CVE Vulnerability Catalog

The Dynamic User Directory plugin by Sarah Giles contains a Blind SQL Injection vulnerability due to improper neutralization of special elements in an SQL command. This issue affects versions up to and including 2.4.

The WP Rentals plugin (versions up to and including 3.14.2) contains a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This issue affects WP Rentals from n/a through 3.14.2.

Stored XSS vulnerability in the Rocket Lazy Load plugin by WP Media Rocket. Improper input neutralization during page generation allows persistent execution of malicious scripts.

The Modula Image Gallery plugin for WordPress contains a missing authorization vulnerability that allows retrieving embedded sensitive data. The issue affects versions up to and including 3.0.11.

The Prime Slider – Addons For Elementor plugin for WordPress has a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions from n/a through 4.6.2.

The Element Pack Elementor Addons plugin for WordPress has a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions from n/a through 8.8.6.

The Element Pack Elementor Addons plugin for WordPress has a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions from n/a through 8.8.6.

LMCache multiprocess mode opens an unauthenticated ZeroMQ ROUTER for worker registration and KV cache sharing. Messages are msgpack, and extension code 1 is passed to DeviceIPCWrapper.Deserialize, which calls pickle.loads before the handler runs. A single unauthenticated ZMQ DEALER message to the transport port (default 5555) executes code as the LMCache user. Official containers run as root. The transport binds to localhost unless --host is set for multi-node deployments.

Stored XSS vulnerability in the Happy Addons for Elementor plugin by weDevs. Improper input neutralization during page generation allows persistent execution of malicious scripts.

Stored XSS vulnerability in the Quiz And Survey Master plugin by ExpressTech. Improper input neutralization during page generation allows persistent execution of malicious scripts.

The Booktics plugin for WordPress has a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This issue affects versions from n/a through 1.0.27.

The Hustle plugin (versions up to and including 7.8.14.2) contains a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This issue affects Hustle from n/a through 7.8.14.2.

Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 allows attackers to access resources served by the executor's webserver when that webserver is configured to accept JWT/OAuth tokens. Bearer token (JWT) signatures are not validated, resulting in the webserver accepting any valid JWT.

An SQL user using Impala up to and including version 4.5.2 with only SELECT permission can put JavaScript in a table alias and make it run in another user's browser when that user opens the query plan in Impala's Web UI. This is stored XSS (CWE-79).

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials.

Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trusted_jar_paths'. The attack requires 'trusted_jar_paths' to have a non-empty value configured by the Impala admin.

The OMGF WordPress plugin is vulnerable to Stored Cross-Site Scripting via the 's' Search Parameter in comments-atom Feed in all versions up to and including 6.3.10 due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts that execute when a user accesses an injected page, provided the front-end server serves the retained .tmp file without proper Content-Type headers.

Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200 web portal allows an authenticated user to read any file or list any directory accessible to the web server user by modifying the URL with a path traversal payload.

This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host.

A vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system.