WordPress Kirki cross-site scripting vulnerabilities

WordPress Kirki versions 6.2.0 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping, allowing for cross-site scripting attacks via Page Builder Text Content. Certified attackers with the kirkicontentaccess...

SUSE Rancher Authorization Issue Vulnerability

SUSE Rancher versions prior to 2.8.0, 2.10.0, 2.10.5, and 2.11.0/2.11.1 have an authorization issue. This issue arises because the namespace used by local clusters for storing related resources PRTBs and secrets is the project name itself. Users with permission to create projects can create...

Xuxueli XXL-JOB security vulnerability

The xuxueli XXL-JOB 3.5.0-SNAPSHOT and earlier versions have security vulnerabilities. These vulnerabilities stem from the lack of CSRF protection for the /user/insert, /user/update, and /user/delete endpoints in the User Management Controller JobUserController. Additionally, HTTP methods are not...

WordPress Booking and Rental Manager has a vulnerability in input validation.

WordPress Booking and Rental Manager 2.8.0 and earlier versions have a vulnerability related to input validation errors. This vulnerability stems from improper validation of the specified number in the input, which may lead to the removal of important client functions...

Aureus ERP cross-site scripting vulnerability

Aureus ERP versions 1.6.0 and earlier have a cross-site scripting vulnerability. This vulnerability stems from the fact that holiday names are rendered as HtmlString without proper escaping in the HolidayAction.php file. This can lead to storage-type cross-site scripting attacks. Authenticated...

WordPress Blog2Social authorization issue vulnerability

WordPress Blog2Social versions 9.1.4 and earlier have a vulnerability related to authorization. This vulnerability stems from insecure direct object references. The AJAX handlers for b2sshipitem and b2sshipitemreloadurl do not perform object-based authorization on the postId parameter. As a resul...

EnergizeLab NestJS auth service has a vulnerability regarding authorization issues.

EnergizeLab NestJS auth service version 1.8.2 has a security vulnerability. This vulnerability stems from the acceptance of user-controlled user IDs in account update requests during batch assignments. Registered users can set different identifier for other accounts and thereby take control of...

Serhii Stotskyi CASL input validation vulnerability

The Serhii Stotskyi CASL version 7.0.2 and earlier, specifically versions 6.7.5, have a vulnerability in input validation. This vulnerability stems from prototype pollution in the rulesToFields method. Attackers can modify inherited built-in functions using dot notation, such as the toString.call...

Robert Kausch mp4v2 buffer error vulnerability

Robert Kausch’s mp4v2 2.1.3 and earlier versions have a buffer error vulnerability. This vulnerability stems from the MP4File::GetChapters function, which involves heap-based out-of-bounds read operations. Attackers can exploit this vulnerability by using specially crafted QuickTime chapter sampl...

WordPress Link Library SQL Injection Vulnerability

WordPress Link Library versions 7.9.2 and earlier have a SQL injection vulnerability. This vulnerability stems from time-based SQL injections via the linkurl parameter. The user input parameters are not properly escaped, and existing SQL queries lack proper preparation. This allows unauthenticate...

OpenNext for Cloudflare: Input validation error vulnerability

OpenNext for Cloudflare versions 0.3.0 to 1.20.2 have a security vulnerability. This vulnerability arises when enabling enableCacheInterception and relying on middleware for access control. The handling of encoded path names is inconsistent between middleware matching and cache lookup...

Microsoft Office PowerPoint buffer error vulnerability

Microsoft Office PowerPoint has a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in Microsoft Office PowerPoint, which may allow unauthorized attackers to disclose information through the network...

EnergizeLab station-middleware: Input validation error vulnerability

The EnergizeLab station-middleware versions 1.6.5 to 1.8.2 have a vulnerability related to input validation errors. This vulnerability stems from external control over file paths, allowing any registered low-privilege account to access any file on the server by using a file path controlled by the...

WordPress FluentCRM has vulnerabilities related to permission levels and access control mechanisms.

