CVE Vulnerability Catalog

Mafintosh's protocol-buffers-schema version 3.6.0 is vulnerable to prototype pollution in JavaScript. An attacker may alter application logic, bypass security checks, cause a DoS, or achieve remote code execution.

In Weblate versions prior to 5.17, the translation memory API exposed unintended endpoints that did not enforce proper access control. This may allow unauthorized access to translation memory data.

The Mini Ajax Cart for WooCommerce plugin (HashThemes) through version 1.3.4 contains a Stored Cross-site Scripting vulnerability due to improper neutralization of input during web page generation. A malicious script stored in the application may execute in other users' browsers.

A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center allowed an unauthenticated, remote attacker to perform cross-site scripting (XSS) attacks. The issue was due to improper handling of HTML and script content. Cisco has addressed this vulnerability in the service, requiring no customer action.

A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the local system of an affected device. This is due to improper access controls on local files; an attacker could place a symbolic link in a specific location to bypass file system permissions.

A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. It is due to improper validation of user-supplied authentication input in HTTP requests; an attacker could send specially crafted HTTP requests to bypass policy enforcement on the device.

A vulnerability in Cisco ISE and Cisco ISE-PIC allows an authenticated remote attacker to perform path traversal attacks on the underlying OS and read arbitrary files. The flaw is due to improper validation of user-supplied input.

A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) allows an authenticated local attacker with administrative privileges to perform command injection on the underlying OS and elevate privileges to root. The issue is due to insufficient input validation.

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) allow an authenticated remote attacker with administrative write privileges to conduct stored XSS or reflected XSS attacks against a user of the interface. These issues stem from insufficient sanitization of user-supplied data stored in web pages.

Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system. Exploitation requires valid administrative credentials, and the vulnerabilities are due to improper sanitization of user input to the web-based management interface.

Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system. Exploitation requires valid administrative credentials, and the vulnerabilities are due to improper sanitization of user input to the web-based management interface.

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. The flaw is due to insufficient validation of user-supplied input; a crafted HTTP(S) request could allow the attacker to view data on the affected device.

The web-based management interface of Cisco Unity Connection allows an unauthenticated remote attacker to redirect a user to a malicious web page. The flaw is due to improper HTTP request parameter validation and requires the user to click a crafted link.

A reflected XSS vulnerability exists in the web-based management interface of Cisco Unity Connection due to improper validation of user-supplied input. An unauthenticated remote attacker could persuade a user to click a crafted link, allowing execution of arbitrary script code in the context of the affected interface.

The YouTube Showcase plugin for WordPress is vulnerable to Stored XSS due to improper neutralization of input during web page generation. This issue affects versions from n/a through 3.5.1.

Cross-Site Request Forgery (CSRF) vulnerability in ZAYTECH Smart Online Order for Clover plugin. Allows an attacker to perform unauthorized actions on behalf of a logged-in user. Affects versions up to and including 1.6.0.

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below the listed versions, a low-privileged user with app write permission but without admin/power roles and without the accelerate_datamodel capability can turn Data Model Acceleration on or off due to improper access control.

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below specified versions, a user with the high-privilege capability edit_user can create a specially crafted username containing a null byte or non-UTF-8 percent-encoded byte due to improper input validation. This leads to inconsistent conversion of usernames and account management issues, such as inability to edit or delete affected users.

Cross-Site Request Forgery (CSRF) vulnerability in DeluxeThemes Userpro plugin. Allows an attacker to perform unauthorized actions on behalf of a logged-in user. Affects versions before 5.1.11.

In Grafana's alerting system, users with edit permissions for contact points (e.g., 'alert.notifications:write' or 'alert.notifications.receivers:test' granted via the 'Contact Point Writer' role) can modify contact points created by others and change the endpoint URL to a controlled server. By invoking the test functionality, they can capture and extract redacted secure settings, such as authentication credentials for third-party services (e.g., Slack tokens), leading to unauthorized access and potential compromise of external integrations.