CVE Vulnerability Catalog

An LDAP injection vulnerability in the Legion of the Bouncy Castle Inc. BC-JAVA bcprov library affects all prov modules. The issue is associated with the LDAPStoreHelper program files.

The Eleganzo theme for WordPress is vulnerable to arbitrary directory deletion due to insufficient path validation in the akd_required_plugin_callback function in all versions up to, and including, 1.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary directories on the server, including the WordPress root directory.

Jellyfin before version 10.11.7 contains a denial of service vulnerability in the SyncPlay group creation endpoint. An authenticated user can create groups with unlimited name sizes, leading to endpoint lockout and increased memory usage, potentially causing an out-of-memory crash.

Adobe Framemaker versions 2022.8 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation requires user interaction – a victim must open a malicious file.

Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation requires user interaction – a victim must open a malicious file.

Adobe Framemaker versions 2022.8 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to access sensitive files or data on the system. Exploitation requires user interaction – a victim must open a malicious file.

Chamilo LMS versions prior to 2.0.0-RC.3 have an IDOR vulnerability in the notebook module. An authenticated student can read private notes of any other user by manipulating the notebook_id parameter in the editnote action. The application fetches note content without ownership verification.

Docmost is open-source collaborative wiki and documentation software. In versions from 0.3.0 to 0.71.0, improper authorization allows a low-privileged authenticated user to overwrite another page's attachment within the same workspace by supplying a victim attachmentId to POST /api/files/upload. This is a remote integrity issue requiring no victim interaction. Version 0.71.0 contains a patch.

In Docmost prior to 0.71.0, improper neutralization of attachment URLs allows a low-privileged authenticated user to store a malicious `javascript:` URL inside an attachment node. When another user views the page and activates the link, attacker-controlled JavaScript executes in the Docmost context.

Docmost prior to 0.70.0 is vulnerable to XSS via MIME type spoofing. An attacker can inject malicious script that executes in the victim's browser.

Docmost open-source collaborative wiki software, versions 0.70.0 through 0.70.2, has an authorization bypass vulnerability in the public search endpoint, allowing unauthenticated users to enumerate and retrieve hidden child page titles and text snippets.

The Nexi XPay plugin for WordPress versions up to 8.3.0 contains an unauthorized data modification vulnerability due to missing authorization checks on the redirect function. This allows unauthenticated attackers to mark pending WooCommerce orders as paid/completed.

Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, a Stored Cross-Site Scripting (XSS) vulnerability exists in the social post attachment upload functionality. An authenticated user can upload a malicious HTML file containing JavaScript via the /api/social_post_attachments endpoint. The file is served without sanitization, content type restrictions, or Content-Disposition header, causing JavaScript execution in the application context. This can lead to session hijacking, account takeover, privilege escalation, and other actions. This issue has been fixed in version 2.0.0-RC.3.

October CMS versions prior to 3.7.14 and 4.1.10 contain a stored cross-site scripting vulnerability in the SVG sanitization logic. The regex pattern used to strip event handler attributes could be bypassed using a crafted payload, allowing malicious SVG files to be uploaded through the Media Manager with embedded JavaScript. Exploitation could lead to privilege escalation if a superuser views or embeds the malicious SVG, and requires authenticated backend access with media upload permissions.

October CMS before versions 3.7.14 and 4.1.10 contains a server-side information disclosure vulnerability in the INI settings parser. PHP's parse_ini_string() supports ${} syntax for environment variable interpolation, allowing attackers with Editor access to inject patterns like ${APP_KEY}, leading to exposure of sensitive environment variables.

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction – the victim must visit a crafted webpage.

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are vulnerable to DOM-based XSS. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. User interaction is required – the victim must visit a crafted page.

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are vulnerable to DOM-based XSS. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. User interaction is required – the victim must visit a specially crafted page.

A reflected Cross-Site Scripting (XSS) vulnerability in Radware Alteon 34.5.4.0 vADC load-balancer allows an attacker to inject malicious scripts into the website.