Baza CVE

Podwójne zwolnienie obiektu QRX w OpenSSL QUIC prowadzi do uszkodzenia sterty i DoS.

Brak odpowiedniej autoryzacji w Ech0 pozwala na pełną moderację komentarzy z ograniczonym tokenem dostępu.

Błąd w Ech0 umożliwia atakującemu zmianę hasła administratora i uzyskanie nieograniczonego dostępu.

Obejście autoryzacji w Ech0 umożliwia nieuprawnionym użytkownikom dostęp do administrowanych zasobów.

Brak autoryzacji w Ech0 umożliwia uwierzytelnionym użytkownikom dostęp do wrażliwych logów.

Obejście ograniczeń tokenów dostępu w Ech0 umożliwia nieautoryzowany dostęp do funkcji administracyjnych.

Weryfikacja URI przekierowania OAuth w Ech0 pozwala na kradzież tokenów dostępu.

Brak ograniczeń w nagłówku Accept-Language w Ech0 pozwala na atak typu DoS.

Ech0 before 4.7.3 contains a server-side request forgery vulnerability in the fetchPeerConnectInfo function that uses unvalidated HTTP requests instead of safe request methods with URL validation. Authenticated attackers can supply arbitrary URLs to access internal services and cloud metadata…

The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9.4. This is due to the `rum_importer()` function being registered on the WordPress core `import_start` action…

Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector.

The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functionality in all versions up to, and including, 7.109 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This…

An improper authentication vulnerability in HiveServer2 SAML bearer-token validation in Apache Hive 4.0.0 through 4.2.0 (and later unreleased branches) on deployments using HTTP transport with hive.server2.authentication=SAML allows an unauthenticated network attacker to authenticate as an…

Błąd w sprawdzaniu wielkości liter w Cloud Foundry UAA pozwala na przejęcie kontroli nad systemem.

Wykorzystanie podatności w dekodowaniu JPX w Popplerze prowadzi do ataku typu DoS.

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566.

General user can mint admin access tokens via /access-tokens This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.

Wstrzyknięcie kodu w hbs umożliwia atak XSS przez nieodpowiednie eskapowanie HTML.

Wykorzystanie punktu końcowego API w Codefresh umożliwia eskalację uprawnień do Admina.

The frontend company self-service editing feature relies on a template-level visibility flag to hide the edit form for company records a visitor does not own, but the corresponding write operation does not repeat this ownership check on the server side. As a result, a visitor who knows the…

The frontend topic editing flow does not verify on the server side that the requesting visitor owns the topic being modified. As a result, a visitor who knows the identifier of a topic from the public forum can submit a modified update request for that topic directly and overwrite its content,…

The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own. The accompanying permission check confirmed only that the submitting user held any organizer role. A user with frontend event management…

The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event management access could therefore modify events belonging to other organizers.

The extension's invitation controller fails to stop processing after redirecting on invalid input (missing hash, non-existent, disabled, or deleted users), allowing an unauthenticated attacker to set a new password for and re-enable an arbitrary existing frontend user account. This vulnerability…

The extension's user detail view fails to verify that a requested user record matches the configured or logged-in target, allowing any visitor with access to the Detail or List plugin to retrieve another frontend user's profile data, including name, email, date of birth and address, by supplying…