CVE Vulnerability Catalog

Improper access control exists in the GitHub repository admidio/admidio prior to version 4.2.9.

Improper access control exists in the GitHub repository admidio/admidio prior to version 4.2.9.

In the GitHub repository admidio/admidio prior to version 4.2.9, there is improper neutralization of formula elements in a CSV file.

The MagePeople Team Booking and Rental Manager for Bike plugin versions <= 1.2.1 has a stored Cross-Site Scripting (XSS) vulnerability with admin+ authentication. An attacker can exploit this vulnerability to inject malicious scripts that will be executed in the user's browser context.

The Andy Moyle Church Admin plugin versions up to 3.7.29 contains an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.

The Premium Addons PRO plugin for Elementor versions <= 2.8.24 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.

A critical vulnerability was found in SourceCodester Game Result Matrix System 1.0, affecting an unknown part of the file /dipam/athlete-profile.php of the GET Parameter Handler component. Manipulation of the argument id leads to SQL injection.

A vulnerability classified as problematic has been found in SourceCodester Game Result Matrix System 1.0. Manipulation of the argument del_name in the file /dipam/save-delegates.php leads to cross site scripting.

A vulnerability was found in SourceCodester Online School Fees System 1.0 that allows cross-site scripting (XSS) attacks through manipulation of the doj parameter in the /paysystem/datatable.php file. The attack can be launched remotely.

A critical vulnerability has been identified in the Wavlink WN579X3 device up to version 20230615, concerning an unknown function of the file /cgi-bin/adm.cgi in the Ping Test component. Manipulation of the pingIp argument leads to injection.

Fortinet FortiNAC versions below 7.2.1, below 9.4.3, below 9.2.8, and all earlier versions of 8.x are vulnerable to deserialization of untrusted data. An attacker can execute unauthorized code or commands via specifically crafted requests on the inter-server communication port.

A directory traversal vulnerability in FME Server before version 2022.2.5 allows an attacker to bypass validation when editing a network-based resource connection, leading to unauthorized reading and writing of arbitrary files.

Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguity_error component at /src/clp.c.

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.c.

The YARP (Yet Another Reverse Proxy) vulnerability allows for a Denial of Service (DoS) attack, potentially leading to service unavailability.

The vulnerability in `SniHandler` in the Netty framework allows for the allocation of up to 16MB of heap for each channel during the TLS handshake. The lack of proper checks enables the crafting of a packet that can exploit this allocation, potentially leading to resource exhaustion.

CUPS versions from 2.0.0 to 2.4.6 contain a use-after-free bug that causes logging of free memory data after the connection has been closed, instead of before. This issue affects the entire cupsd process.

Flask-AppBuilder is an application development framework that prior to version 4.3.2 had a vulnerability allowing an authenticated attacker with Admin privileges to trigger a database error by adding a special character in the add or edit User forms. This error could expose the entire user row, including the pbkdf2:sha256 hashed password.

Terraform Enterprise since v202207-1 did not properly implement authorization rules for agent pools, allowing the workspace to be targeted by unauthorized agents. This authorization flaw could potentially allow a workspace to access resources from a separate, higher-privileged workspace in the same organization.

Grafana validates Azure AD accounts based on the email claim. The email field in Azure AD profiles is not unique and can be easily modified, leading to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app.