CVE Vulnerability Catalog

A use-after-free vulnerability exists in the Linux kernel's IPv4 TCP socket option handling. The ireq_opt options are freed with a plain kfree() even though other CPUs may still access them under RCU (e.g., when building a SYNACK or creating a child socket), leading to a use-after-free in ip_options_build(). The issue also affects request socket migration (tcp_migrate_req).

Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a DOCTYPE with an external DTD reference, the parser processes external entities, allowing an attacker to read arbitrary files from the victim's filesystem. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 17.1 but may also affect other versions.

A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior.

In `api-gateway` versions up to `1.7.3`, the default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element of the `X-Forwarded-For` request header. That element is supplied by the originating HTTP client and is not validated against any trusted-proxy list. A single attacker can therefore obtain an unlimited number of independent rate-limit buckets — one per unique header value — and completely bypass the gateway's request-rate limiting on every route that uses the shipped default configuration.

In api-gateway versions till 1.7.3, the default rate-limit key resolver, ClientIpKeyResolver, derives the per-client bucket key from the leftmost element of the X-Forwarded-For request header. That element is supplied by the originating HTTP client and is not validated against any trusted-proxy list. A single attacker can therefore obtain an unlimited number of independent rate-limit buckets — one per unique header value — and completely bypass the gateway's request-rate limiting on every route that uses the shipped default configuration.

Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps (acf-frontend-form-element) allows Privilege Escalation. This issue affects Frontend Admin by DynamiApps from n/a through 3.29.13.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maxfoundry Social Share Buttons share-button allows Stored XSS. This issue affects Social Share Buttons: from n/a through 1.31.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kitae Park Mang Board WP (mangboard) allows SQL Injection. This issue affects Mang Board WP from n/a through 2.4.4.

Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation. This issue affects Fluent CRM: from n/a through 3.2.5.

The User Registration plugin (ThemeGrill) for WordPress in versions up to 5.2.8 contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free (link-whisper) allows Blind SQL Injection. This issue affects Link Whisper Free from n/a through 0.9.7.

The Link Whisper Free WordPress plugin in versions up to 0.9.7 contains a deserialization of untrusted data vulnerability that allows an attacker to perform object injection. The issue occurs in the plugin's input processing mechanism.

The Link Whisper Free plugin in versions up to 0.9.7 contains a Reflected XSS vulnerability due to improper neutralization of input during web page generation.

The Webba Booking plugin in versions up to 6.5.2 contains an authorization bypass through user-controlled key vulnerability, allowing exploitation of incorrectly configured access control security levels.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through 5.2.8.

Improper Control of Generation of Code ('Code Injection') vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code Injection.This issue affects Broken Link Checker: from n/a through 2.4.14.1.

The WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices plugin for WordPress is vulnerable to Limited Privilege Escalation in all versions up to, and including, 3.0.8 via the 'process_registration' due to missing validation on the 'wholesalex_registration_role' parameter. This makes it possible for unauthenticated attackers to register as any existing WholesaleX role. The vulnerability was partially patched in version 2.3.8.

A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure.

A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server.

A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution.