CVE Vulnerability Catalog

A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to perform directory traversal operations.

A vulnerability was identified in code-projects Online Lot Reservation System 1.0 affecting an unknown function of /edithousepic.php. Manipulation of the image argument leads to unrestricted upload. The attack can be launched remotely and the exploit is publicly available.

A vulnerability was determined in code-projects Online Lot Reservation System 1.0 affecting an unknown function of /activity.php. Manipulation of the directory argument causes unrestricted upload. The attack can be initiated remotely and the exploit has been publicly disclosed.

A vulnerability was found in code-projects Online Lot Reservation System up to 1.0. The readfile function in /download.php allows path traversal via manipulation of the File argument. The attack can be initiated remotely and the exploit has been made public.

SmarterTools SmarterMail w wersjach przed 9610 zawiera słabość kryptograficzną w punktach końcowych udostępniania plików i e-maili, wykorzystującą szyfrowanie DES-CBC z kluczami i wektorami inicjalizacyjnymi pochodzącymi z System.Random, co prowadzi do ograniczonej przestrzeni nasion do około 19 000 możliwych wartości. Atakujący bez uwierzytelnienia może wykorzystać punkt końcowy pobierania załączników jako oracle do określenia używanego nasienia i wyprowadzenia kluczy szyfrujących oraz wektorów inicjalizacyjnych, co pozwala na fałszowanie tokenów udostępniania dla dowolnych e-maili, załączników lub zawartości przechowywanych plików bez wcześniejszego dostępu do docelowej zawartości.

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. It affects an unknown function of the file /index.php?page=categories. Manipulation of the ID argument results in cross site scripting.

Apache Storm up to 2.8.7, when TLS is enabled without requiring client certificate authentication, assigns a fallback principal CN=ANONYMOUS if no certificate is presented or verification fails. The SSLPeerUnverifiedException is caught and suppressed rather than rejecting the connection, resulting in fail-open behavior.

The vulnerability in Apache Storm Prometheus Reporter involves improper certificate validation. When an administrator enables storm.daemon.metrics.reporter.plugin.prometheus.skip_tls_validation, the PrometheusPreparableReporter class calls SSLContext.setDefault(), globally replacing the JVM's default SSL context and causing all TLS connections in the process to trust any certificate.

Authenticated user can bypass authorization in Ribblr - Crochet & Knitting iOS application

In code-projects Employee Management System 1.0, manipulation of the id/token argument in 370project/cancel.php leads to SQL injection. The attack can be carried out remotely, and the exploit has been publicly disclosed and may be used.

In code-projects Employee Management System 1.0, manipulation of the id/token argument in 370project/approve.php leads to SQL injection. The attack can be executed remotely, and the exploit has been made available to the public and could be used for attacks.

A security flaw has been discovered in code-projects Employee Management System 1.0 affecting the file 370project/mark.php, where manipulation results in cross-site scripting. Remote exploitation is possible, and the exploit has been released to the public and may be used in attacks.

Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalidated objects and crash the program.

A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in arbitrary code execution. The vulnerability affects XFA processing in PDF files.

Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service.

Insufficient parameter verification leads to format errors in files, triggering an unhandled "std::invalid_argument" exception and ultimately causing the program to terminate.

CodexThemes TheGem Theme Elements (for Elementor) contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability allowing DOM-Based XSS. This affects versions before 5.12.1.1.

In code-projects Employee Management System 1.0, manipulation of the ID argument in 370project/delete.php leads to SQL injection. The attack may be launched remotely, and the exploit is publicly available and might be used.

A vulnerability was found in code-projects Employee Management System 1.0 affecting the file 370project/edit.php. Manipulation of the ID argument causes SQL injection, and the attack can be launched remotely. The exploit has been publicly disclosed and may be used.

A vulnerability was found in NousResearch hermes-agent 0.8.0 in the file gateway/platforms/webhook.py, involving missing authentication when manipulating the _INSECURE_NO_AUTH argument. The attack is remote, of high complexity and difficult to exploit, but a public exploit may be used.