Classroomio authorization issue vulnerability

Classroomio versions 1.0.0 and earlier have an authorization issue vulnerability. This vulnerability stems from improper authorization in PUT and DELETE requests for the /:lessonId route. Any course member including students can modify the title and stored HTML content of any course, or delete...

Microsoft Office Word numerical error vulnerability

Microsoft Office Word has a numerical error vulnerability, which stems from the rounding error in Microsoft Office Word. This vulnerability could allow unauthorized attackers to execute code via the network...

Microsoft Office buffer error vulnerability

Microsoft Office has a buffer overflow vulnerability that stems from a heap buffer overflow, which may allow unauthorized attackers to execute code via the network...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...

WordPress Strong Testimonials: Authorization Issue Vulnerability

WordPress versions 3.3.12 and earlier have a vulnerability related to authorization. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit incorrectly configured access control levels...

Microsoft ASP.NET Core resource management vulnerability

Microsoft ASP.NET Core has a resource management vulnerability. This vulnerability arises from insufficient or ineffective restrictions on ASP.NET Core resources, which may allow unauthenticated attackers to launch denial-of-service attacks via the network...

Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 155.0.8059.84 contain a resource management vulnerability. This vulnerability stems from the use of reusing Prerender objects after they are released, which may allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML pa...

Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 155.0.8059.84 have a resource management vulnerability. This vulnerability stems from a problem in the V8 engine where objects are reclaimed and then reused. This could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 155.0.8059.84 have a buffer overflow vulnerability, which stems from SVG memory corruption. This vulnerability could allow remote attackers to read memory through specially crafted HTML pages...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 155.0.8059.84 contain a buffer overflow vulnerability. This vulnerability stems from DOM memory corruption, and it could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

COOL cool-admin-midway Authorization Issue Vulnerability

COOL cool-admin-midway versions 8.0.0 and earlier have an authorization issue. This vulnerability stems from improper permission verification. An attacker with ordinary sys:role permissions can call the /admin/sys/role/info, update, or delete interfaces, allowing them to read, modify, or delete t...

Konstanty Bialkowski libmodplug buffer error vulnerability

Konstanty Bialkowski’s libmodplug versions 0.8.9.1 and earlier have a buffer error vulnerability. This vulnerability stems from the function CSoundFile::ReadAMS2 in src/loadams.cpp, which handles specially crafted AMS files. During processing, a heap-based out-of-bounds read occurs, and the mode...

WordPress Flexible Quantity Authorization Issue Vulnerability

WordPress versions 2.3.23 and earlier have a vulnerability related to authorization. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...

ValueCell.ai: Server-side request forgeing vulnerability

ValueCell.ai’s versions prior to 0.1.20 have a server-side request forgeing vulnerability. This vulnerability stems from unauthenticated server-side requests. Attackers can exploit this vulnerability by setting an unvalidated baseurl through the provider configuration endpoint. This allows them t...

Microsoft Office Excel resource management error vulnerabilities

Microsoft Office Excel has a resource management vulnerability. This vulnerability stems from a problem with reusing resources after they are released, which may allow unauthorized attackers to execute code through the network...

EnergizeLab FirmwareUpdater has a cryptographic vulnerability

EnergizeLab FirmwareUpdater has a cryptographic vulnerability. This vulnerability stems from the use of a single hardcoded AES key shared across all installations. Attackers can retrieve this key from the update program, thereby decrypting and forging the firmware package...

WordPress ACF Frontend Admin by DynamiApps: Permissions, licensing, and access control issues

The WordPress ACF Frontend Admin by DynamiApps version 3.29.13 and earlier has vulnerabilities related to permission authorization and access control. These vulnerabilities stem from improper permission allocation, which may lead to unauthorized privilege escalation...

WordPress Link Whisper – Free Deserialization Injection Vulnerability

WordPress Link Whisper Free 0.9.7 and earlier versions have a deserialization injection vulnerability. This vulnerability stems from the deserialization of untrusted data, which may lead to object injection attacks...

Tatsh bincookie buffer error vulnerability

Versions of Tatsh bincookie prior to 0.1.9 contain a buffer error vulnerability. This vulnerability stems from the bincookieinitfile function in bincookie.h, which allocates buffers based on the actual length of the .binarycookies file. However, it uses the numpages field of the file as the loop...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 155.0.8059.84 have a buffer overflow vulnerability. This vulnerability stems from memory corruption in Workers, which could allow remote attackers to execute arbitrary code within the sandbox through a specially crafted HTML page...

