CVE Vulnerability Catalog

In Reyrolle 7SR5 devices, the length of the URL component in pre-authenticated HTTP messages is not properly validated before appending additional data, resulting in an out-of-bounds write. An unauthenticated remote attacker can crash the device, causing a reboot and denial of service.

In Reyrolle 7SR5 devices, a random number generator used for security-relevant values (such as session identifiers) is not initialized with a True Random Number Generator (TRNG), resulting in predictable sequences. An unauthenticated remote attacker can more easily predict values and impersonate a legitimate user.

In Reyrolle 7SR5 devices, session identifiers are generated using an algorithm with insufficient randomness, resulting in low-entropy tokens that can be predicted or brute-forced. An unauthenticated remote attacker can derive valid session identifiers and bypass authentication.

A vulnerability in Desigo CC applications allows Client Code Execution (CCE) due to insufficient input validation when handling scripts embedded in user-defined graphics documents. An attacker can craft a malicious graphics document that, when opened by a privileged user, executes a script, allowing arbitrary file writes to the client's operating system.

Unauthenticated Cross Site Scripting (XSS) vulnerability in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) versions up to 2.0.17. Allows an attacker to inject malicious script into a page, which executes in the victim's browser.

Unauthenticated Cross Site Scripting (XSS) vulnerability in Open User Map versions up to 1.4.50. Allows an attacker to inject malicious script into a page, which executes in the victim's browser.

Unauthenticated Cross Site Scripting (XSS) vulnerability in JetFormBuilder versions up to 3.6.5.1. Allows an attacker to inject malicious script into a page, which executes in the victim's browser.

Server-Side Request Forgery (SSRF) vulnerability in Hide My WP Ghost versions up to 7.0.09. Allows an attacker to send requests from the server to internal network resources, potentially leading to disclosure of sensitive information or further attacks.

DOM-Based Cross Site Scripting (XSS) vulnerability in Easy Appointments versions up to 4.0.2.1. Allows an attacker to manipulate the DOM of the page in the victim's browser, leading to execution of malicious script.

Missing Authorization vulnerability in Csomagpontok és szállítási címkék WooCommerce-hez before version 4.2.8. Allows exploiting incorrectly configured access control security levels, potentially leading to unauthorized actions.

Missing Authorization vulnerability in Unbounce Landing Pages versions up to 1.1.4. Allows exploiting incorrectly configured access control security levels, potentially leading to unauthorized actions.

A vulnerability in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's ExternalProcessConstraint mechanism to execute arbitrary commands with attacker-controlled environment variables, achieving code execution as the pkiuser account.

Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. Allows an attacker to process malicious XML files, potentially leading to disclosure of sensitive data or unauthorized operations.

Resource exhaustion vulnerability without limits or throttling in Automattic WooCommerce allows HTTP DoS. This affects WooCommerce versions before 11.1.0.

ASUS Control Center Express Agent has missing authentication for a critical function, allowing an unauthenticated nearby user to control the host via a direct connection when the host has an active login session.

SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally stored data during application startup. An attacker with low privileges on the local system could replace this data with crafted content, leading to arbitrary code execution in the user's context upon next launch. This results in high impact on confidentiality, integrity, and availability.

SAP Integration Suite does not sufficiently validate XML documents from untrusted sources in certain internal components. An attacker with low privileges could submit crafted XML payloads with malicious external entity declarations, potentially reading sensitive files from the server and exposing them via monitoring or logs, resulting in high confidentiality impact. It could also lead to resource exhaustion, causing low availability impact. No integrity impact.

An unauthenticated user can send a specially crafted packet that triggers reprocessing of a previously buffered user request, potentially hijacking another user's session under narrow timing conditions. Successful exploitation could result in high impact on confidentiality and integrity, with low impact on availability.

Vulnerability in knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Attackers with read-restricted sessions can exploit code.replace to modify permission configurations and escalate privileges on subsequent calls.

Vulnerability in knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace() function that allows attackers to overwrite arbitrary files outside the project root. Attackers can supply absolute paths or relative paths containing directory traversal sequences to write malicious content to sensitive files like shell startup scripts or SSH configuration files.