CVE Vulnerability Catalog

A vulnerability was detected in WonderTrader up to 0.9.9 in the function TraderDD::queryTrades of src/TraderDD/TraderDD.cpp. Manipulation of the FID_JYLB argument results in enforcement of behavioral workflow. The attack can be launched remotely but is difficult to exploit. The exploit is public and the vendor did not respond.

A cross-site scripting vulnerability was found in PHPGurukul Company Visitor Management System 1.0 in the file /manage-newvisitors.php. Manipulation of the fullname argument leads to XSS. The attack can be initiated remotely and the exploit is public.

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root.

The root password hash of the device can be obtained through unencrypted information in the firmware.

Mermaid before 10.9.8 and 11.16.1 is vulnerable to prototype pollution via configuration setters when untrusted data is passed. Diagram-supplied config is not affected.

Traefik from 3.6.11 to 3.6.25 and 3.7.10 has a vulnerability in BasicAuth middleware allowing an attacker with valid credentials and hash to authenticate as an unconfigured username.

GitHub CLI before 2.97.0 fails to escape regex metacharacters in --signer-repo and --signer-workflow, allowing attackers to bypass Sigstore attestation verification with lookalike names.

GitHub CLI before 2.97.0 masks only part of certain tokens in gh auth status, potentially exposing token fragments in terminal or CI output.

OpenReception before 1.0.6 has a weak proof-of-work (16 bits) in the bootstrap-challenge endpoint, allowing easy bypass of rate limiting and automated abuse of booking flow.

OpenReception before 1.0.6 has a vulnerability in staff deletion by TENANT_ADMIN that removes invites in other tenants sharing the same email.

Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

DataGear up to 5.0.0 has an XSS vulnerability in HtmlTplDashboardWidgetHtmlRenderer where the Title argument is mishandled, allowing remote script execution.

In Insta InstaKNXServiceApp 1.2.3.1469, the CreateWebClientAndDownloadFileList function (Firmware Update Handler component) may lead to insufficient verification of data authenticity. The attack can be launched remotely but is highly complex and difficult to exploit. There are doubts about whether this vulnerability truly exists; the vendor states that the device performs an authenticity check after the complete update is transferred and does not install unverified firmware.

A path traversal vulnerability was found in FoundationAgents MetaGPT up to version 0.8.2, affecting the read function in metagpt/tools/libs/editor.py. The attack requires local access. The exploit has been publicly disclosed and may be used. The vendor did not respond to the disclosure.

A vulnerability in the Easy Appointments WordPress plugin before 3.12.28 incorrectly validates shortcode input, allowing contributor-level users to execute arbitrary registered shortcodes.

The Passster WordPress plugin before version 4.3.7 does not restrict low-privilege users with the edit_posts capability from reading globally password-protected content through the WordPress core REST API when global protection is enabled. This allows any Contributor or higher to read protected pages and posts without knowing the password.

A security vulnerability has been detected in NocteDefensor LudusMCP up to 1.0.24. The impacted element is an unknown function of the file src/tools/ludusEnvironmentGuidesSearch.ts of the component ludus_environment_guides_search. Manipulation of the argument guide_name leads to path traversal. Local access is required to approach this attack.

An unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse. This issue affects pardus-domain-joiner before 0.5.5.