CVE Vulnerability Catalog

Open ISES Tickets before version 3.44.2 contains a reflected XSS vulnerability in circle.php. An authenticated attacker can inject arbitrary JavaScript by passing an unsanitized value in the frm_id POST parameter directly into an HTML form input value attribute.

Open ISES Tickets before version 3.44.2 contains a reflected XSS vulnerability in add_nm.php. An authenticated attacker can inject arbitrary JavaScript by passing an unsanitized value in the ticket_id POST parameter directly into an HTML form input value attribute and an inline JavaScript string literal.

The HAPPY plugin from VillaTheme up to version 1.0.10 has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

Open ISES Tickets before 3.44.2 contains a reflected XSS vulnerability in add.php. An authenticated attacker can inject arbitrary JavaScript via an unsanitized ticket_id POST parameter that is directly placed into the value attribute of an HTML form input.

A buffer overflow vulnerability in Uncrustify (version v.Uncrustify_d-0.82.0-132-bcc41cbdc) exists in the check_template function, tokenize_cleanup function, and check_template.cpp file. A local attacker can cause a denial of service.

Improper restriction of excessive authentication attempts vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Brute Force. This issue affects Mobile Application: from 1.6.2 before 1.13.

Insufficient session expiration vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Session Hijacking. This issue affects Mobile Application: from 1.6.2 before 1.13.

Request Tracker is vulnerable to reflected XSS via the "Page" parameter in GET requests. An attacker can craft a URL that executes arbitrary JavaScript in the victim's browser. Affects versions 5.0.4-5.0.9 and 6.0.0-6.0.2.

In the Linux kernel network subsystem, a vulnerability was found in the RED queuing discipline. When RED has children (e.g., qfq) and a parent (e.g., tbf) calls dequeue after peek, a null pointer dereference and kernel panic can occur. The fix replaces the direct dequeue call with qdisc_dequeue_peeked().

The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerability affects only login operations within an active visualization session.

In cap_net service, omitting a key from a new limit treated it as 'allow any' instead of rejecting it, potentially allowing an application to extend network permissions.

In the FreeBSD kernel (fusefs), when handling extended attributes, the fusefs kernel module calls strlen() on a daemon-supplied buffer without verifying that the entire list is NUL-terminated. A malicious daemon can send a non-NUL-terminated list, causing an out-of-bounds read of one buffer and potential out-of-bounds write of a second buffer.

Insufficient validation of member zone data may cause catalog zone transfer to fail.

Concurrency and locking defects in GSS-TSIG may lead to improper authentication mechanism behavior.

Insufficient validation of names during AXFR (DNS zone transfer) may allow an attacker to inject malicious or malformed data.

Vulnerability involves incorrect behavior of views with TCP PROXY requests. No further details in the description.

A vulnerability in Honeywell Control Network Module (CNM) where sensitive information is inserted into an unintended directory. An attacker can probe system files to gain unauthorized access to protected data.

The WordPress plugin CF7 WOW Styler up to version 1.7.6 contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels.

The WordPress plugin Mail Mint up to version 1.19.5 exposes sensitive system information to unauthorized entities, allowing retrieval of embedded sensitive data.