CVE Vulnerability Catalog

MediaInfoLib has a heap buffer overflow vulnerability in ID3v2 tag parsing.

MediaInfoLib has a heap-based buffer overflow vulnerability in LXF file parsing.

The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash.

The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.

The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A low-privileged local attacker can exploit a TOCTOU race condition to replace verified files with malicious ones before installation, resulting in local privilege escalation.

The affected product creates a directory with insecure default permissions during administrative installation. A low-privileged local attacker can modify a temporary file defining components to be installed, enabling local privilege escalation by forcing deployment of arbitrary components.

Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec value that triggers the function’s regex replacement and string-manipulation logic, causing excessive CPU consumption and potentially stalling or crashing the process.

Access control bypass vulnerability in the @koa/router package from version 14.0.0 before 15.0.0. When the router prefix contains path parameters, middleware is silently dropped from the execution chain, potentially allowing an attacker to bypass authentication, authorization, rate limiting, or input sanitization.

A vulnerability was identified in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /admin/delete_judge.php. Such manipulation of the argument judge_id leads to SQL injection. The attack can be executed remotely. The exploit is publicly available and might be used.

A vulnerability was found in itsourcecode Electronic Judging System 1.0. This vulnerability affects unknown code of the file /admin/edit_team.php. The manipulation of the argument num_id results in SQL injection. The attack may be launched remotely. The exploit has been made public and could be used.

SQL Injection vulnerability in /admin/edit_judge.php of itsourcecode Electronic Judging System 1.0. Attack via manipulation of judge_id parameter, remotely exploitable. Exploit is publicly available.

Vulnerability in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 3000WEBV2 allows remote SQL injection via the sort parameter in /SubstationWEBV2/app/..;/calc/getCalcmeterDetailDayListTree. Exploit is publicly available.

In the Archive::Tar library for Perl versions before 3.10, memory exhaustion is possible via an attacker-controlled entry size field in the tar header. The _read_tar() function allocates a scalar based on the header size without an upper bound.

The bitsery library (fraillt) up to version 5.2.4 has a vulnerability in the loadFromSharedState function in include/bitsery/ext/std_smart_ptr.h, due to improper validation of input type. Remote attack possible. Exploit publicly disclosed. Fixed in version 5.2.5.

A vulnerability in Archive::Tar for Perl before version 3.08 allows extraction of hardlinks to attacker-controlled paths outside the extraction directory. The _make_special_file() function passes the tar header's linkname to link() without validating absolute paths or '..' segments, creating a hardlink to the victim file. A subsequent write through the extracted name modifies the victim file, and the _extract_file() block (guarded only against symlinks) applies permissions, owner, and timestamps to the shared inode.

hemant6488 CodeIgniter-StudentManagementSystem has a vulnerability in the /index.php/students/addStudentView function that allows improper access controls. The attack can be executed remotely and the exploit has been publicly disclosed.

The Unlimited Elements For Elementor plugin up to version 2.0.8 is vulnerable to blind SQL Injection. Attackers can inject SQL queries through unsanitized parameters, allowing unauthorized database access.

Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce before version 2.3.0, allowing exploitation of incorrectly configured access control security levels.

The Smart Manager plugin for WordPress contains an incorrect privilege assignment vulnerability that allows privilege escalation. This issue affects versions up to and including 8.85.0.

Missing Authorization vulnerability in edward_plainview MyCryptoCheckout allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MyCryptoCheckout from n/a through 2.161.