CVE Vulnerability Catalog

In Simple IT Discussion Forum 1.0, the file /functions/addcomment.php is vulnerable to SQL injection via the postid parameter. The attack can be launched remotely and the exploit has been made public.

The Vertex Addons for Elementor plugin for WordPress in all versions up to and including 1.6.4 contains a missing authorization vulnerability in the activate_required_plugins() function. The current_user_can('install_plugins') capability check does not terminate execution when it fails – it only sets an error message variable while allowing the plugin installation and activation code to execute. Authenticated attackers with Subscriber-level access and above can install and activate arbitrary plugins from the WordPress repository.

A vulnerability in Simple IT Discussion Forum 1.0 allows SQL injection via the content argument in /question-function.php. The attack can be performed remotely and the exploit is publicly available.

In Simple Laundry System 1.0, the file /userchecklogin.php is vulnerable to SQL injection via the userid parameter. The attack can be launched remotely and the exploit has been disclosed.

A stack-based buffer overflow vulnerability was identified in the D-Link DIR-645 router versions 1.01/1.02/1.03 in the hedwigcgi_main function of the /cgi-bin/hedwig.cgi file. The attack can be performed remotely. The exploit has been made public. The product is no longer supported by the vendor.

A security vulnerability has been detected in PHPGurukul Online Course Registration 3.1 in the file /admin/check_availability.php. Manipulation of the regno argument leads to SQL injection. The attack can be initiated remotely and the exploit is publicly available.

PHPGurukul Online Course Registration 3.1 has a SQL injection vulnerability in /check_availability.php via the cid argument. The attack can be launched remotely and the exploit is publicly available.

A vulnerability in GitLab CE/EE (versions from 16.9.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3) allows an authenticated user to invoke unintended server-side methods through WebSocket connections due to improper access control.

GitLab naprawił problem w GitLab CE/EE, który dotyczył wszystkich wersji od 12.10 przed 18.8.9, 18.9 przed 18.9.5 oraz 18.10 przed 18.10.3. Problem ten mógł pozwolić nieautoryzowanemu użytkownikowi na spowodowanie odmowy usługi z powodu niewłaściwej walidacji danych wejściowych JSON.

GitLab naprawił problem w GitLab CE/EE, który dotyczył wszystkich wersji od 13.0 przed 18.8.9, 18.9 przed 18.9.5 oraz 18.10 przed 18.10.3. Problem ten mógł pozwolić nieautoryzowanemu użytkownikowi na spowodowanie odmowy usługi poprzez wysyłanie powtarzających się zapytań GraphQL.

In Google Chrome prior to version 147.0.7727.55, insufficient input validation in WebML allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page.

Type Confusion in CSS in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Low)

An out-of-bounds read in Blink in Google Chrome prior to 147.0.7727.55 allows a remote attacker to perform an out-of-bounds memory read via a crafted HTML page. (Severity: Low)

Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

An integer overflow in the Media component in Google Chrome prior to 147.0.7727.55, which could allow a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: Low)

An integer overflow in the Media component in Google Chrome prior to 147.0.7727.55, which could allow a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: Low)

Integer overflow in the Media component in Google Chrome prior to 147.0.7727.55 allows a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity is Low.

In Google Chrome prior to version 147.0.7727.55, insufficient data validation in the Media component allows a remote attacker to perform an out-of-bounds memory read via a crafted video file.

Google Chrome prior to version 147.0.7727.55 has insufficient validation of untrusted input in the Media component. A remote attacker who has compromised the renderer process can exploit this to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium severity: Medium.

Google Chrome prior to version 147.0.7727.55 has a use-after-free vulnerability in the Media component. A remote attacker can exploit this to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium severity: Medium.