CVE Vulnerability Catalog

FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 1900 characters into the search bar and trigger a crash when the search operation is executed.

One Search 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting excessively long input strings to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar to trigger an unhandled exception that crashes the application.

Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 8145 characters into the search bar and trigger a search operation to cause the application to crash.

Smart VPN 1.1.3.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input through the search interface. Attackers can paste a buffer of 2100 characters into the top right search bar to trigger an unhandled exception that crashes the application.

VSCO version 1.1.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by pasting a 5000-character string into the search bar and navigating back.

Redaxo CMS 5.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by tricking authenticated administrators into visiting malicious pages. Attackers can craft HTML forms targeting the users endpoint with hidden fields containing admin credentials and account parameters to add new administrator accounts without user consent.

Snews CMS 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials without authentication by crafting malicious HTML forms. Attackers can trick authenticated administrators into visiting a page containing a hidden form that submits POST requests to the changeup action, modifying the admin username and password parameters to gain unauthorized access.

A buffer overflow vulnerability exists in NetSchedScan 1.0 in the Hostname/IP field. A local attacker can supply a crafted payload of 388 bytes followed by a 4-byte EIP overwrite, causing the application to crash.

The ProfilePress plugin for WordPress up to version 4.16.11 allows arbitrary shortcode execution. This is because billing field values from the checkout process are interpolated into shortcode template strings without proper sanitization. Unauthenticated attackers can execute arbitrary shortcodes by submitting crafted billing field values during checkout.

Stored Cross-Site Scripting (XSS) vulnerability in WordPress WPFunnels plugin up to version 3.7.9. Through the 'wpf_optin_form' shortcode and 'button_icon' parameter, attackers with contributor-level access or higher can inject arbitrary scripts that execute when a page is visited.

The Listeo Core plugin for WordPress up to version 2.0.27 contains an unauthenticated arbitrary media upload vulnerability via the 'listeo_core_handle_dropped_media' function. Lack of authorization and capability checks on the AJAX endpoint allows attackers to upload files to the media library.

The Kadence Blocks plugin for WordPress up to version 3.6.3 has an authorization bypass in the process_pattern REST API endpoint, which does not properly verify the upload_files capability. Authenticated attackers with contributor level access or above can upload images to the Media Library by supplying remote image URLs.

Stored XSS vulnerability in the WP Travel Engine plugin for WordPress (versions up to 6.7.5). Insufficient input sanitization and output escaping in the 'wte_trip_tax' shortcode allow authenticated attackers (contributor level and above) to inject malicious JavaScript.

The ElementsKit Elementor Addons and Templates plugin for WordPress up to 3.7.9 has a stored XSS vulnerability via the 'ekit_tab_title' parameter in the Simple Tab widget. Authentication at contributor level or above is required.

The Shortcodes Ultimate plugin for WordPress up to version 7.4.8 contains a Stored Cross-Site Scripting vulnerability via the su_carousel shortcode, due to insufficient input sanitization and output escaping in the 'su_slide_link' attachment meta field.

The Shortcodes Ultimate plugin for WordPress up to version 7.4.7 has a Stored XSS vulnerability in the 'src' attribute of the su_lightbox shortcode. Insufficient input sanitization and output escaping allow authenticated attackers with contributor-level access or higher to inject scripts.

The Royal Addons for Elementor plugin for WordPress up to 1.7.1049 has a stored XSS vulnerability via the 'button_text' parameter. Authentication at contributor level or above is required.

Stored Cross-Site Scripting (XSS) vulnerability in WordPress Simple Shopping Cart plugin up to version 5.2.4. Through the 'wpsc_display_product' shortcode and user-supplied attributes, attackers with contributor-level access or higher can inject arbitrary scripts that execute when a page is visited.

The Ultimate Member plugin for WordPress up to version 2.11.1 is vulnerable to stored cross-site scripting (XSS) via the user description field due to insufficient input sanitization and output escaping. Authenticated attackers with subscriber-level access or higher can inject arbitrary scripts that execute when a user visits an affected page. The vulnerability is exploitable only when "HTML support for user description" is enabled in Ultimate Member settings.

Stored Cross-Site Scripting (XSS) vulnerability in WordPress Xpro Addons plugin up to version 1.4.20. Through the 'onClick Event' setting in the Pricing Widget, attackers with contributor-level access or higher can inject arbitrary scripts that execute when a page is visited.