WordPress FluentCRM versions 3.2.5 and earlier have vulnerabilities related to permission granting and access control. These vulnerabilities stem from improper permission allocation, which may lead to unauthorized privilege escalation...

NL Portal Backend Libraries Authorization Vulnerability

NL Portal Backend Libraries versions prior to 3.0.3 have an authorization issue vulnerability. This vulnerability stems from the getDocumentContent GraphQL query and the GET /api/documentapi/documentapi/document/documentId/content REST route, which do not check the document ownership or...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a security vulnerability caused by a numerical truncation error in Microsoft Office Word. This vulnerability may allow unauthorized attackers to execute code through the network...

libsidplayfp buffer error vulnerability

LibSidPlayFP versions 3.1.1 and earlier have a buffer error vulnerability. This vulnerability stems from the lack of checking the data offset of the PSID/RSID files. An attacker can set the header data offset to exceed the file size, causing length calculations to wrap around. The resolveAddrs...

zhontai Admin.Core Authorization Vulnerability

The zhontai Admin Core versions 10.1.0 and earlier have an authorization issue vulnerability. This vulnerability stems from an authorization bypass mechanism. Attackers can provide record IDs that exceed the allowed range, bypassing DataScope’s restrictions. Attackers who possess user or...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 155.0.8059.84 have a buffer overflow vulnerability. This vulnerability stems from memory corruption in the V8 engine, which could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

COOL cool-admin-midway Authorization Issue Vulnerability

COOL cool-admin-midway versions 8.0.0 and earlier have an authorization issue. This vulnerability stems from improper permission verification. An attacker with ordinary sys:role permissions can call the /admin/sys/role/info, update, or delete interfaces, allowing them to read, modify, or delete t...

Kitae Park Mang Board Cross-site Scripting Vulnerability

Kitae Park Mang Board 2.4.0 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient cleaning of the 'datatype' parameter input and inadequate escaping of output, allowing for storage-type cross-site scripting attacks. Unauthenticated attackers ca...

SELMF Unarr Buffer Error Vulnerability

SELMF versions 1.1.1 and earlier have a buffer error vulnerability. This vulnerability stems from an improper check of the length of ZIP64 extended fields in the zipparseextrafields function found in the zip/parse-zip.c file. It involves heap-based out-of-bounds read attacks, allowing attackers t...

Microsoft Office Word resource management error vulnerability

Microsoft Office Word has a resource management vulnerability. This vulnerability stems from the reuse of resources after release, which may allow unauthorized attackers to execute code through the network...

Cole Medin Archon Authorization Issue Vulnerability

Cole Medin Archon versions 0.2.13 to 0.11.1 have an authorization issue vulnerability. This vulnerability stems from the lack of authentication. Unauthenticated attackers can access the control APIs bound to 0.0.0.0/api/, potentially allowing them to execute commands on the host as an Archon user...

Classroomio authorization issue vulnerability

Classroomio versions 1.0.0 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references in the Hono API course submission routing. Attackers can send their course ID along with the submission UUID of other courses as a request to the PUT o...

CRMEB crmeb_java authorization issue vulnerability

CRMEB crmebjava 3.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from an authorization bypass. Attackers can obtain order information from other members by requesting APIs like/api/front/order/express/orderId or/api/front/order/apply/refund/orderId. Thi...

Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 155.0.8059.84 contain a resource management vulnerability. This vulnerability stems from the use of reusing Prerender objects after they are released, which may allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML pa...

Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 155.0.8059.84 have a resource management vulnerability. This vulnerability stems from a problem in the V8 engine where objects are reclaimed and then reused. This could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 155.0.8059.84 have a buffer overflow vulnerability, which stems from SVG memory corruption. This vulnerability could allow remote attackers to read memory through specially crafted HTML pages...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 155.0.8059.84 contain a buffer overflow vulnerability. This vulnerability stems from DOM memory corruption, and it could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 155.0.8059.84 have a buffer overflow vulnerability. This vulnerability stems from memory corruption in Workers, which could allow remote attackers to execute arbitrary code within the sandbox through a specially crafted HTML page...

