CVE Vulnerability Catalog

CVE-2025-7064 affects the ABB Freelance system and allows authentication bypass due to a primary weakness. It impacts Freelance versions from 2013 to 2024.

CSRF vulnerability in YITH WooCommerce Product Slider Carousel allows Cross Site Request Forgery. This affects versions from n/a through 1.16.0.

TemplateHouse Soledad has a missing authorization vulnerability that allows access to functionality not properly constrained by access control lists (ACLs). This issue affects Soledad from n/a through 8.2.5.

A Cross-Site Request Forgery (CSRF) vulnerability was found in the WpEvently plugin for WordPress up to version 4.1.2. Lack of proper protections allows an attacker to perform unauthorized actions in the context of an authenticated user.

The Essential Plugin WP Logo Showcase Responsive Slider and Carousel for WordPress up to version 3.6 has an authorization bypass vulnerability through a User-Controlled key. This allows exploiting incorrectly configured access control security levels.

Vulnerability in Spring Boot where ArtemisEmbeddedConfigurationFactory uses a fixed, predictable path for the Artemis broker data directory. A local attacker can create a symlink before application start.

Spring Web Services integrated with Spring Security may expose detailed account state (e.g., locked or disabled user) to remote SOAP clients via exception messages or callback outcomes, instead of generic authentication errors. Affects versions 5.0.0-5.0.1, 4.1.0-4.1.3, 4.0.0-4.0.18, 3.1.0-3.1.8.

In Spring Web Services, Wss4jSecurityInterceptor defaults allowRSA15KeyTransportAlgorithm to true, overriding Apache WSS4J's safer default. This allows acceptance of RSA PKCS#1 v1.5 (rsa-1_5) encrypted keys during WS-Security decryption unless explicitly reconfigured.

In Spring Web Services, X509AuthenticationProvider can issue a fully authenticated token when a certificate maps to UserDetails without applying standard account lifecycle checks (disabled, locked, expired, or credentials-expired accounts).

In Spring Boot, a vulnerability was found in the mail auto-configuration that does not enable hostname verification. Applications that explicitly set the JavaMail property (e.g., spring.mail.properties.mail.smtp.ssl.checkserveridentity=true) are not affected. Affected versions are Spring Boot 4.0.0-4.0.6, 3.5.0-3.5.14, and 3.4.0-3.4.16.

Vulnerability in Spring Web Flow where the JavaScript RemotingHandler renders the error response body as HTML even when the response is not 'text/html'. This can lead to a scripting attack in the user's browser if the error response contains attacker-reflected data. Affects versions 4.0.0, 3.0.0-3.0.1, 2.5.0-2.5.1.

Applications that configure WebFlowELExpressionParser are vulnerable to malicious Unified EL expressions. Affected versions: Spring Web Flow 4.0.0, 3.0.0-3.0.1, and 2.5.0-2.5.1.

The Open User Map PRO plugin for WordPress up to version 1.4.31 is vulnerable to Stored Cross-Site Scripting via the 'oum_location_notification' parameter due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts that execute whenever a user accesses an injected page.

In ImageMagick prior to version 7.1.2-25, a crafted multi-frame file can cause a heap buffer overwrite when encoding with the SF3 encoder. This issue has been fixed in version 7.1.2-25.

In ImageMagick prior to version 7.1.2-25, providing invalid options to the wand option parser causes a small memory leak. This issue has been fixed in version 7.1.2-25.

ImageMagick before versions 6.9.13-50 and 7.1.2-25 has a null pointer dereference vulnerability in the distort operation with incorrect arguments. The issue is fixed in the mentioned versions.

ImageMagick before versions 6.9.13-50 and 7.1.2-25 contains a heap-use-after-free vulnerability in CheckPrimitiveExtent when memory allocation fails, potentially causing a crash.

ImageMagick prior to versions 6.9.13-48 and 7.1.2-24 has a filename parsing flaw that allows bypassing security policy and reading files disallowed by policy using a symlink.

ImageMagick before versions 6.9.13-48 and 7.1.2-24 contains a vulnerability in the MAT decoder on 32-bit systems, where a missing return value check could lead to a heap buffer over-write.

In ImageMagick prior to versions 6.9.13-49 and 7.1.2-24, a crafted MVG file can cause a stack overflow due to a missing depth or visited-set check. This issue has been fixed in versions 6.9.13-49 and 7.1.2-24.