CVE Vulnerability Catalog

Broken Access Control vulnerability in Aruba Migration Tool up to version 1.0.4 allows a subscriber to gain unauthorized access to administrative functions.

Unauthenticated Insecure Direct Object References (IDOR) in Bus Ticket Booking with Seat Reservation up to version 5.9.3 allows an attacker to access resources without authorization.

Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions.

This CVE number has been rejected and should not be used. The candidate was withdrawn by its CNA because further investigation showed it was not a security issue.

Editor PHP Object Injection in Hide Shipping Method For WooCommerce <= 1.5.4 versions.

Vulnerability in boks_ksllogsd allows an authenticated KSL client to supply an oversized digest name, leading to a heap buffer overflow.

Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKS_tmp may be able to obtain CA secret or host private-key material while the utility runs, or obtain CA secret material left behind after successful certificate creation.

Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master.

HCL BigFix Service Management has an information disclosure vulnerability because two exposed API endpoints return sensitive data, potentially enabling further serious attacks.

HCL BigFix Service Management is affected by an insecure communication vulnerability that allows an attacker with internal network access to intercept unencrypted HTTP traffic between backend services. This enables the extraction of sensitive data and potential man-in-the-middle attacks.

HCL BigFix Service Management has an information disclosure vulnerability that allows an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling discovery of hidden administrative API endpoints.

The WP Full Stripe Free plugin in versions up to 8.5.6 contains a Broken Access Control vulnerability exploitable by an unauthenticated attacker. Missing access controls allow unauthorized access to functions or data.

The WordPress File Upload plugin in versions up to and including 5.1.10 contains an SQL injection vulnerability exploitable by an unauthenticated attacker.

HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing security attributes such as SameSite, HttpOnly, Secure, and restrictive Paths, enabling Cross-Site Request Forgery (CSRF), session hijacking via Cross-Site Scripting (XSS), and unauthorized access.

HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability that allows an attacker to inject and store malicious scripts within the application. These scripts execute when a victim views the affected page, enabling session hijacking and theft of sensitive data.

The Authorizer plugin in versions up to and including 3.15.3 contains an unauthenticated privilege escalation vulnerability.

A vulnerability has been found in rhukster dom-sanitizer up to version 1.0.15. The affected element is the url function in src/DOMSanitizer.php of the SVG Sanitization component. Manipulation leads to an incomplete blacklist, allowing remote exploitation. The exploit has been publicly disclosed and may be used.

Unauthenticated bypass vulnerability in hCaptcha for WP up to version 5.3.0 allows an attacker to bypass security mechanisms.

The ByteCoreStack – MCP Connector for AI Tools plugin in versions up to 1.2.2 contains a Subscriber Privilege Escalation vulnerability. A low-privileged user can gain higher privileges within the application.

Vulnerability in Next.js versions 16.3.0 to 16.3.7 causes incorrect cache keying for 'use cache' handlers, potentially leaking return values across different root params.