CVE Vulnerability Catalog

There is a remote code execution vulnerability in the Android system (Bluetooth). It affects versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.

GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted 'Content-Type: text/enriched' data. In particular, an Emacs user can be instantly compromised by reading a crafted email message.

The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php.

QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905 and QTS 4.3.3.0299 build 20170901. This vulnerability allows a remote attacker to execute commands on a QNAP NAS using a transcoding service on port 9251.

Pagure version 3.3.0 and earlier is vulnerable to loss of confidentiality due to improper authorization.

The WordPress plugin wordpress-gallery-transformation version 1.0 has a SQL injection vulnerability. The issue is in gallery.php, where the $jpic parameter is not properly sanitized before being used in an SQL query.

Vulnerability in WordPress plugin rk-responsive-contact-form version 1.0 is due to the lack of sanitization of the $delid variable before it is used in an SQL query.

Vulnerability in the WordPress plugin Event Expresso Free v3.1.37.11.L is due to the lack of sanitization of user-supplied input via the $id parameter before it is used in an SQL statement.

Vulnerability in the WordPress plugin 'add-edit-delete-listing-for-member-module' version 1.0, due to the lack of sanitization of user-supplied input before it is used in an SQL statement.

Vulnerability in WordPress plugin Easy Team Manager v1.3.2 is due to the lack of sanitization of the identifier before it is used in an SQL statement. The issue is present in the file ./easy-team-manager/inc/easy_team_manager_desc_edit.php.

Vulnerability in WordPress plugin Surveys version 1.01.8 is due to the lack of sanitization of the survey variable in questions.php before placing it in an SQL query.

Vulnerability in the WordPress plugin Surveys version 1.01.8 is due to the lack of sanitization of the survey_id variable in individual_responses.php before placing it in an SQL query.

Vulnerability in the WordPress plugin Surveys version 1.01.8 is due to the lack of sanitization of the action variable in survey_form.php before placing it inside an SQL query.

Vulnerability in WordPress plugin eventr version 1.02.2, due to lack of input sanitization in the edit.php form and event_form.php code, allowing for blind SQL injection via the event parameter.

Vulnerability in WordPress plugin eventr version 1.02.2, due to lack of input sanitization in the edit.php form and attendees.php code, allowing for blind SQL injection via the event parameter.

Vulnerability in the WordPress plugin 'flickr-picture-backup' version 0.7 is due to the lack of checks to see if the user is authenticated or has permission to upload files in 'flickr-picture-download.php'.

Vulnerability in the WordPress plugin 'image-gallery-with-slideshow' version 1.5.2, involving blind SQL injection in image-gallery-with-slideshow/admin_setting.php via the selectMulGallery parameter.

Vulnerability in the WordPress plugin 'image-gallery-with-slideshow' version 1.5.2, involving blind SQL injection in admin_setting.php via the gallery_name parameter.

The WordPress plugin 'image-gallery-with-slideshow' version 1.5.2 has a vulnerability to blind SQL Injection via the imgid parameter in image-gallery-with-slideshow/admin_setting.php.

Vulnerability in the WordPress plugin 'image-gallery-with-slideshow' version 1.5.2 is due to the lack of input sanitization from the gid variable before it is used in an SQL statement.