CVE Vulnerability Catalog

The MonsterInsights – Google Analytics Dashboard for WordPress plugin is vulnerable to unauthorized access and data modification due to missing capability checks on the get_ads_access_token() and reset_experience() functions. Authenticated attackers with Subscriber-level access and above can retrieve live Google OAuth access tokens and reset the plugin's Google Ads integration.

ChurchCRM is an open-source church management system. Prior to version 7.3.2, an attacker could exploit top-level GET navigation from an external page to FundRaiserDelete.php, PropertyTypeDelete.php, or NoteDelete.php, allowing a logged-in user with the relevant role to silently delete records.

A Remote Code Execution vulnerability in Claris FileMaker Cloud allows a user with Admin Console privileges to inject arbitrary operating system commands through unsanitized input in the External ODBC Data Source connection test feature.

A Remote Code Execution vulnerability in Claris FileMaker Cloud allows a user with Admin Console privileges to bypass a front-end restriction on OS Script schedule types and execute arbitrary operating system commands on the underlying host.

ChurchCRM is an open-source church management system. Prior to 7.3.2, UserEditor.php processes user account creation and permission updates entirely through $_POST parameters with no CSRF token validation.

Flowsint is an OSINT graph exploration tool that prior to version 1.2.3 allowed a remote attacker to create a node with a malicious type, which could lead to escaping an existing Cypher query and executing arbitrary Cypher queries.

The Court Reservation – Manage Your Court Bookings Online plugin for WordPress is vulnerable to generic SQL Injection via the ‘id’ parameter in all versions up to and including 1.10.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.

Heym before version 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor. Authenticated workflow authors can bypass sandbox restrictions using object-graph introspection primitives.

Heym before version 0.0.21 contains an authorization bypass vulnerability in workflow execution. An authenticated attacker can execute arbitrary workflows by referencing victim workflow UUIDs without proper access validation.

A path traversal vulnerability in Heym before version 0.0.21 allows authenticated users to write attacker-controlled files to arbitrary locations by supplying a crafted filename with traversal sequences. The flaw exists in the file upload endpoint where the filename parameter is not properly validated.

Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

Mako is a template library written in Python. Prior to 1.3.12, on Windows, a URI using backslash traversal (e.g. \..\..\ secret.txt) bypassed the directory traversal check in Template.__init__ and the posixpath-based normalization in TemplateLookup.get_template(), allowing reads of files outside the configured template directory.

Lemur manages TLS certificate creation. Prior to version 1.9.0, Lemur's LDAP authentication module constructs LDAP search filters using unsanitized user input, allowing LDAP users to inject LDAP filter metacharacters.

Snappier is a high performance C# implementation of the Snappy compression algorithm. Prior to version 1.3.1, Snappier.SnappyStream enters an uncatchable infinite loop when decompressing a malformed framed-format Snappy stream as small as 15 bytes.

Hugo, a static site generator, had a vulnerability in versions from 0.43 to before 0.161.0 that allowed unrestricted file system access during the build of sites using Node-based asset pipelines. Running hugo against an untrusted site could allow code running through these tools to read or write files outside the project's working directory.

Deskflow, a keyboard and mouse sharing app, has a remote denial of service (DoS) vulnerability prior to version 1.26.0.167. Attackers can disrupt input delivery to all connected screens by sending malformed TCP connections.

In versions prior to 4.08.010 of the efw4.X framework, the readonly flag set on the <efw:elFinder> JSP tag was intended to prevent file modifications. However, the lack of proper event handlers allows attackers to perform write operations by bypassing the user interface.

A vulnerability in the Micronaut Framework allows an unauthenticated attacker to exhaust heap memory by sending requests with unique locale tags in the Accept-Language header. The DateTimeFormatter caching mechanism in TimeConverterRegistrar uses an unbounded ConcurrentHashMap whose key includes the locale from the HTTP header, enabling an unlimited number of cache entries.

Nginx UI is a web user interface for the Nginx web server. In versions 2.3.4 and earlier, an authenticated user can perform Server-Side Request Forgery (SSRF) by creating a cluster node pointing to an arbitrary internal URL.

In versions prior to 3.3.8, the Digest authentication implementation in arduino-esp32 computed the authentication hash using the URI field from the client's Authorization header, without verifying that it matched the actual requested URI. This allows an attacker to authenticate requests to a different protected URI, bypassing access control.