CVE Vulnerability Catalog

In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope.

Synapse, an open source Matrix homeserver implementation, lacks validation for device keys before version 1.138.3 and in version 1.139.0, allowing an attacker registered on the victim homeserver to degrade federation functionality and unpredictably break outbound federation to other homeservers. The issue is patched in versions 1.138.3, 1.138.4, 1.139.1, and 1.139.2, but 1.138.3 and 1.139.1 introduced an unrelated regression, so skipping them is recommended.

Multiple cross-site scripting (XSS) vulnerabilities in the Notifications widget in Liferay Portal and Liferay DXP allow remote attackers to inject arbitrary web script or HTML via crafted payloads in user's First Name, Middle Name, Last Name, 'Other Reason' text field, or the name of flagged content.

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to gain unauthorized access to NFSv4 or SMB shares.

A fastjson deserialization vulnerability was discovered in WukongCRM-9.0-JAVA via the /OaExamine/setOaExamine interface. An attacker can remotely exploit this flaw to execute arbitrary code.

A stored cross-site scripting (XSS) vulnerability exists in Forms in Liferay Portal and Liferay DXP. A remote attacker can inject arbitrary web script or HTML via a crafted payload injected into a form with a rich text type field.

Stored cross-site scripting (XSS) vulnerability in diagram type products in Commerce in Liferay Portal and Liferay DXP allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an SVG file. The vulnerability affects Portal 7.4.3.18 through 7.4.3.111 and DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 18 through update 92.

A SQL injection vulnerability was identified in SourceCodester Farm Management System 1.0 in the file /myCart.php. Manipulation of the pid argument leads to SQL injection, and remote exploitation is possible. The exploit has been made publicly available and could be exploited.

Cross-site scripting (XSS) vulnerability in the Commerce Product Comparison Table widget in Liferay Portal and Liferay DXP allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a Commerce Product's Name text field. The vulnerability affects Portal 7.4.0 through 7.4.3.111 and DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92.

A SQL injection vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0 in the file /edit_booking.php. Manipulating the Name argument allows remote attack. The exploit has been publicly disclosed and may be used.

The Welcart e-Commerce plugin for WordPress is vulnerable to SQL Injection via the cookie in all versions up to, and including, 2.11.21 due to insufficient escaping on the user supplied value and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System up to version 1.0. The impacted element is an unknown function of the file /manage_website.php, where manipulation of the website_image/back_login_image arguments leads to unrestricted upload. The attack can be carried out remotely, and the exploit has been publicly disclosed.

A SQL injection vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0 in /pages/save_customer.php. Manipulation of the Contact argument allows remote attack. The exploit is publicly available.

A vulnerability was detected in Kilo Code up to version 4.86.0. It affects the ClineProvider function in src/core/webview/ClineProvider.ts of the Prompt Handler component. Manipulation results in injection, the attack can be initiated remotely, and the exploit is now public and may be used.

A security flaw has been discovered in JhumanJ OpnForm up to 1.9.3. The impacted element is an unknown function of the component API Endpoint. The manipulation results in cross-site request forgery. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor has stated that API calls require authentication through Authorization Bearer Tokens, so classic CSRF attacks do not apply here. An attacker would need to possess the JWT through means such as XSS which were mitigated, disabling any form of initial access.

Successful exploitation of the vulnerability could allow an unauthenticated attacker to gain access to a victim's Sync account data such as account credentials and email protection information.

A vulnerability in JhumanJ OpnForm up to 1.9.3 involves improper access controls in /edit. The attack can be executed remotely. The exploit is publicly disclosed. A patch is recommended: b15e29021d326be127193a5dbbd528c4e37e6324.

A vulnerability in JhumanJ OpnForm up to 1.9.3 involves missing authorization in /show/integrations. The attack can be executed remotely. The exploit is publicly disclosed. A patch is recommended: 11d97d78f2de2cb49f79baed6bde8b611ec1f384.

A vulnerability has been found in JhumanJ OpnForm up to 1.9.3 affecting /custom-domains in the API Endpoint component. Manipulation leads to missing authorization. The attack may be launched remotely and the exploit is public. The patch name is beb153ce52dceb971c1518f98333328c95f1ba20.

A vulnerability was detected in OpnForm up to 1.9.3 allowing unrestricted file upload in /answer. The attack can be launched remotely. The exploit is public and a patch is available.