Mindoc-org MinDoc licensing issues vulnerability

MinDoc 2.2-beta.2 and earlier versions have an authorization issue vulnerability. This vulnerability stems from insecure direct object references in the DocumentController.Content component. Certified attackers with non-observers roles can read Markdown and HTML documents in private books by...

DaKheera47 JobOps server-side request forgeing vulnerability

DaKheera47 JobOps 0.13.1 and earlier versions have a server-side request forgeing vulnerability. This vulnerability stems from the POST /api/manual-jobs/fetch handler, which allows for server-side request forgeing. Attackers can provide loopback, private, or cloud metadata addresses in the URL...

Improper handling of exceptions in the Open Asset Import Library

Open Asset Import Library 6.0.5 and earlier versions have a vulnerability related to improper exception handling. This vulnerability stems from Ogre3D’s binary mesh importer, specifically the OgreBinarySerializer::ReadAnimationKeyFrames function. This function does not validate the animation trac...

EnergizeLab FastAPI AI inference server authorization issue vulnerability

The EnergizeLab FastAPI AI inference server has a vulnerability related to authorization. This vulnerability arises from the lack of authentication for the AI model management function, which may allow unauthenticated remote attackers to modify the AI model configuration and switch the model that...

QuadLayers Checkout Field Manager (Checkout Manager) for WooCommerce: Authorization issue vulnerability

The Checkout Field Manager Checkout Manager in WooCommerce 7.9.6 and earlier versions has an authorization issue vulnerability. This vulnerability arises from the plugin’s failure to properly verify whether the user has the necessary permissions to perform certain operations. As a result,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.27 contains a security vulnerability. This vulnerability arises from the ipv4 stack failing to verify the checksum before doing so. Packets with incorrect checksum metadata can cause skbchecksumhelp to corrupt network headers, potentially leading to privilege...

EnergizeLab AI Station Trust Management Vulnerability

EnergizeLab AI Station has a trust management vulnerability. This vulnerability stems from the firmware image enabling SSH by default and containing a default root credential. This allows attackers with network access to log in as root and gain full control over the device...

Grav security vulnerabilities

Versions of Grav 2.0.3 to 2.0.6 have security vulnerabilities. These vulnerabilities stem from directory traversal issues with the GravExtension.php file and the mediaDirFunc method, which could allow remote attackers to obtain sensitive information...

ThinkCMF Authorization Issue Vulnerability

ThinkCMF 8.0.1 and earlier versions have an authorization issue. This vulnerability stems from improper authorization in the RestAdminBaseController. When there are no adminapi rules, the Auth::check validation fails, allowing restricted backend administrators to call all administrator REST API...

Microsoft Office PowerPoint buffer error vulnerability

Microsoft Office PowerPoint has a buffer error vulnerability, which stems from excessive buffer reading in Microsoft Office PowerPoint. This vulnerability may allow unauthorized attackers to leak information through the network...

Slican IPX SQL Injection Vulnerability

Slican versions prior to IPx 6.62.0100 have a SQL injection vulnerability. This vulnerability stems from the WebCTI service’s improper handling of user input in files such as webcti/adminjson.php. This could allow authenticated attackers to execute SQL injection attacks...

Nutanix Acropolis Operating System Authorization Vulnerability

Nutanix Acropolis Operating System versions prior to 7.3.1.18, 7.5 up to 7.5.2, and 7.6 up to 7.6.0.8 have an authorization vulnerability. This vulnerability stems from improper configuration of the authentication filter. Unauthenticated remote attackers can bypass authentication by constructing...

WordPress FluentCRM has vulnerabilities related to permission levels and access control mechanisms.

WordPress FluentCRM versions 3.2.5 and earlier have vulnerabilities related to permission granting and access control. These vulnerabilities stem from improper permission allocation, which may lead to unauthorized privilege escalation...

Parse Platform Parse Server Improper Exception Handling Vulnerability

The Parse Platform and Parse Server versions prior to 8.6.97, as well as versions from 9.0.0 to 9.10.2-alpha.6, have a vulnerability related to improper exception handling. This vulnerability arises from errors that occur when sending verification emails or password reset emails. Attackers only...

Kedacore KEDA: Permissions management and access control vulnerabilities

KEDACORE KEDA 2.20.2 and earlier versions have security vulnerabilities. This vulnerability arises from the ability of the namespace administrator to create TriggerAuthentication and ScaledObject resources, thereby setting hashiCorpVault.address as a tenant-controlled endpoint. By selecting...

