CVE Vulnerability Catalog

A vulnerability in RUGGEDCOM CROSSBOW (versions < V6.0) involves missing proper authorization checks for device disconnection requests. An authenticated attacker with minimal privileges could disconnect active sessions of other users, including administrators, leading to a denial of service.

A vulnerability in RUGGEDCOM CROSSBOW (versions < V6.0) is due to lack of input validation and sanitization in the Name and Value fields for custom file labels. An authenticated attacker with administrative privileges could execute arbitrary SQL commands on the underlying database.

A vulnerability in .NET Client Library for SIMATIC S7 Webserver API (versions < V3.3.62) involves improper redaction of PLC restore passwords from HTTP error exception messages. An attacker with access to logs or other diagnostic output could obtain the plaintext restore password and potentially perform unauthorized operations on the PLC.

A vulnerability affects devices that do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page. An attacker could social engineer an authorized user with 'Read diagnostics' right into importing a specially crafted file, allowing attacker-controlled JavaScript to execute in the user's browser session and perform PLC operations within the user's authorization scope.

A vulnerability affects devices that do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page. An attacker could social engineer an authorized user with 'Read diagnostics' right into importing a specially crafted trace file, allowing attacker-controlled JavaScript to execute in the user's browser session when the error message is displayed.

A vulnerability affects devices that do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page. An attacker could social engineer an authorized user with 'Read diagnostics' right into importing a specially crafted trace file, allowing attacker-controlled JavaScript to execute in the user's browser session when the user interacts with an affected selection menu.

A vulnerability affects devices that do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page. An attacker could social engineer an authorized user with 'Read diagnostics' right into importing a specially crafted trace file, allowing attacker-controlled JavaScript to execute in the user's browser session and perform PLC operations within the user's authorization scope.

A vulnerability affects devices that do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page. An attacker could social engineer an authorized user with 'Read diagnostics' right into importing a specially crafted trace file, allowing attacker-controlled JavaScript to execute in the user's browser session and perform PLC operations within the user's authorization scope.

A vulnerability in Siemens Industrial Edge Cloud Device, Industrial Edge Device Kit, and other Industrial Edge devices. The systems do not properly restrict access to internal APIs and paths for authenticated users, which could allow a remote attacker to access sensitive internal information.

TYPO3 forms using FileUpload or ImageUpload elements with a custom saveToFileMount stored uploaded files in the default storage folder 1:/user_upload/ instead of the configured destination. As a result, files could end up in a publicly accessible storage even though a restricted, non-public storage had been configured. Files stored this way are served directly, without the access checks applied to non-public storages.

A security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is the function _recv_file/_recv_pushd of the SCP Receive Handler component. The manipulation leads to path traversal. Remote exploitation is possible. Upgrading to version 0.16.2 resolves the issue.

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted but did not respond.

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the Certificate Path Builder component. Such manipulation leads to resource consumption. The attack can be launched remotely. The vendor was contacted but did not respond.

Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL. This occurs due to a lack of sanitisation and validation of SVG content when setting an SVG image containing embedded JavaScript code as the avatar. The file is served by the CDN with Content-Type: image/svg+xml and, when navigating directly to that URL, the script executes within the context of the CDN's domain.

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects User Registration: from n/a through 5.2.8.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows Stored XSS. This issue affects SureCart: from n/a through 4.9.4.

Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FluentBoards: from n/a through 2.1.0.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Stored XSS. This issue affects Prime Slider – Addons For Elementor: from n/a through 4.7.1.

Missing Authorization vulnerability in TMS Amelia ameliabooking allows exploiting incorrectly configured access control security levels. This issue affects Amelia from n/a through 2.4.10.

A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function credentials.delete of the file /api/trpc/credentials/delete. Manipulation of the argument teamId causes improper privilege management. The attack can be initiated remotely and the exploit has been publicly disclosed.