DaKheera47 JobOps server-side request forgeing vulnerability

DaKheera47 JobOps 0.13.1 and earlier versions have a server-side request forgeing vulnerability. This vulnerability stems from the POST /api/manual-jobs/fetch handler, which allows for server-side request forgeing. Attackers can provide loopback, private, or cloud metadata addresses in the URL...

Mitsubishi Electric GENESIS64: Permissions, access control, and vulnerabilities

Mitsubishi Electric GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI 10.97.3 and earlier versions, as well as all versions of MC Works64, have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper permission allocation—the...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer overflow vulnerability, which stems from a heap buffer overflow in Microsoft Office Word. This vulnerability could allow unauthorized attackers to execute code via the network...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer error vulnerability. This vulnerability stems from an insecure pointer dereferencing issue in Microsoft Office Word, which may allow unauthorized attackers to leak information through the network...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...

Microsoft Office buffer error vulnerability

Microsoft Office has a buffer overflow vulnerability that stems from a heap buffer overflow, which may allow unauthorized attackers to execute code via the network...

WordPress Flexible Quantity Authorization Issue Vulnerability

WordPress versions 2.3.23 and earlier have a vulnerability related to authorization. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...

Slican IPX SQL Injection Vulnerability

Slican versions prior to IPx 6.62.0100 have a SQL injection vulnerability. This vulnerability stems from the WebCTI service’s improper handling of user input in files such as webcti/adminjson.php. This could allow authenticated attackers to execute SQL injection attacks...

Improper handling of exceptions in the Open Asset Import Library

Open Asset Import Library 6.0.5 and earlier versions have a vulnerability related to improper exception handling. This vulnerability stems from Ogre3D’s binary mesh importer, specifically the OgreBinarySerializer::ReadAnimationKeyFrames function. This function does not validate the animation trac...

EnergizeLab AI Station software supply chain vulnerability issues

EnergizeLab AI Station has a software supply chain vulnerability. This vulnerability stems from downloading firmware updates via plaintext HTTP, without verifying their integrity and authenticity. This could allow attackers to replace malicious updates by intercepting or modifying traffic...

NL Portal Backend Libraries Authorization Vulnerability

NL Portal Backend Libraries versions from 1.1.0 to 3.0.4, as well as 3.1.0, have security vulnerabilities. These vulnerabilities stem from the fact that the getFormDefinitionByObjectenApiUrl and the deprecated getFormDefinitionById GraphQL parsers have access without requiring...

WordPress Email Customizer for WooCommerce has a vulnerability related to input validation errors.

The WordPress Email Customizer for WooCommerce version 3.9.5 and earlier has a vulnerability in input validation. This vulnerability stems from insufficient authorization and input cleansing in the sendtestmail function. It allows user-controlled PHP code to be written into executable files in th...

WordPress Knowledge Base: Authorization Issues Vulnerabilities

WordPress Knowledge Base 3.2.0 and earlier versions have a vulnerability related to authorization. This vulnerability stems from insufficient authorization settings, allowing attackers to exploit incorrect access control security levels to gain access...

Nick James Kirkby iso14229 Digital Error Vulnerability

Nick James Kirkby’s version of iso14229 0.10.1 and earlier contains a numerical error vulnerability. This vulnerability stems from an integer wrap around issue in Handle0x38RequestFileTransfer. Unauthenticated attackers can bypass the file path length check by sending a RequestFileTransfer SID 0x...

Jooan JA-A12 Trust Management Vulnerability

The Jooan JA-A12 IP cameras versions 00920171107 and 05.02.31.105 have vulnerabilities related to trust management. These vulnerabilities stem from hardcoded credentials. Unverified attackers can execute arbitrary commands by sending the request “singleCMD=SetDiagMode” to...