CVE Vulnerability Catalog

Dell PowerFlex Manager version 4.6.2 and below has an insecure storage of sensitive information vulnerability. A low-privileged attacker with local access can gain unauthorized access to sensitive data.

Dell VxRail versions before 7.0.200 contain a plain-text password storage vulnerability in VxRail Manager. A sys-admin user may exploit this to disclose certain user credentials.

vifm is vulnerable to a heap buffer overflow during history merge when saving the state file (vifminfo.json). Lack of runtime length check on history entries in release builds can allow a crafted long path or command to cause memory corruption or crashes. Versions 0.12.1 to 0.14.3 are vulnerable.

Unprotected transport of credentials in syslink AG Avantra on Linux and Windows allows sniffing attacks. Affects versions before 25.3.0.

syslink AG Avantra before version 25.3.0 on Linux and Windows uses default passwords. This allows an attacker to try common or default usernames and passwords.

Vulnerability in Dell PowerFlex Manager versions up to 4.6.2. An unauthenticated remote attacker can access directory listing, leading to information exposure.

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Dell PowerFlex Manager version 4.6.2 and below has an insecure storage of sensitive information vulnerability. An unauthenticated attacker with local access can gain unauthorized access to sensitive data.

Dell PowerFlex Manager versions up to 4.6.2 have an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could tamper with information.

Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An unauthenticated attacker could exploit this to redirect a targeted application user to arbitrary web URLs.

XXE vulnerability in the WS-Transfer module in Apache CXF due to insecure XML parser configuration. An attacker can inject malicious XML entities.

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.2, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the TIFF IFD offset in the image header before allocating memory, allowing authenticated users with file upload or posting permissions to cause a denial of service (server OOM) via uploading a crafted TIFF file or posting a URL that serves one.

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to enforce request body size limits on plugin HTTP endpoints, allowing an attacker to cause a denial of service via crafted oversized HTTP requests.

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate user-supplied input in API request handlers, allowing an authenticated attacker to crash the plugin process via a crafted HTTP request to the PR details endpoint.

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to archive the channel before removing persistent notifications, allowing an authenticated user to crash the server by timing the creation of a persistent notification message between the server deleting existing persistent notifications and archiving the channel.

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to sanitize team member data when returned via API to users without elevated permissions which allows a user without permissions to get data about team members roles via invoking various team API endpoints.

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate file ownership and access control, allowing an authenticated user to access and download files belonging to other users or teams via crafted Boards API requests using valid file IDs.

STER software uses a weak password encoding algorithm, allowing the password value to be guessed after analyzing how known passwords are encoded. The issue was fixed in version 9.5.

The Vedrixa Forms plugin for WordPress up to version 1.1.1 fails to properly verify user permissions, allowing authenticated attackers with subscriber-level access to overwrite form structures by adding, removing, or altering fields.

The MotoPress Hotel Booking plugin for WordPress up to version 6.0.1 is vulnerable to authorization bypass. Unauthenticated attackers can overwrite or delete the internal notes (_mphb_booking_internal_notes) of any booking by supplying an arbitrary booking ID. The nonce is output in the HTML source of every public page, so any visitor can obtain a valid nonce and perform the action without an account.