CVE Vulnerability Catalog

A Cross-site Scripting (XSS) vulnerability, reflected, exists in the GitHub repository cockpit-hq/cockpit prior to version 2.6.4. An attacker can exploit this vulnerability to inject malicious scripts in the context of the victim's browser.

CVE-2023-40174 affects the Social media skeleton project, which improperly manages the user session lifecycle. Versions prior to 1.0.5 did not adequately limit session duration, posing a risk of unauthorized access.

CVE-2023-40172 affects the Social media skeleton project, which prior to version 1.0.5 did not properly restrict Cross-site request forgery (CSRF) attacks. An attacker could trick a victim into performing unintended actions on a website.

Apache NiFi versions 1.21.0 through 1.23.0 have a vulnerability in the validation of JDBC and JNDI JMS connection URLs, allowing authenticated users to bypass this validation using custom input formatting.

A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository cockpit-hq/cockpit prior to version 2.6.3, allowing for the storage of malicious code.

A Cross-Site Scripting (XSS) vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields.

CSZ CMS version 1.3.0 is vulnerable to cross-site scripting (XSS), allowing attackers to execute arbitrary web scripts or HTML via a crafted payload entered in the 'Carousel Wiget' section.

A critical vulnerability was found in the Byzoro Smart S85F Management Platform up to version 20230807. Manipulation of the argument in the file /log/decodmail.php leads to command injection, allowing for remote attacks.

A critical vulnerability was found in the TOTOLINK EX1200L device in version EN_V9.3.5u.6146_B20201023, affecting the setWanCfg function. Manipulation of this function leads to OS command injection.

A critical vulnerability has been found in the TOTOLINK EX1200L device version EN_V9.3.5u.6146_B20201023, affecting the setTracerouteCfg function. Manipulation of this function leads to remote OS command injection.

A critical vulnerability was found in the TOTOLINK EX1200L device version EN_V9.3.5u.6146_B20201023, affecting the setDiagnosisCfg function. Manipulation of this function leads to remote command injection.

A critical vulnerability has been found in NBS&HappySoftWeChat version 1.1.6, allowing unrestricted file uploads. The attack can be launched remotely.

A critical vulnerability was found in Codecanyon Credit Lite version 1.5.4, affecting an unknown functionality of the file /portal/reports/account_statement in the POST Request Handler component. Manipulation of the arguments date1/date2 leads to SQL injection.

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eh_callback_handler function in versions up to and including 3.7.9. This allows unauthenticated attackers to modify the order status of arbitrary WooCommerce orders.

A vulnerability in the AcyMailing Enterprise component for Joomla allows unauthorized actors to obtain the number of subscribers in a specific list.

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns.

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists.

CVE-2023-39971 describes an improper neutralization of input during web page generation vulnerability in the AcyMailing Enterprise component for Joomla, allowing for XSS attacks. This issue affects versions 6.7.0-8.6.3 of the component.

In OpenMNS Horizon version 31.0.8 and earlier than 32.0.2, users with the ROLE_FILESYSTEM_EDITOR can easily escalate their privileges to ROLE_ADMIN or any other role. This issue also affects related Meridian versions.