CVE Vulnerability Catalog

A vulnerability was detected in Totolink A3002MU version 1.0.0-B20230403.1455. It affects the function sub_44B250 in the file /boafrm/formUploadFile of the File Upload Handler component. Manipulation of the filename argument results in path traversal. The attack can be executed remotely, and the exploit is public.

A vulnerability has been detected in Totolink A3002MU version 1.0.0-B20230403.1455. It affects an unknown function in the file /boafrm/formIpQoS of the QoS Rule Handler component. Manipulation of the addQos/comment/entry_name arguments leads to a stack-based buffer overflow. The attack can be performed remotely, and the exploit has been publicly disclosed.

An Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks. This issue affects CURCY from n/a through 2.2.17.

A Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Starter Templates from n/a through 4.7.7.

A vulnerability was found in the system-call verifier for i3c_do_ccc() in Zephyr RTOS, which fails to validate per-target data pointers in the i3c_ccc_payload structure. The verifier also operates on the caller's live structure, allowing another thread to modify fields between check and use. This allows an unprivileged thread to write to arbitrary kernel addresses (via read CCC) or disclose kernel memory (via write CCC), leading to privilege escalation.

The NXP GAU ADC driver (adc_mcux_gau_adc.c) incorrectly validates the caller-supplied buffer size: it compares bytes against the number of channels (samples) and then uses that byte count as the number of uint16_t slots. As a result, a buffer accepted as 'large enough' can be written up to twice its size in bytes, causing an out-of-bounds write for every sample past the buffer's midpoint.

A weakness has been identified in Totolink A3002MU version 1.0.0-B20230403.1455. It affects the function sub_40FCFC in the file /bin/boa of the Authentication Check component. Executing a manipulation can lead to improper authorization. The attack can be launched remotely, and the exploit has been made publicly available.

A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of the file application/front/controller/admin/MetadataController.php of the Admin Metadata Endpoint component. Manipulation of the url argument results in server-side request forgery. The attack may be initiated remotely. Upgrading to version 0.16.4 is sufficient to fix this issue.

A vulnerability was identified in itsourcecode Online Admission System 1.0. It impacts an unknown function in the file /admin/schoolyear.php. Manipulation of the sy argument leads to SQL injection. The attack can be launched remotely, and the exploit is publicly available.

A SQL Injection vulnerability was found in itsourcecode Online Admission System Project 1.0 within the file /admin/login1.php, caused by improper handling of the User argument. The flaw can be exploited remotely and a public exploit is already available.

A vulnerability was detected in vgmstream up to r2117. The function ps_find_padding in the file src/coding/psx_decoder.c of the VAG File Handler component is affected. Manipulation results in an out-of-bounds read. The attack can be carried out remotely. A patch is available.

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikki Blight QR Redirector qr-redirector allows Stored XSS. This issue affects QR Redirector from n/a through 2.0.5.

An Insertion of Sensitive Information Into Sent Data vulnerability in Pixelite Events Manager events-manager allows Retrieve Embedded Sensitive Data. This issue affects Events Manager from n/a through 7.4.5.

A Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Parameter Injection. This issue affects the plugin from n/a through 2.0.22.

A Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Admin Audit from n/a through 1.2.17.

Stored XSS vulnerability in Logo Showcase plugin up to version 4.0.4. An attacker can inject a malicious script that executes in the administrator's browser.

Stored XSS vulnerability in eCommerce Product Catalog plugin up to version 3.6.2. Allows injection of a persistent script that can execute in the user's browser context.

Missing authorization in WP Mailster plugin up to version 1.9.0.0. Allows exploitation of incorrectly configured access control security levels.

A vulnerability was found in DigitalCanion SA's product within the Configuration → Services → Music on Hold functionality of the web portal on TCP port 443, which fails to properly validate uploaded file types. An authenticated attacker can upload a malicious .so file instead of a WAV file, leading to remote code execution in the context of the affected process.

Mitel MiVoice Office 400 contains a directory traversal vulnerability in the web portal on TCP port 443, under Maintenance → File Management → File Browser. An authenticated attacker can access and delete files outside the intended directory, including Mitel application and underlying Linux system files.