CVE Vulnerability Catalog

A vulnerability in the Erlang/OTP SSL application allows memory exhaustion by sending a crafted certificate chain during TLS/DTLS handshake. Lack of cycle detection in the certificate chain building function causes unbounded recursion, leading to BEAM node crash.

The TLS 1.2 (and earlier) and DTLS client in Erlang/OTP does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client. An on-path attacker can select an anonymous cipher suite, bypassing certificate and hostname verification, allowing interception and modification of traffic.

In Erlang OTP, a signed to unsigned conversion error and out-of-bounds heap write vulnerability exists when decoding a crafted ETF binary via binary_to_term/1. This can corrupt the BEAM heap pointer and crash the virtual machine.

A vulnerability in the External Term Format (ETF) decoder in ERTS causes an integer underflow when processing crafted binary data. This leads to allocating huge memory and crashing the entire Erlang/VM node.

In Erlang OTP (epmd), a connection slot exhaustion vulnerability allows an unauthenticated remote attacker to permanently terminate the epmd daemon. The do_accept function incorrectly treats EMFILE/ENFILE errors as fatal instead of recoverable.

SQL Injection vulnerability in the admin panel of WP Google Review Slider plugin up to version 18.4. Allows an administrator to execute arbitrary SQL queries.

A path traversal vulnerability in NitroShare Desktop up to version 0.3.4 allows unauthenticated attackers on the same LAN to write files outside the transfer directory. Attackers can place files in the Windows Startup folder, enabling persistent code execution.

Unauthenticated Cross-Site Scripting (XSS) vulnerability in the Booking Calendar plugin up to version 11.4.2. Allows an attacker to inject malicious scripts into the page.

Unauthenticated Cross-Site Scripting (XSS) vulnerability in the Dynamic Pricing With Discount Rules for WooCommerce plugin up to version 4.5.11. Allows an attacker to inject malicious scripts.

Unauthenticated Cross-Site Scripting (XSS) vulnerability in the Product Feed Manager plugin up to version 7.6.1. Allows an attacker to inject malicious scripts.

Unauthenticated Server-Side Request Forgery (SSRF) vulnerability in the 3D Flipbook PDF Viewer & Embedder plugin up to version 1.4.2. Allows an attacker to make requests from the server to internal resources.

SQL Injection vulnerability with subscriber privileges in the rtMedia for WordPress, BuddyPress and bbPress plugin up to version 4.7.10. Allows a user with subscriber role to execute arbitrary SQL queries.

The Byteflows Travel & Hotel Booking plugin in version 1.0.0 and earlier allows unauthenticated users to access sensitive data. This vulnerability enables information disclosure without requiring authentication.

The Hide My WP Ghost plugin in version 7.0.06 and earlier has a Broken Authentication vulnerability for users with the Subscriber role. These users can bypass authentication mechanisms.

The Paid Member Subscriptions plugin in version 3.0.7 and earlier allows users with the Subscriber role to exploit Insecure Direct Object References (IDOR). This enables access to other users' resources without authorization.

The Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin in version 2.10.22 and earlier has an SQL Injection vulnerability exploitable by an administrator. Attackers can inject malicious SQL queries.

The CoCart – Headless ecommerce plugin in version 4.8.4 and earlier allows unauthenticated users Broken Access Control. Users without login can access functions intended for authenticated users.

The Thrive Product Manager plugin in version 10.9.2 and earlier allows unauthenticated users Broken Access Control. Users without login can access product management functions.

The Post My CF7 Form plugin in version 6.2.0 and earlier allows unauthenticated users Broken Access Control. Users without login can access form-related functions.

The Booking and Rental Manager plugin in version 2.7.2 and earlier has an unspecified vulnerability exploitable by an unauthenticated user. Technical details are unknown.