attacker could register and activate their account without having to click on the link included in the email, allowing them access to the application as a normal user.

GLPI Agent prior to version 1.5 has a vulnerability that allows a remote administrator to inject a command into a specific workflow the agent runs. If the agent is running with administrative privileges, a malicious user could gain high privileges on the computer running glpi-agent.

A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL.

Version 2.0 of POS Codekop has an authenticated remote code execution (RCE) vulnerability via the filename parameter.

Version 2.0 of POS Codekop was found to contain a reflected XSS vulnerability via the nm_member parameter in print.php.

A Cross-Site Request Forgery (CSRF) in POS Codekop v2.0 allows attackers to escalate privileges.

Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment variables. This bug has been patched in version 1.7.1.

In Progress WhatsUp Gold before version 23.0.0 has an SNMP-related application endpoint that fails to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, known as XSS.

Remult is a CRUD framework for full-stack TypeScript. Using the apiPrefilter option in the @Entity decorator as a function intended to prevent unauthorized access to data may allow an attacker, knowing the id of an entity instance, to gain read, update, and delete access to it.

The 1.4.0 release of the Tauri framework introduced a regression in the filesystem scope check for dotfiles on Unix. Previously, dotfiles were not implicitly allowed by wildcard patterns, which changed due to the implementation of a configuration option.