CVE Vulnerability Catalog

electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the main process.

In hawtio-operator, the ClusterRole grants secrets: [create, get, list, update, watch] across all namespaces. Although the operator uses a label-selector cache as a memory optimization, the ServiceAccount token authorizes read access to every Secret in the cluster. The operator also bypasses the cache via direct API calls. Compromise of the operator pod would yield read access to every Secret in the cluster, including bootstrap tokens, cloud credentials, and other operators' secrets.

In libxml2 with Python bindings enabled, a remote attacker could exploit a specially crafted XML document containing a DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Stripe OAuth return endpoint in all versions up to, and including, 5.27.4. This makes it possible for unauthenticated attackers to overwrite the site's Stripe merchant credentials, diverting all subsequent payment processing to the attacker's Stripe account.

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.1.18 via deserialization of untrusted input. This makes it possible for authenticated attackers with contributor-level access and above to inject a PHP Object. No known POP chain is present in the vulnerable software, meaning no impact unless another plugin or theme with a POP chain is installed. If a POP chain is present, it may allow actions like deleting arbitrary files, retrieving sensitive data, or executing code.

The EDD Product Catalog Feed by PixelYourSite plugin for WordPress is vulnerable to unauthorized data modification leading to denial of service due to a missing capability check in the wpeddpcf_delete_feed function. Authenticated attackers with subscriber-level access can delete arbitrary option values.

Backend administrators without system maintainer privileges can schedule configuration:read, configuration:set, and configuration:show commands. This allows them to modify system configuration, potentially gaining system maintainer privileges or causing denial of service.

SIMOVE Fleetmanager and SIPLANT devices do not properly validate and neutralize directory traversal sequences in the file-serving endpoint of the embedded HTTP server. An unauthenticated remote attacker can read arbitrary files from the operating system, including credentials and private keys.

Reyrolle 7SR5 devices do not properly enforce server-side authorization checks in the web-based management interface. Manipulation of request data can bypass RBAC restrictions, allowing an authenticated low-privileged attacker to escalate to administrative level.

The web server in Reyrolle 7SR5 devices does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. An unauthenticated remote attacker can cause the device to crash and reboot, resulting in denial of service.

In Reyrolle 7SR5 devices, the length of the URL component in pre-authenticated HTTP messages is not properly validated before appending additional data, resulting in an out-of-bounds write. An unauthenticated remote attacker can crash the device, causing a reboot and denial of service.

In Reyrolle 7SR5 devices, a random number generator used for security-relevant values (such as session identifiers) is not initialized with a True Random Number Generator (TRNG), resulting in predictable sequences. An unauthenticated remote attacker can more easily predict values and impersonate a legitimate user.

In Reyrolle 7SR5 devices, session identifiers are generated using an algorithm with insufficient randomness, resulting in low-entropy tokens that can be predicted or brute-forced. An unauthenticated remote attacker can derive valid session identifiers and bypass authentication.

A vulnerability in Desigo CC applications allows Client Code Execution (CCE) due to insufficient input validation when handling scripts embedded in user-defined graphics documents. An attacker can craft a malicious graphics document that, when opened by a privileged user, executes a script, allowing arbitrary file writes to the client's operating system.

Unauthenticated Cross Site Scripting (XSS) vulnerability in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) versions up to 2.0.17. Allows an attacker to inject malicious script into a page, which executes in the victim's browser.

Unauthenticated Cross Site Scripting (XSS) vulnerability in Open User Map versions up to 1.4.50. Allows an attacker to inject malicious script into a page, which executes in the victim's browser.

Unauthenticated Cross Site Scripting (XSS) vulnerability in JetFormBuilder versions up to 3.6.5.1. Allows an attacker to inject malicious script into a page, which executes in the victim's browser.

Server-Side Request Forgery (SSRF) vulnerability in Hide My WP Ghost versions up to 7.0.09. Allows an attacker to send requests from the server to internal network resources, potentially leading to disclosure of sensitive information or further attacks.

DOM-Based Cross Site Scripting (XSS) vulnerability in Easy Appointments versions up to 4.0.2.1. Allows an attacker to manipulate the DOM of the page in the victim's browser, leading to execution of malicious script.

Missing Authorization vulnerability in Csomagpontok és szállítási címkék WooCommerce-hez before version 4.2.8. Allows exploiting incorrectly configured access control security levels, potentially leading to unauthorized actions.