Baza CVE

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load_mon module's stop path where exit_and_cleanup() deletes the LoadMon object and frees the performance counter before perf_end() attempts to access it. Attackers can trigger this vulnerability by issuing the load_mon…

A flaw was found in hawtio-operator. The operator's ClusterRole grants secrets: [create, get, list, update, watch] across all namespaces. While the operator uses a controller-runtime label-selector cache as a memory optimization, the ServiceAccount token authorizes read access to every Secret in…

electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the…

Brak sanitizacji w SiYuan pozwala na wykonanie kodu przez złośliwe skrypty z schowka.

Błąd w libxml2 z aktywnymi powiązaniami Pythona prowadzi do awarii aplikacji.

The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Stripe OAuth return endpoint in all versions up to, and including, 5.27.4. This makes it possible for unauthenticated attackers to overwrite the…

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.1.18 via deserialization of untrusted input . This makes it possible for authenticated attackers, with contributor-level access and above, to inject…

Backend administrators without system maintainer privileges were able to schedule any of the configuration:read, configuration:set, and configuration:show commands. This allowed them to modify arbitrary system configuration, which is normally limited to system maintainers. As a consequence, this…

The EDD Product Catalog Feed by PixelYourSite plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the wpeddpcf_delete_feed function in all versions up to, and including, 1.0.2. This makes it possible for…

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. This could allow an unauthenticated remote attacker to cause the entire device to crash and…

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the web-based management interface are not properly enforced, allowing role-based access control (RBAC) restrictions to be bypassed through manipulation of request data. This could…

Błąd walidacji w Reyrolle 7SR5 umożliwia atakującemu z dostępem fizycznym wykonanie kodu.

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity.…

A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), Teamcenter V2606 (All versions < V2606.2607). Affected applications do not properly encode user-supplied input reflected…

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained in pre-authenticated HTTP messages is not properly validated before appending additional data to it, resulting in an out-of-bounds write condition in memory. This could allow an…

A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), Siveillance Control V3.0 (All versions < V3.0.22.2177), Siveillance Control V4.0 (All versions < V4.0.11.2177). A vulnerability in the OIS…

Wykonanie złośliwego kodu w Desigo CC umożliwia atakującemu przejęcie systemu klienta.

Wykorzystanie XSS w Easy Appointments umożliwia atakującemu wykonanie skryptów w przeglądarce.

Wykorzystanie podatności SSRF w Hide My WP Ghost umożliwia atakującym wysyłanie żądań serwerowych.

Nieautoryzowane XSS w JetFormBuilder umożliwia atakującym wstrzykiwanie złośliwego kodu.

Nieautoryzowane XSS w Open User Map umożliwia atakującym wykonanie skryptów w przeglądarkach użytkowników.

Nieautoryzowane XSS w Unlimited Elements dla Elementor umożliwia atakującym wstrzykiwanie złośliwego kodu.

Luka w Dogtag PKI pozwala na zdalne wykonanie kodu przez użytkownika z uprawnieniami administratora.

Brak autoryzacji w Unbounce Landing Pages umożliwia nieautoryzowany dostęp do danych.

Brak autoryzacji w Csomagpontok i szálliżeniu WooCommerce pozwala na nieprawidłowe skonfigurowanie kontroli dostępu.