CVE Vulnerability Catalog

In PHP 8.0.x before 8.0.28, 8.1.x before 8.1.16, and 8.2.x before 8.2.3, the password_verify() function may accept some invalid Blowfish hashes as valid. If such an invalid hash ends up in the password database, it may allow any password for that entry to be considered valid.

A Command Injection vulnerability in the Liman Central Management System due to improper neutralization of special elements affects versions from 1.7.0 before 1.8.3-462.

An arbitrary file deletion vulnerability in Razer Central before version 7.8.0.381 occurs when handling files in the Accounts directory. An attacker can exploit this flaw to delete critical system files.

A Cross Site Scripting (XSS) vulnerability in the IRZ Electronics RUH2 GSM router allows an attacker to inject malicious script via the Upload File parameter. This can lead to theft of sensitive information such as session data or cookies.

In MPD before version 0.23.8, used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Eventually, there is an assertion failure in libmpdclient because libqtappfw passes in a NULL pointer.

File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a crafted web.config and asp file.

The vulnerability in BG-TEK COSLAT Firewall related to improper handling of parameters allows for Remote Code Inclusion. This affects COSLAT Firewall versions from 5.24.0.R.20180630 to before 5.24.0.R.20210727.

Judging Management System 1.0 was found to have an arbitrary file upload vulnerability via the edit_organizer.php component. An attacker can upload a malicious file, potentially leading to remote code execution.

CVE-2022-2504 describes an improper neutralization of special elements used in SQL commands, allowing for SQL Injection attacks in SDD-Baro software before version 2.8.432.

W podatności CVE-2023-0939 występuje niewłaściwa neutralizacja specjalnych elementów używanych w poleceniach SQL, co pozwala na atak typu SQL Injection w oprogramowaniu NTN Information Technologies Online Services Software w wersjach przed 1.17.

The mono package before version 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type is associated with an un-sandboxed Mono CLR interpreter.

A vulnerability in the Chamberlain myQ iOS application version v5.222.0.32277 is due to a lack of rate limiting on the password reset endpoint. This allows attackers to perform a brute-force attack to compromise user accounts.

A critical SQL Injection vulnerability in SourceCodester Best POS Management System 1.0. An unknown functionality in the file billing/index.php?id=9 allows manipulation of the id argument, leading to SQL injection. The attack can be launched remotely.

A vulnerability classified as problematic was found in SourceCodester Best POS Management System 1.0. An unknown function in the file index.php?page=add-category is affected. Manipulation of the argument Name with the input "><img src=x onerror=prompt(document.domain);> leads to cross-site scripting. The attack can be launched remotely.

A problematic vulnerability in SourceCodester Best POS Management System 1.0, in the save_settings function of index.php?page=site_settings, Image Handler component. Manipulation of the img argument with ../../shell.php leads to unrestricted upload. The attack can be initiated remotely.

MISP before 2.4.166 unsafely allows users to use the 'order' parameter, which may lead to unauthorized access to data.

The app/Controller/Component/IndexFilterComponent.php in MISP before version 2.4.167 mishandles ordered_url_params and additional_delimiters.

Brak uwierzytelnienia dla krytycznej funkcji w repozytorium GitHub kareadita/kavita przed wersją 0.7.0. To może prowadzić do nieautoryzowanego dostępu do wrażliwych funkcji aplikacji.

Wtyczka WP Coder do WordPressa, umożliwiająca dodawanie niestandardowego kodu HTML, CSS i JS, jest podatna na atak typu SQL Injection opartego na czasie poprzez parametr 'id' w wersjach do 2.5.3 włącznie. Problem wynika z niewystarczającego zabezpieczenia parametru dostarczonego przez użytkownika oraz braku odpowiedniego przygotowania istniejącego zapytania SQL.