Baza CVE

Subscriber Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.39 versions.

Nieautoryzowany błąd kontroli dostępu w Altair umożliwia dostęp do chronionych zasobów.

Niewystarczające logowanie w HCL IntelliOps IEM osłabia odpowiedzialność i utrudnia wykrywanie ataków.

Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions.

Brak walidacji adresu w scanFeedsResolver pozwala uwierzytelnionemu użytkownikowi na dostęp do wewnętrznych punktów końcowych.

The setWebhookResolver in packages/api/src/resolvers/webhooks/index.ts stores the caller-supplied url without any address validation, and the file imports no validation helper. When a subscribed event fires, callWebhook in packages/api/src/jobs/call_webhook.ts issues axios.request with that url,…

Przepełnienie bufora w FreeIPA przez złośliwy OTP może prowadzić do odmowy usługi.

A flaw was found in the `ipa-enrollment` SLAPI plugin. A remote authenticated client can exploit a null pointer dereference vulnerability by sending a malformed Lightweight Directory Access Protocol (LDAP) extended operation. By omitting the request value for the `JOIN_OID` in the `ipa-enrollment`…

Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension 1.0.0-4.4.16, 5.0.0-5.2.5 - CAPTCHA and field validation bypass.

Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65 - The comment controller endpoint lacked ACL checks, allowing unauthorized tag modifications by unauthenticated users.

A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INT_MAX. This causes silent omission of requested byte…

Zdalny atakujący o niskich uprawnieniach może enumerować użytkowników i identyfikować konta z uprawnieniami.

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4

Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7

Wrażliwość na XSS w F-RevoCRM pozwala na wykonanie niezamierzonych operacji przez zalogowanych użytkowników.

Słaba metoda generowania nazw plików w aplikacji umożliwia zdalne odgadnięcie i dostęp do przesłanych plików.

The Kirki WordPress plugin before 6.2.3 does not properly validate the files contained in archives uploaded by users with the Editor role, and does not remove all unwanted files after extracting them, allowing such users to upload arbitrary files to a web accessible directory, leading to Stored…

The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor role and above to retrieve mailing-list audience metadata from the site's connected marketing account.

Atak typu man-in-the-middle na drukarki i skanery SEIKO EPSON umożliwia przechwycenie danych komunikacyjnych.

The Admin and Site Enhancements (ASE) WordPress plugin before 9.0.1 does not sanitise uploaded SVG files on every route it accepts them through, allowing users with a role the site owner granted upload access to store a file containing JavaScript which then executes in the browser of anyone who…

The GutenKit WordPress plugin before 2.5.0 does not sanitise uploaded SVG files on all of the upload paths it enables, allowing users with the file upload capability, such as Author, to upload a malicious SVG and perform Stored Cross-Site Scripting attacks against any user opening it, including…

The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to upload images…

The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not correctly sanitise custom widget markup before writing it to a file that is later executed, allowing users with the manage_options capability (and, on WordPress Multisite, non-super subsite administrators who do not…

Nieograniczony upload plików w DeDeCMS 3 umożliwia zdalne wykonanie ataku.

Luka w systemie logowania w code-projects umożliwia zdalny dostęp do plików.