CVE Vulnerability Catalog

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Brainstorm Force SureDash plugin allows Stored XSS. This issue affects SureDash through version 1.12.3.

Share 2 Archive Today versionCode 61 has insecure permissions that allow unauthorized attackers to arbitrarily overwrite another user's clipboard content by supplying a crafted URL.

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allow unauthorized attackers to arbitrarily read another user's private notes, tasks, and diary content.

Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allow unauthorized attackers to arbitrarily read flashcards across the user's entire memorization database.

An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers to force victim users into fetching a crafted URL.

Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allow unauthorized attackers to create forged holiday/work-time entries via crafted ICS imports.

Insecure permissions in Ghost Commander File Manager versionCode 479 allow unauthorized attackers to arbitrarily read and write files inside the commander's private storage.

Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allow unauthorized attackers to arbitrarily trigger another user's configured automated actions.

Insecure permissions in Fossify v1.3.0 allow unauthorized attackers to access and read another user's stored contacts.

Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's note database.

Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read notes in another user's note database.

A flaw was found in dnsmasq: when DHCP leasequery is enabled without an allowed source address list, the server does not verify who sent the query. A host on the local network can query DHCP lease records and learn assigned addresses, MAC addresses, hostnames, and related lease metadata. The feature is off unless an administrator enables it.

In dnsmasq, the DHCPv6 client hostname parser can read one byte past the end of a crafted FQDN option because it checks the next label length before confirming the pointer is still inside the option. An attacker on the local network can trigger this with a single DHCPv6 packet. The extra byte is not returned to the client or logged, and no crash has been demonstrated.

The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw exposing the UART debugging interface without authentication, authorization, or access control. Once connected to the interface, an attacker gains a root shell.

The Codection Import and export users and customers plugin contains a Stored Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. The issue affects versions from the initial release through 2.5.9.

The Brave Popup Builder WordPress plugin (Brave) through version 0.8.8 contains a Basic XSS vulnerability due to improper neutralization of script-related HTML tags. This allows code injection into the page.

The PDF Poster WordPress plugin (pdf-poster) through version 2.6.1 contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. Malicious script can be persistently stored and executed for users.

The HivePress Claim Listings plugin through version 1.1.4 contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control levels. This may permit unauthorized operations.

The Kali Forms plugin through version 2.4.27 contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control levels. This may permit unauthorized operations.

The Crocoblock JetEngine plugin contains an SQL Injection vulnerability caused by improper neutralization of special elements in SQL commands. The issue affects JetEngine from the initial version through 3.9.0.1.