CVE Vulnerability Catalog

Vulnerability in the Billy library (Go) before versions 5.9.0 and 6.0.0-alpha.1. Multiple components improperly handle crafted input, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.

Path Traversal vulnerability in the Classified Listing plugin (WordPress) through version 5.3.8. Allows an attacker to access files outside the restricted directory.

The myCred plugin is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.0.4. Improper neutralization of input during web page generation allows attackers to inject malicious scripts that are then executed in other users' browsers.

The GeoDirectory plugin for WordPress has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This issue affects versions from n/a through 2.8.157.

Buffer overflow vulnerability in OpenSC up to 0.26.1. The test_kpgen_certwrite function in pkcs11-tool.c can be exploited remotely, though exploitation is difficult.

Vulnerability in aem-mcp-server (indrasishbanerjee) allows SSRF (Server-Side Request Forgery) by manipulating the assetPath argument in the getAssetMetadata function. Affects versions up to b5f833aef9b5dfd17a5991b3b18a8a11edbdc583.

Student-Management-System up to commit f0c5f6842c5e8c431ff02b5260a565ca844df3a0 has a vulnerability in admin/deleteform.php where the sid argument leads to improper authorization.

Vulnerability in Student-Management-System (a4m4) up to commit f0c5f6842c5e8c431ff02b5260a565ca844df3a0. An unknown function in admin/ allows execution after redirect (open redirect). Remote attack possible.

A security vulnerability has been detected in decolua 9router up to version 0.4.0. The function isAuthenticated in src/dashboardGuard.js has improper authorization due to manipulation of the Host argument. The attack can be carried out remotely.

Lightweight Music Server (LMS) through 3.76.0 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by embedding malicious HTML in media file metadata tags such as GENRE, ARTIST, or ALBUM. Attackers can introduce a crafted media file into the victim's library, causing the payload to be saved during library scanning and executed automatically in the web interface due to tag content being rendered using Wt::TextFormat::UnsafeXHTML without sanitization.

A flaw was found in OpenShift Container Platform where completed pods with restartPolicy: Never do not count toward ResourceQuota pod limits, and Kubernetes events are not quota-scoped. A non-privileged user who can create pods in a namespace can exploit this to generate a large volume of events that accumulate in etcd, causing API server performance degradation across the cluster.

A SQL injection vulnerability was found in itsourcecode Content Management System 1.0 in the file /admin/edit_topic.php via the topic_id argument. The attack can be performed remotely, and the exploit is publicly available.

A segmentation violation in the gf_media_get_color_info function in GPAC/MP4Box before version 26.02.0 allows attackers to cause a Denial of Service (DoS) by supplying a crafted data file.

A heap use-after-free in the dasher_process function in GPAC/MP4Box before version 26.02.0 allows attackers to cause a Denial of Service (DoS) by supplying a crafted MPEG-2 file.

A segmentation violation in GPAC Project/MP4Box before 26.02.0 in the gf_isom_apple_set_tag_ex function allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.

A NULL pointer dereference in GPAC Project/MP4Box before 26.02.0 in the gf_ac4_pres_b_4_back_channels_present function allows attackers to cause a Denial of Service (DoS) via a crafted AC4 file.

A NULL pointer dereference in GPAC Project/MP4Box before 26.02.0 in the gf_odf_ac4_cfg_dsi_v1 function allows attackers to cause a Denial of Service (DoS) via a crafted AC4 file.

A heap buffer overflow in the m2tsdmx_send_packet function of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.

Firefox for iOS Reader View did not properly escape HTML tags in JSON-LD metadata, allowing a malicious page to inject markup that changed Reader View behavior and leaked sensitive URL parameters, potentially leading to arbitrary JavaScript execution in an internal origin. Fixed in version 151.2.

Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders, allowing a malicious page to include a placeholder string later substituted with JSON-LD data, potentially resulting in arbitrary JavaScript execution. Fixed in version 151.2.