CVE Vulnerability Catalog

Liferay Portal 7.4.0 through 7.4.3.99 and older unsupported versions, as well as Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 34 and older unsupported versions, store password reset tokens in plain text. This allows attackers with database access to obtain the token, reset a user's password, and take over the account.

A weakness was identified in Willow CMS up to 1.4.0 in an unknown function of /admin/images/add. Manipulation leads to unrestricted file upload. Remote exploitation is possible and the exploit is publicly available.

A security flaw has been discovered in shawon100 RUET OJ up to commit 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. The affected element is an unknown function in /details.php. Manipulation of the argument ID results in SQL injection. Remote exploitation is possible. The exploit has been released publicly. The product follows a rolling release approach, so version details are not provided. The vendor was contacted but did not respond.

A SQL injection vulnerability was identified in shawon100 RUET OJ within the file /contestproblem.php, triggered by manipulation of the Name argument. The attack can be launched remotely, and a publicly available exploit might be used. The product operates on a rolling release basis, so no version details are available.

The InventoryGui library for creating chest GUIs for Bukkit/Spigot plugins, in versions before 1.6.5, contains a vulnerability where any plugin using a GUI with the GuiStorageElement and allowing taking out items can allow item duplication when the experimental Bundle item feature is enabled. The vulnerability is resolved in version 1.6.5.

InventoryGui library up to version 1.6.1-SNAPSHOT allows item duplication in any plugin using GuiStorageElement when the experimental Bundle item feature is enabled on the server. The vulnerability is fixed in version 1.6.2-SNAPSHOT.

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain a vulnerability where GUIs using GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server.

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. PILOS before 4.8.0 exposes the PHP version via the X-Powered-By header, enabling attackers to fingerprint the server and assess potential exploits.

CORS misconfiguration in PILOS before 4.8.0: reflects the Origin header in Access-Control-Allow-Origin without validation, with Access-Control-Allow-Credentials set to true. However, Laravel's session protections make typical deployments not exploitable.

Information exposure through log file vulnerability in LDAP import feature in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows local users to view user email address in the log files.

In RUET OJ (shawon100 project) up to version 18fa45b0a669fa1098a0b8fc629cf6856369d9a5, there is an SQL injection vulnerability in /description.php via manipulation of the ID argument. The attack can be initiated remotely, and the exploit has been publicly disclosed. The product uses a rolling release model, so specific affected or fixed versions are not available.

ImageMagick versions prior to 7.1.2-8 are vulnerable to denial-of-service due to unsigned integer underflow and division-by-zero in the CLAHEImage function. When tile width or height is zero, unsigned underflow occurs in pointer arithmetic, leading to out-of-bounds memory access, and division-by-zero causes immediate crashes.

Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal and Liferay DXP allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an Account Role's "Title" text field and an Organization's "Name" text field. The vulnerability affects Portal 7.3.7 through 7.4.3.103 and DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, and 7.3 SP3 through update 36.

A vulnerability was determined in code-projects Food Ordering System 1.0. An unknown function of the file /admin/menu.php is affected. Manipulation of the itemPrice argument can lead to SQL injection. The attack can be executed remotely and the exploit has been publicly disclosed.

A vulnerability was found in code-projects Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/deleteitem.php. Performing a manipulation of the argument itemID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

A vulnerability has been found in D-Link DI-7001 MINI 19.09.19A1/24.04.18B1. The affected element is an unknown function of the file /msp_info.htm. Such manipulation of the argument cmd leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

A security vulnerability has been detected in VirtFusion up to 6.0.2. This vulnerability affects unknown code of the file /account/_settings of the Email Change Handler component. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

Liferay Portal (versions 7.4.0 through 7.4.3.97 and older) and Liferay DXP (specific versions) contain an open redirect vulnerability in page administration. A remote attacker can redirect users to arbitrary external URLs via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect parameter.

Pi-hole Admin Interface versions 6.2.1 and earlier are vulnerable to reflected cross-site scripting (XSS) via a malformed URL path. The 404 error page includes the requested path in the class attribute of the body tag without proper sanitization or escaping.

Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.