CVE Vulnerability Catalog

There is an unauthenticated bypass vulnerability in WpTravelly versions up to 2.1.7.

Versions up to 5.1.2 have a vulnerability in access control that allows user registration without authentication.

SQL Injection vulnerability in PowerPress Podcasting versions <= 11.15.10 allows attackers to inject malicious SQL queries.

Versions of Redirection for Contact Form 7 up to 3.2.8 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious JavaScript code.

Eli's WordCents adSense Widget with versions up to 1.3.03.27 has an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious JavaScript code.

There is an unauthenticated Cross Site Scripting (XSS) vulnerability in Okay Toolkit versions <= 2.3. An attacker can exploit this flaw to inject malicious scripts.

Versions of iRobots.txt SEO <= 1.1.2 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts.

In Projectopia versions <= 5.1.25.2, there is a vulnerability related to custom roles that allows unauthorized access to objects (IDOR). This issue may lead to the exposure of sensitive user data.

A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. An integer overflow in buffer size calculation (4 * block_samples * channels) in gst_wavpack_dec_handle_frame() causes a very small heap allocation, leading to heap memory corruption when decoded audio samples are written beyond the allocated buffer. This affects both 32-bit and 64-bit systems as the arithmetic is performed in 32-bit integers before promotion to the allocation size type.

In GStreamer's RealMedia demuxer (gst-plugins-ugly), offsets are not validated when processing FILEINFO metadata, and the element count is attacker-controlled. This can cause infinite loops, crashes, or adjacent memory reads.

Vulnerability in the RealMedia demuxer of GStreamer (gst-plugins-ugly) causes an out-of-bounds read when processing a malicious .rm file. The attack can lead to application crash or limited information disclosure.

A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor dimensions can overflow signed integer payload-size arithmetic, bypassing a length check and leading to out-of-bounds reads.

A heap buffer overflow vulnerability was found in GStreamer's librfb library. Incorrect rectangle bounds checking allows a malicious VNC server to send a rectangle extending beyond the framebuffer, leading to an out-of-bounds heap write.

An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against available data, leading to a read beyond the input buffer.

Incorrect access control in the /admin/api/config component of Filestash v0.4.0 allows attackers to escalate privileges via sending a crafted request.

In LLDAP v0.6.2, there is an input handling flaw in the HTTP refresh token process that allows attackers to cause a Denial of Service (DoS) by sending a crafted refresh-token header.

In version 1.8.0 of the custom scraper component in Benjamin Jonard Koillection, there is an authenticated Server-Side Request Forgery (SSRF) vulnerability that allows attackers to scan internal resources by supplying a crafted URL.

Sismics Docs (Teedy) v1.11 has incorrect access control in share-based read endpoints, allowing unauthorized attackers to access sensitive endpoints via a crafted request.

In statping-ng version 0.93.0, incorrect access control allows attackers to escalate privileges to Administrator and access sensitive components.

Version 0.1.1 of the anna-is-cute application has an issue in the /api/v0/pastes endpoint that allows attackers to cause a Denial of Service (DoS) via a crafted POST request.