CVE Vulnerability Catalog

After JavaScript resets the form, the synchronization process lacks re-entry protection and object lifecycle verification, causing the control pointer to fail during traversal. The application continues to dereference the failed pointer, leading to a crash.

The vulnerability in the PDF viewing application stems from incomplete lifecycle management and null value validation of objects. JavaScript modifies the form, and when the page state changes, the application repeatedly dereferences invalid objects, eventually causing a crash.

The vulnerability occurs when the application opens a PDF file and JavaScript deletes the PDF fields, but the subsequent logic still uses the old field pointers, resulting in invalid pointer references and causing the application to crash.

The vulnerability allows low-privilege users to execute arbitrary executable files with NT AUTHORITY\SYSTEM privileges, enabling privilege escalation.

After opening a PDF file, the application executed JavaScript that deleted a form field object. Subsequently, it attempted to access the invalid object, causing the application to crash.

The vulnerability in the PDF viewing application occurs when JavaScript modifies form field properties, causing the state of underlying objects referenced by the program to become invalid. This eventually leads to reading an illegal memory address and crashing the application.

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32-bit size could be used by attackers able to access the X Server to execute code within the X server context.

A vulnerability in Xorg server and Xwayland allows local attackers with an X connection to trigger a Heap Use-After-Free via the CommonMakeCurrent() function, which may point to potentially reallocated memory.

A vulnerability in Xorg server and Xwayland before versions 21.2.24 and 24.1.13 allows local attackers with an X connection to cause a heap buffer overflow via the SetFont function using crafted PCX fonts. Missing glyph boundary checks lead to buffer overflow.

The vulnerability in an application that opens PDF files causes JavaScript to use a damaged field tree to trigger field traversal, resulting in the program holding an invalid form object when accessing the field property path. Eventually, the application crashes due to reading an invalid pointer.

Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document view, eventually leading to the crash of the application.

The vulnerability occurs when the application opens a PDF file, and JavaScript rewrites the document, modifying the page structure and invalidating page objects. Thumbnails still use these invalid objects, ultimately causing the application to crash.

Embedded JavaScript in a PDF file deleted pages, invalidating the object. The application attempted a write operation on invalid pop-up annotations, causing a crash.

The Appointment Booking Calendar Plugin and Scheduling Plugin for WordPress up to version 1.1.28 does not validate data before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects. If a suitable gadget chain is present on the site, this can lead to remote code execution.

The Eventer plugin for WordPress is vulnerable to time-based SQL injection via the 'code' parameter in all versions up to and including 4.4.2 due to insufficient escaping and lack of proper SQL query preparation.

In Pupsman versions prior to 3.9.0, there is an incorrect default permissions issue. An attacker can place a malicious executable in the installation folder, leading to arbitrary code execution with SYSTEM privileges.

An uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege.

The DoLogin Security plugin for WordPress up to version 4.3 inclusive contains an authentication bypass vulnerability due to insufficient randomness. The `dologin\s::rrand()` function seeds the Mersenne Twister with a microsecond-based seed, limiting entropy to about 20 bits, and then generates a 32-character magic-link token deterministically. An unauthenticated attacker can brute-force the seed space (approximately 10^6 candidates) to reconstruct an active passwordless login token and authenticate as any user, including administrators, without a password.

The WHMCS Bridge plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the connect() function in all versions up to, and including, 6.9. This allows authenticated attackers with Custom-level access and above to upload arbitrary files to the server, potentially leading to remote code execution.

The Backstage - Customizer Demo Access plugin for WordPress up to version 1.4.2 is vulnerable to privilege escalation. This is due to assigning the overly permissive `manage_options` capability to the `backstage_customizer_user` demo role, allowing unauthenticated attackers to exit the Customizer and modify WordPress options like `default_role`.