CVE Vulnerability Catalog

Unauthenticated Cross Site Scripting (XSS) in Swatchly – WooCommerce Variation Swatches for Products versions up to 1.4.13. An attacker can inject malicious script without authentication.

Unauthenticated Cross Site Scripting (XSS) in GeoDirectory versions up to 2.8.173. An attacker can inject malicious script without authentication.

Unauthenticated Cross Site Scripting (XSS) in B2BKing Premium versions up to 5.6.07. An attacker can inject malicious script without authentication.

Unauthenticated Cross Site Scripting (XSS) in wpDataTables versions up to 6.5.1.4. An attacker can inject malicious script without authentication.

Subscriber SQL Injection in WordPress Persistent Login versions up to 3.1.0. A user with subscriber role can execute unauthorized database queries.

Unauthenticated Cross Site Scripting (XSS) in Tagembed versions up to 7.4. An attacker can inject malicious script without authentication.

Unauthenticated Cross Site Scripting (XSS) in TranslatePress versions up to and including 3.3.2.

Unauthenticated Cross Site Scripting (XSS) in JetEngine versions up to and including 3.8.14.1.

Unauthenticated Local File Inclusion in Golo Framework versions prior to 1.7.5.

Unauthenticated Local File Inclusion in Shuffle versions up to and including 1.8.

A flaw in FreeIPA allows a remote unauthenticated attacker to exploit the `/ipa/i18n_messages` endpoint by sending an arbitrarily large request body, causing excessive memory consumption, memory exhaustion, and denial of service.

A flaw in FreeIPA allows a remote unauthenticated attacker to send oversized form POST requests to `/ipa/migration/migration.py`, forcing the migration handler to read attacker-controlled bodies fully into memory, leading to increased memory usage, slower handling, and potential DoS.

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations, allowing a user with LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets and potential full domain compromise.

A flaw in libvirt allows an unprivileged local user to exploit an integer overflow in the NodeGetFreePages RPC handler, bypassing a size check and leading to a heap buffer overflow. This can corrupt the root libvirt daemon's memory, potentially causing DoS or local privilege escalation.

An unauthenticated remote attacker can retrieve sensitive files from the FDS Web server, such as the backup archive at `/FdsBackup.zip` and files under `/downloads/*`, directly over HTTP without a valid session. These files disclose detailed railway signaling and track layout information.

A low privileged remote attacker can cause authenticated users to perform unintended actions in the FDS Web interface using malicious web pages.

A low-privileged remote attacker can hijack an active administrative session without knowing the admin password by extracting plaintext session identifiers from downloadable error logs.

A high-privileged remote attacker can upload a malicious ZIP with directory traversal sequences, escaping the extraction directory and writing files to arbitrary locations, potentially achieving code execution.

A high-privileged remote attacker can upload a .php file and request it directly from /uploads to achieve arbitrary code execution due to improper file type validation.

Joomla extension Phoca Cart 5.0.0-6.1.7 has a stored XSS vulnerability via User-Agent header in the admin order view.