CVE Vulnerability Catalog

In JetBrains TeamCity versions before 2023.05, a stored XSS vulnerability was present in the Commit Status Publisher window.

In JetBrains TeamCity versions before 2023.05, improper permission checks allowed users without appropriate permissions to edit Build Configuration settings via REST API.

In JetBrains TeamCity before version 2023.05, it was possible to bypass permission checks, allowing for the execution of admin actions.

A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.

Dcat-Admin v2.1.3-beta has a stored cross-site scripting (XSS) vulnerability that allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter.

KramerAV VIA GO² versions below 4.0.1.1326 are vulnerable to SQL Injection, which may allow unauthorized access to the database.

KramerAV VIA GO² versions below 4.0.1.1326 are vulnerable to unauthenticated file upload, leading to Remote Code Execution (RCE).

KramerAV VIA GO² versions below 4.0.1.1326 are vulnerable to unauthenticated arbitrary file read.

TOTOLINK X5000R versions V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setDiagnosisCfg. This vulnerability allows an attacker to execute arbitrary commands through the 'ip' parameter.

TOTOLINK X5000R versions V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command injection vulnerability in the setOpModeCfg function. This vulnerability allows an attacker to execute arbitrary commands through the 'hostName' parameter.

TOTOLINK X5000R versions V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a post-authentication buffer overflow vulnerability in the addEffect function via the sPort/ePort parameters.

A critical vulnerability has been found in ningzichun Student Management System version 1.0, affecting the login.php file. Manipulation of the user/pass arguments leads to SQL injection.

A critical vulnerability was found in ningzichun Student Management System version 1.0. The issue affects some unknown functionality of the file resetPassword.php in the Password Reset Handler component, where manipulation of the argument sid leads to weak password recovery.

A vulnerability in Deviniti Issue Sync Synchronization v3.5.2 for Jira allows attackers to obtain user login credentials via a crafted request to the /rest/synchronizer/1.0/technicalUser endpoint.

A vulnerability was found in SourceCodester Local Service Search Engine Management System version 1.0 that allows cross-site scripting (XSS) attacks through manipulation of the POST parameter in the /admin/ajax.php file. Inputting a malicious script like <script>alert(document.cookie)</script> can lead to unauthorized access to user data.

A critical vulnerability has been found in Simple Chat System 1.0, allowing SQL injection through manipulation of the convo_id parameter in the /ajax.php?action=read_msg file. The attack can be launched remotely.

A critical vulnerability was found in SourceCodester Train Station Ticketing System version 1.0. Manipulation of the 'id' argument in the manage_prices.php file leads to SQL injection, which can be exploited remotely.

Wtyczka Wordapp dla WordPressa jest podatna na obejście autoryzacji z powodu niewystarczająco unikalnego podpisu kryptograficznego w funkcji 'wa_pdx_op_config_set' w wersjach do 1.6.0 włącznie. Umożliwia to nieautoryzowanym atakującym zmianę 'validation_token' w konfiguracji wtyczki.

Wtyczka Blog-in-Blog dla WordPressa jest podatna na lokalne włączenie plików w wersjach do 2.0.0 włącznie, poprzez atrybut shortcode. Umożliwia to atakującym na poziomie edytora i wyżej dołączenie i wykonanie dowolnych plików na serwerze, co pozwala na wykonanie dowolnego kodu PHP w tych plikach.

A vulnerability was found in ImageMagick that allows shell command injection via video:vsync or video:pixel-format options during video encoding/decoding.