When anonymously accessed, the "Related Labels" section show labels that are tagged on pages in non-anonymous spaces.

h3. Issue Summary When anonymously accessed, the "Related Labels" section shows labels that are tagged on pages in non-anonymous spaces. This is reproducible on the Data Center: yes Pre-condition: 1. Page accessible anonymously has been labelled - e.g. label1 and label2. 2. Page that is not...

PT-2024-18984 · Rubygems · Omniauth-Microsoft Graph

Name of the Vulnerable Software and Affected Versions: omniauth-microsoft graph versions prior to 2.0.0 Description: The implementation did not validate the legitimacy of the email attribute of the user nor did it give or document an option to do so, making it susceptible to nOAuth misconfigurati...

PT-2024-10561 · Unknown · Rt-Prettyphoto Plugin

Name of the Vulnerable Software and Affected Versions: rt-prettyphoto Plugin versions up to 1.2 Description: A vulnerability was found in the rt-prettyphoto Plugin, which is classified as problematic. The issue affects the royal prettyphoto plugin links function of the file rt-prettyphoto.php,...

PT-2024-13746 · Cesanta · Mjs

Name of the Vulnerable Software and Affected Versions: Cesanta mjs version 2.20.0 Description: An issue in Cesanta mjs allows a remote attacker to cause a denial of service via the mjs destroy function in the msj.c file. Recommendations: For Cesanta mjs version 2.20.0, consider disabling the mjs...

PT-2024-13848 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: open5gs version 2.6.6 Description: An issue was discovered in open5gs where SIGPIPE can be used to crash AMF. Recommendations: For open5gs version 2.6.6, as a temporary workaround, consider disabling the use of SIGPIPE until a patch is...

PT-2023-32929 · Unknown · 7-Card Fakabao

Name of the Vulnerable Software and Affected Versions: 7-card Fakabao versions up to 1.0 build20230805 Description: A critical issue was found in the software, affecting some unknown functionality of the file shop/notify.php. The manipulation of the out trade no argument leads to sql injection. T...

PT-2023-32931 · Unknown · 7-Card Fakabao

Name of the Vulnerable Software and Affected Versions: 7-card Fakabao versions 1.0 build20230805 and earlier Description: A critical issue was found in the member/notify.php file, where the manipulation of the out trade no argument leads to SQL injection. The exploit has been disclosed to the...

PT-2023-8245 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: Totolink T6 version 4.1.9cu.5241 B20210923 Description: A critical issue has been found in the Totolink T6 mesh system, related to a buffer overflow when handling the v41 parameter in the /cgi-bin/cstecgi.cgi?action=login API endpoint. This c...

PT-2023-31770 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered via the function formRoute. Recommendations: For TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web, consider disabling the formRoute...

PT-2023-32924 · Unknown · Campcodes Online College Library System

Name of the Vulnerable Software and Affected Versions: Campcodes Online College Library System version 1.0 Description: A critical issue affects the processing of the file /admin/book row.php of the component HTTP POST Request Handler. The manipulation of the argument id leads to SQL injection. T...

PT-2023-32925 · Unknown · Campcodes Online College Library System

Name of the Vulnerable Software and Affected Versions: Campcodes Online College Library System version 1.0 Description: A critical vulnerability was found in the Campcodes Online College Library System. The issue affects an unknown function of the file /admin/category row.php of the component HTT...

Miniflare vulnerable to Server-Side Request Forgery (SSRF)

Impact Sending specially crafted HTTP requests to Miniflare's server could result in arbitrary HTTP and WebSocket requests being sent from the server. If Miniflare was configured to listen on external network interfaces as was the default in wrangler until 3.19.0, an attacker on the local network...

PT-2023-31594 · Unknown · Easy-Rules-Mvel

Name of the Vulnerable Software and Affected Versions: easy-rules-mvel version 4.1.0 Description: The issue is related to a remote code execution RCE vulnerability via the component MVELRule. This allows for potential exploitation, but specific details about the estimated number of affected devic...

PT-2023-9281 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADAudit Plus versions 7260 and below Description: The issue is related to insufficient access control in Zoho ManageEngine ADAudit Plus, a Windows Active Directory management and reporting tool. This allows unauthorized loca...

Winter CMS Stored XSS through Backend ColorPicker FormWidget

Impact Users with access to backend forms that include a ColorPicker FormWidget can provide a value that would then be rendered unescaped in the backend form, potentially allowing for a stored XSS attack. By default, only the Brand Settings backend.managebranding and Mail Brand Settings...

GHSA-4WVW-75QH-FQJP Winter CMS Stored XSS through privileged upload of Media Manager file followed by renaming

Impact Users with the media.managemedia permission can upload files to the Media Manager and rename them after uploading. Previously, media manager files were only sanitized on upload, not on renaming, which could have allowed a stored XSS attack. Although this was a security issue, it's importan...

Winter CMS Stored XSS through privileged upload of Media Manager file followed by renaming

Impact Users with the media.managemedia permission can upload files to the Media Manager and rename them after uploading. Previously, media manager files were only sanitized on upload, not on renaming, which could have allowed a stored XSS attack. Although this was a security issue, it's importan...

GHSA-CW2R-4P82-QV79 DoS with algorithms that use PBKDF2 due to unbounded PBES2 Count value

Impact Denial of Service, Applications that allow the use of the PBKDF2 algorithm. Patches A patch is available that sets the maximum number of default rounds. Workarounds Applications that do not need to use PBKDF2 should simply specify the algorithms use and exclude it from the list. Applicatio...

DoS with algorithms that use PBKDF2 due to unbounded PBES2 Count value

Impact Denial of Service, Applications that allow the use of the PBKDF2 algorithm. Patches A patch is available that sets the maximum number of default rounds. Workarounds Applications that do not need to use PBKDF2 should simply specify the algorithms use and exclude it from the list. Applicatio...

Sql injection

Lychee is a free photo-management tool. Prior to 5.0.2, Lychee is vulnerable to an SQL injection on any binding when using mysql/mariadb. This injection is only active for users with the .env settings set to DBLOGSQL=true and DBLOGSQLEXPLAIN=true. The defaults settings of Lychee are safe. The pat...