CVE Vulnerability Catalog

Apache Answer up to version 2.0.0 did not enforce access restrictions on direct API endpoints for unlisted questions. Authenticated users could discover and view such questions, answers, comments, and revision history.

Apache Answer through version 2.0.0 has an XSS vulnerability because user-supplied content is included in notification emails without proper escaping. An authenticated user can inject arbitrary HTML into emails sent to other users.

In Apache Answer up to version 2.0.0, there is an unrestricted file upload vulnerability with dangerous type. The server did not sufficiently validate user-supplied image URLs, allowing arbitrary external content to be embedded as profile images.

Apache Answer up to version 2.0.0 has an unrestricted file upload vulnerability. A crafted TIFF image can trigger excessive memory allocation during decoding, causing a server crash. Authentication is required.

An Improper Link Resolution Before File Access ('Link Following') vulnerability in Dell iDRAC Tools versions prior to 11.4.1.0 allows a low privileged attacker with local access to potentially exploit it, leading to Information tampering.

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. Affects versions through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and its revision history. Users are recommended to upgrade to version 2.0.1.

Improper Neutralization of Alternate XSS Syntax vulnerability in Apache Answer. Affects versions through 2.0.0. AI-generated response content was rendered in the browser without proper sanitization, allowing malicious scripts to be executed when the content was viewed. Users are recommended to upgrade to version 2.0.1.

Use-After-Free (UAF) vulnerability in the package management module. Successful exploitation may affect service integrity.

Use-After-Free vulnerability in the package management module. Successful exploitation may affect service integrity.

Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability.

Race condition vulnerability in the IPC module. Successful exploitation may affect availability.

Out-of-bounds write vulnerability in the IPC module. Successful exploitation may affect availability.

DoS vulnerability in the log service. Successful exploitation may affect availability.

Permission control vulnerability in the audio framework. Successful exploitation may affect service confidentiality.

Permission control vulnerability in calls. Successful exploitation may affect availability.

Path traversal vulnerability in the SMS app. Successful exploitation may affect system availability.

A buffer overflow vulnerability has been reported in several QNAP operating system versions. A remote attacker with an administrator account can exploit it to modify memory or crash processes.

The WPForms WordPress plugin before version 1.10.0.5 does not verify the authenticity of incoming PayPal webhook events before processing them, allowing unauthenticated attackers to forge webhook payloads and manipulate the payment state of arbitrary transactions.

Several QNAP operating systems (QTS, QuTS hero) have an XSS vulnerability that can be exploited by a remote attacker to bypass security mechanisms or read application data. Fixed in QTS 5.2.9.3492, QuTS hero h5.2.9.3499, h5.3.4.3500, and h6.0.0.3500 (or later).

The WP GDPR Cookie Consent plugin for WordPress up to version 1.0.0 is vulnerable to Stored Cross-Site Scripting (XSS) via the 'ninja_gdpr_ajax_actions' AJAX action. Missing capability and nonce checks in handleAjaxCalls(), combined with insufficient input sanitization and output escaping in generateCSS(), allow script injection.