CVE Vulnerability Catalog

The Slider Revolution plugin for WordPress versions 7.0 to 7.0.10 allows sensitive information disclosure. Authenticated attackers with Subscriber-level access can read server files (e.g., .sql, .log, .json) by copying them to a publicly accessible directory.

The certificate revocation check in the CycloneCrypto cryptographic wrapper of the S2OPC library only considers the first matching CRL, ignoring other valid CRLs of the same CA. This could allow an OPC UA client and server to connect using a revoked certificate.

The `GCSToSambaOperator` in the Apache Airflow Samba provider joins GCS object names to the SMB destination path without a containment check, allowing objects with `../` segments to write outside the configured `destination_path`. An attacker able to write objects to the source GCS bucket can write files to arbitrary locations on the Samba target.

In the Linux kernel, the IORING_OP_WAITID operation does not initialize the result structure before copying it to userspace. If the operation completes without reporting a child event, stale data from previous memory usage may be exposed.

Apache Answer up to version 2.0.0 did not enforce access restrictions on direct API endpoints for unlisted questions. Authenticated users could discover and view such questions, answers, comments, and revision history.

Apache Answer through version 2.0.0 has an XSS vulnerability because user-supplied content is included in notification emails without proper escaping. An authenticated user can inject arbitrary HTML into emails sent to other users.

In Apache Answer up to version 2.0.0, there is an unrestricted file upload vulnerability with dangerous type. The server did not sufficiently validate user-supplied image URLs, allowing arbitrary external content to be embedded as profile images.

Apache Answer up to version 2.0.0 has an unrestricted file upload vulnerability. A crafted TIFF image can trigger excessive memory allocation during decoding, causing a server crash. Authentication is required.

An Improper Link Resolution Before File Access ('Link Following') vulnerability in Dell iDRAC Tools versions prior to 11.4.1.0 allows a low privileged attacker with local access to potentially exploit it, leading to Information tampering.

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. Affects versions through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and its revision history. Users are recommended to upgrade to version 2.0.1.

Improper Neutralization of Alternate XSS Syntax vulnerability in Apache Answer. Affects versions through 2.0.0. AI-generated response content was rendered in the browser without proper sanitization, allowing malicious scripts to be executed when the content was viewed. Users are recommended to upgrade to version 2.0.1.

Use-After-Free (UAF) vulnerability in the package management module. Successful exploitation may affect service integrity.

Use-After-Free vulnerability in the package management module. Successful exploitation may affect service integrity.

Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability.

Race condition vulnerability in the IPC module. Successful exploitation may affect availability.

Out-of-bounds write vulnerability in the IPC module. Successful exploitation may affect availability.

DoS vulnerability in the log service. Successful exploitation may affect availability.

Permission control vulnerability in the audio framework. Successful exploitation may affect service confidentiality.

Permission control vulnerability in calls. Successful exploitation may affect availability.

Path traversal vulnerability in the SMS app. Successful exploitation may affect system availability.