CVE Vulnerability Catalog

The Email Encoder plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the 'eeb_mailto' shortcode in versions up to and including 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes.

The Slimstat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the 'slimstat' shortcode in versions up to and including 5.0.9 due to insufficient input sanitization and output escaping on user supplied attributes.

AudimexEE version 15.0 was found to contain a full path disclosure vulnerability.

AudimexEE v15.0 was found to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the Show Kai Data component.

A Stored Cross-Site Scripting (XSS) vulnerability in Usermin 2.001's SSH configuration tab allows remote attackers to inject arbitrary web scripts or HTML via options for the host value while editing host options.

Badaso versions 0.0.1 through 2.9.7 have a Cross Site Scripting vulnerability that allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function.

An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application.

A cross-site scripting (XSS) vulnerability in the device web interface of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter.

CVE-2023-39268 in ArubaOS-Switch is a memory corruption vulnerability that could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation allows arbitrary code execution as a privileged user on the underlying operating system.

An authenticated remote code execution vulnerability exists in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.

An arbitrary file write vulnerability allows an authenticated, remote attacker with administrator privileges to alter logging variables to overwrite arbitrary files on the remote host with log data.

A pass-back vulnerability exists in the Nessus application before version 10.6.0, allowing an authenticated remote attacker with administrator privileges to uncover stored SMTP credentials.

In goauthentik, an open-source Identity Provider, affected versions with an enabled recovery flow allow an attacker to determine if a username exists. This issue only affects setups configured with a recovery flow.

OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. In versions up to 5.9.0, during the verification of Cleartext Signed Messages, any data preceding the 'Hash: ...' header was ignored, allowing attackers to add arbitrary text that could be perceived as signed.

On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload.

Version 2.11.0 of the Xmlsoft Libxml2 library was found to contain an out-of-bounds read vulnerability in the xmlSAX2StartElement() function. This allows attackers to cause a Denial of Service (DoS) by supplying a crafted XML file.

In OpenBGPD before 8.1, incorrect handling of BGP update data may cause the system to incorrectly reset a session by a potentially distant remote actor.

In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users.

A memory leak flaw was found in nft_set_catchall_flush in the Linux Kernel, which may allow a local attacker to cause double-deactivations of catchall elements, resulting in a memory leak.

Buffer Overflow vulnerability in Libming v.0.4.8 allows a remote attacker to cause a denial of service via a crafted .swf file to the makeswf function.