CVE Vulnerability Catalog

PrivateUploader is an image hosting server that in affected versions did not correctly verify whether the user was an administrator or moderator. This led to processing requests even when the response indicated insufficient permissions.

The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitize and escape several parameters before using it in a SQL statement as part of its exportation feature, allowing unauthenticated attackers to conduct SQL injection attacks.

A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands within the context of the system.

A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through version 1.2.5.23, which could allow a malicious actor to access sensitive information and execute arbitrary database and management operations.

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), leading to a pointer/overflow issue. This can only occur for xterm installations configured at compile time to use a certain experimental feature.

A heap-based buffer overflow vulnerability exists in the GitHub repository radareorg/radare2 prior to version 5.9.0.

An out-of-bounds memory access vulnerability in ONLYOFFICE DocumentServer versions 4.0.3 through 7.3.2. A remote attacker can execute arbitrary code using a crafted JavaScript file.

A use-after-free vulnerability in ONLYOFFICE DocumentServer versions 4.0.3 through 7.3.2 allows remote attackers to execute arbitrary code via a crafted JavaScript file.

A SQL injection vulnerability was discovered in novel-plus version 3.6.2. This flaw could allow an attacker to manipulate database queries.

CVE-2023-3267 allows an authenticated user to pass arbitrary OS commands through the username field when adding a remote backup location. This field is passed unsanitized into CMD running as NT/Authority System.

A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checks if LDAP authentication is selected. An unauthenticated attacker can log in to the CypberPower PowerPanel Enterprise as an administrator by selecting LDAP authentication from a hidden HTML combo box.

An authentication bypass exists on CyberPower PowerPanel Enterprise due to failing to sanitize meta-characters from the username. An attacker can log in to the application with the default user 'cyberpower' by appending a non-printable character.

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the 'iBootPduSiteAuth' cookie, a malicious agent can direct the device to connect to a rogue database.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.