CVE Vulnerability Catalog

A reflected XSS vulnerability in the dfm-menu_markeralerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser by injecting a crafted payload into an unfiltered variable value.

A reflected cross-site scripting (XSS) vulnerability in the acc-menu_pricess.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

A reflected cross-site scripting (XSS) vulnerability in the dfm-menu_alerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

A flaw was found in Cockpit that allows a remote attacker to execute arbitrary commands on the host by exploiting unsanitized user-controlled parameters in the system logs UI. An attacker can inject shell metacharacters and command substitutions, leading to arbitrary shell command execution on the affected system.

The Magic Link authentication flow accepts multiple invalid authentication requests without adequate rate limiting or resource control, leading to uncontrolled memory usage growth.

A path traversal vulnerability exists in GROWI v7.5.0 and earlier, which may allow an attacker to execute arbitrary EJS templates on the server when an email server is running in GROWI.

Dell Automation Platform versions prior to 2.0.0.0 contain a missing authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.

Due to a lack of user account state validation during authentication, locked user accounts can be successfully authenticated using Magic Link or Pass Key methods. This bypasses the intended security control that should prevent access to accounts that have been locked.

In the Linux kernel, a vulnerability was found in the RxRPC protocol implementation where DATA and RESPONSE packet handlers did not check for shared page fragments (e.g., from splice()). This allowed in-place decryption on shared pages, potentially leading to data integrity issues.

The Custom css-js-php WordPress plugin through 2.0.7 does not properly sanitize user input before using it in a SQL query, allowing unauthenticated users to execute arbitrary PHP code on the server.

A vulnerability was found in D-Link DCS-935L up to 1.10.01 in the SetDeviceSettings function of /web/cgi-bin/hnap/hnap_service. Manipulating the AdminPassword argument results in a buffer overflow. The attack can be executed remotely, and the exploit is publicly available.

XML::LibXML for Perl up to version 2.0210 reads out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 sequences. A node name ending in the middle of a multi-byte UTF-8 sequence causes reading past the end of the input string into adjacent heap memory.

Catalyst::Plugin::Statsd for Perl versions up to 0.10.0 may leak session IDs. If the communication channel to the statsd daemon is not secured (e.g., sending UDP packets to a host on another network), session IDs can be exposed.

Vulnerability in Aero CMS 0.0.1 allows authenticated attackers to inject PHP code by uploading malicious files via the image parameter. Attackers can upload PHP files with embedded code to the admin posts.php endpoint with source=add_post parameter, and the uploaded files are executed by the server.

CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink attacks through the filemanager controller endpoint.

Argus Surveillance DVR 4.0 has an unquoted service path vulnerability in the DVRWatchdog service, allowing local attackers to escalate privileges by placing a malicious executable in the Program Files directory.

memono Notepad 4.2 contains a denial of service vulnerability that allows attackers to crash the application by pasting an excessively long character buffer into note fields. Attackers can generate a payload of 350000 repeated characters and paste it twice, causing a crash on iOS devices.

TextPattern CMS 4.8.7 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files via the file upload functionality. Attackers can upload a PHP shell via the Files section and execute commands by accessing the uploaded file with GET parameters passed to the system function.

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap cookie parameter. Attackers can extract usernames, passwords, and other confidential data from the WordPress database.

Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injecting PHP code into module parameters. Attackers can send POST requests to /manager/index.php with malicious PHP code in the 'post' parameter to create modules that execute arbitrary commands when invoked.