SonicWALL Network Security Manager (NSM) authorization issue vulnerability

SonicWALL Network Security Manager NSM versions 4.3.1 and earlier have an authorization issue vulnerability. This vulnerability stems from improper access control in the export settings. It may allow remote, authenticated attackers to obtain sensitive information, potentially gain administrator...

WordPress Directorist Cross-Site Script Vulnerability

WordPress Directorist versions 8.10.2.1 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the 'phone' list field, resulting in a stored-cross-site scripting attack. Additionally, the plugin grants the...

SonicWALL Network Security Manager (NSM) command injection vulnerability

SonicWALL Network Security Manager NSM versions 4.3.1 and earlier have a command injection vulnerability. This vulnerability stems from OS command injections, which may allow remote authentication attackers to execute arbitrary OS commands, resulting in remote code execution...

M A Vinoth Kumar Frontend Dashboard: Permissions, Licenses, and Access Control Vulnerabilities

The M A Vinoth Kumar Frontend Dashboard 3.0.7 and earlier versions have vulnerabilities related to permission authorization and access control. These vulnerabilities stem from improper permission allocation, which may lead to unauthorized privilege escalation...

Yiyi Wang Crossnote Code Injection Vulnerability

Yiyi Wang’s Crossnote versions prior to 0.8.29 have a code injection vulnerability. This vulnerability stems from the use of vm.runInNewContext in the .crossnote/config.js and .crossnote/parser.js files, which lack a secure boundary with the Node.js host domain. Opening Markdown files from...

LatePoint – Calendar Booking Plugin for Appointments and Events: Authorization Issues Vulnerability

LatePoint – Calendar Booking Plugin for Appointments and Events. Versions 5.7.3 and earlier have an authorization issue vulnerability. This vulnerability stems from a lack of ownership checks on the bookingid and cartid parameters. Unauthorized attackers can enumerate booking or cart identifiers...

WordPress GeoDirectory cross-site scripting vulnerability

WordPress GeoDirectory 2.8.190 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping. Certified attackers with subscription-level or higher permissions can inject any web script into pages through the...

WordPress GeoDirectory cross-site scripting vulnerability

WordPress GeoDirectory versions 2.8.190 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the 'postimages fileinfo2 = title' parameter. It may lead to storage-based cross-site scripting attacks. Certified...

WordPress Post Export Import with Media: Deserialization Injection Vulnerability

WordPress Post Export Import with Media has a deserialization injection vulnerability in versions 1.17.1 and earlier. This vulnerability stems from the deserialization processing of untrusted inputs, leading to PHP object injection. Certified attackers with administrator or higher privileges may ...

Hippoo Mobile App for WooCommerce: Cross-site Scripting Vulnerability

The Hippoo Mobile App for WooCommerce version 1.12.0 and earlier has a cross-site scripting vulnerability. This vulnerability stems from improper input during web page generation, making it susceptible to reflection-based cross-site scripting attacks...

WordPress Tutor LMS Cross-site Scripting Vulnerability

WordPress Tutor LMS versions 4.1.0 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the 'tab' parameter. Additionally, when the nav-items array of the target course page is empty, the inarray validation can be...

Jordan Harband: Improper exception handling leads to vulnerabilities

Jordan Harband versions from 6.7.0 to 6.16.1 have security vulnerabilities. This vulnerability arises from improper string coercion of array elements when using arrayFormat with a comma. When elements cannot be converted to strings, a type error will occur, potentially allowing unverified attacke...

Ravi Teja Online-Examination-System Information Leak Vulnerability

Ravi Teja Online-Examination-System e6208e630b14657999bbfe4c9912302d2a1e2449 and previous versions have a security vulnerability. This vulnerability stems from operations on an unknown function in the dbtables.sql file, which can be exploited remotely, leading to information leakage...

curl resource management error vulnerability

There is a vulnerability in curl’s resource management. This vulnerability arises from incorrect handling of HTTP/2 RSTSTREAM responses by curl during the upload process. The reason for this is that HTTP11REQUIRED or REFUSEDSTREAM conditions were encountered, leading to the reutilization of the...

OpenClaw ClawScan processing logic error vulnerability

OpenClaw ClawScan versions 0.1.6 and earlier have a processing logic vulnerability. This vulnerability stems from improper operation of the shouldSkipTargetPath function in the internal/runner/runner.go file of the Static Scanner component, which may lead to the failure of the protection mechanis...