CVE Vulnerability Catalog

Zohocorp ManageEngine Applications Manager versions 177400 and below are vulnerable to Stored Cross-Site Scripting vulnerability in the NOC view. The vulnerability could allow an attacker to inject malicious script that executes in the victim's browser.

W SoliClub od Utarit Informatics Services Inc. występuje luka związana z brakiem autoryzacji, która umożliwia nadużycie uprawnień. Problem dotyczy wersji przed 5.3.7.

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0.

SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source in Checkmk <= 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed.

A Stored HTML Injection vulnerability was discovered in the Time Machine Snapshot Diff functionality due to improper validation of network traffic data. An unauthenticated attacker can send specially crafted network packets at two different times to inject HTML tags into asset attributes across two snapshots; exploitation requires a victim to use the Time Machine Snapshot Diff feature on those snapshots and perform specific GUI actions, enabling phishing and open redirect attacks. Full XSS exploitation is prevented by input validation and Content Security Policy, and attack complexity is high due to multiple required conditions.

Insufficient permission validation in Checkmk versions prior to 2.4.0p17 and 2.3.0p42 allow low-privileged users to view agent information via the REST API, which could lead to information disclosure.

The InstaWP Connect plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. The issue affects versions up to and including 0.1.1.9.

The XStore theme by 8theme is vulnerable to missing authorization, allowing exploitation of incorrectly configured access control security levels. The issue affects versions before 9.6.

Missing Authorization vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WebinarIgnition: from n/a through <= 4.06.04.

The RomanCode MapSVG plugin contains a Path Traversal vulnerability (improper limitation of a pathname to a restricted directory) affecting versions before 8.6.12.

Missing Authorization vulnerability in miniOrange miniOrange's Google Authenticator miniorange-2-factor-authentication allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects miniOrange's Google Authenticator: from n/a through <= 6.1.1.

Bio.Entrez in Biopython through 186 allows doctype XXE. This flaw may allow reading files or making network requests from the server.

A vulnerability has been found in ZZCMS 2025 in the stripfxg function of /admin/siteconfig.php in the Backend Website Settings Module. Manipulation of the icp argument leads to code injection. The attack can be executed remotely and the exploit has been disclosed.

Bludit versions before 3.13.0 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files. Attackers can manipulate file path parameters to read sensitive system files through directory traversal.

In the Auth0-PHP SDK, audience validation of access tokens is performed improperly. As a result, affected applications may accept ID tokens as access tokens. The issue affects Auth0-PHP versions between v8.0.0 and v8.17.0, as well as dependent SDKs (Symfony, Laravel, WordPress) relying on those versions.

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream's index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit 2c7797182a1618be12017d7d41e0b6581d5d529e fixes the issue.

A privilege escalation vulnerability exists in ChurchCRM prior to version 6.5.3. An authenticated user with specific mid-level permissions ("Edit Records" and "Manage Properties and Classifications") can inject a persistent Cross-Site Scripting (XSS) payload into an administrator's profile, which executes when the administrator views their own profile page. The vulnerability combines an Insecure Direct Object Reference (IDOR) and a Broken Access Control flaw.

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.

An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 before 24.2.8, and 25.1 before 25.1.6: directories and files created by the agent have overly permissive ACLs, allowing local users without administrator rights to trigger actions or destabilize the agent.