CVE Vulnerability Catalog

High Sec ELM contains an Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE-335) vulnerability that may allow a sophisticated attacker with physical access to compromise internal device communications. This issue affects Command Centre Server versions 9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), and all versions of 9.00 and prior.

Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with physical access to the device to extract device-specific keys, potentially compromising further site security. This issue affects Command Centre Server versions 9.30 prior to vCR9.30.251028a, 9.20 prior to vCR9.20.251028a, 9.10 prior to vCR9.10.251028a, and all versions of 9.00 and prior.

An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service (DoS) attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt access to the web management interface, while other networking services remain unaffected.

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollment_edit1.php. Executing manipulation of the argument en_id can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

A vulnerability was detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M version 1.1.5 in the system function of /boafrm/formDebugDiagnosticRun. Manipulating the host argument leads to command injection. The attack can be performed remotely and the exploit has been publicly disclosed.

The Classified Listing – Classified ads & Business Directory Plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to and including 5.0.3. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode, allowing authenticated attackers with Subscriber-level access and above to execute arbitrary shortcodes.

NixOS's Onlyoffice is a software suite that offers online and offline tools for document editing, collaboration, and management. In versions from 22.11 to before 25.05 and versions before Unstable 25.11, a hard-coded secret was used in the NixOS module for the OnlyOffice document server to protect its file cache.

A vulnerability was found in Courier Management System 1.0 in the file /search-edit.php. Manipulation of the Consignment argument leads to SQL injection. The attack can be initiated remotely and the exploit is publicly available.

A vulnerability was identified in code-projects Courier Management System 1.0 allowing SQL injection in /add-new-officer.php. Manipulating the ManagerName argument enables remote attacks. The exploit is publicly available.

IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code, which could be used in further attacks against the system.

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page. An attacker can manipulate database queries, potentially leading to unauthorized data access.

@dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Since version 4.12.0, Dependency-Track users with the SYSTEM_CONFIGURATION permission can configure a "welcome message", which is HTML that is to be rendered on the login page for branding purposes. When rendering the welcome message, Dependency-Track versions before 4.13.6 did not properly sanitize the HTML, allowing arbitrary JavaScript to be executed. Users with the SYSTEM_CONFIGURATION permission (i.e., administrators), can exploit this weakness to execute arbitrary JavaScript for users browsing to the login page.

ESF-IDF (Espressif IoT Development Framework) has a vulnerability when the ESP32 is in advertising mode: if it receives a connection request with an invalid Access Address (AA) of 0x00000000 or 0xFFFFFFFF, advertising may stop unexpectedly. The controller may incorrectly report a connection event to the host, which can cause the application layer to assume a successful connection.

Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation (CWE-79).

CWE-20: Improper Input Validation vulnerability. The description does not provide details about the specific component or attack vector.

Multiple CWE-352 Cross-Site Request Forgery (CSRF) vulnerabilities.

Multiple Cross-site Scripting (XSS) vulnerabilities due to improper neutralization of input during web page generation (CWE-79).

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'). The description does not indicate a specific component or attack vector.

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php. An attacker can exploit this flaw to manipulate SQL queries during login.

The PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks that let attackers upload arbitrary files to arbitrary locations.