CVE Vulnerability Catalog

The RexCoin plugin in versions up to and including 1.2.6 contains an unauthenticated PHP Object Injection vulnerability.

Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because file-upload handling does not validate the destination path before writing to disk. An authenticated attacker can upload crafted files outside the intended storage directory to achieve remote code execution on the server.

OpenText Advanced Authentication Server contains an acceptance of extraneous untrusted data with trusted data vulnerability that allows accessing functionality not properly constrained by ACLs. This affects versions 6.4.0.0 through 6.4.3.8, 6.5.0.0 through 6.5.0.10, and 6.6.0.0 through 6.6.1.0.

P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from an ARVendorBlock request field that is not part of the block definition and uses it as the number of bytes to copy into a fixed-size buffer without comparing it to the buffer size or block length. A crafted Connect request causes an out-of-bounds write, potentially leading to a crash (denial of service) or arbitrary code execution. This option is disabled by default.

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation.

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in eval/exec.

IBM Langflow OSS versions 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.

LeafPad / Leaf Note v1.21 (versionCode 21) has insecure permissions that allow unauthorized attackers to arbitrarily read another user's note data.

Bulk Share : Location Sender v2.1.0 has insecure permissions that allow unauthorized attackers to invoke an exported component. This leads to arbitrary data access and control of data flow.

rubenalfon Pile v1.1.3 has insecure permissions that allow unauthorized attackers to invoke an exported component. This leads to arbitrary data access and overwriting.

wbpxre150 Shopping List v11.0 has insecure permissions that allow unauthorized attackers to invoke an exported component. This leads to manipulation of the shopping-list data.

IBM Langflow OSS versions 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allow unauthorized attackers to arbitrarily trigger another user's configured automated actions.

Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's note database.

Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read notes in another user's note database.

The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw exposing the UART debugging interface without authentication, authorization, or access control. Once connected to the interface, an attacker gains a root shell.

The Yamaha NWR100 wireless LAN router contains an OS command injection vulnerability that allows arbitrary OS commands to be executed by sending a specially crafted request to the device.

The Motors plugin (motors-car-dealership-classified-listings) by StylemixThemes contains a Blind SQL Injection vulnerability. The issue affects Motors from n/a through 1.4.126.

The Radius Xenia M2M Platform is affected by insufficient validation of user-supplied input in the password recovery functionality of the web management interface. An unauthenticated remote attacker could supply crafted SQL queries through input fields, potentially gaining unauthorized access to sensitive information, enumerating the database structure, or modifying database records.