Mengshen Wireless Door Alarm M70 2024-05-24 allows Authentication Bypass via a Capture-Replay approach.
Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
AFFECTED_PRODUCTS:
Zoom Rooms,
Zoom Meeting Software Development Kit,
Zoom Workplace
... (+2)
Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access.
AFFECTED_PRODUCTS:
Zoom Rooms,
Zoom Workplace Desktop,
Zoom Workplace Virtual Desktop Infrastructure
Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access.
AFFECTED_PRODUCTS:
Zoom Rooms,
Zoom Meeting Software Development Kit,
Zoom Workplace Desktop
A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.
AFFECTED_PRODUCTS:
Tenda Ax1806 Firmware
Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability.
AFFECTED_PRODUCTS:
Project Team Tmall Demo
Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability.
AFFECTED_PRODUCTS:
Project Team Tmall Demo
An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information.
AFFECTED_PRODUCTS:
Project Team Tmall Demo
Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage.
AFFECTED_PRODUCTS:
Project Team Tmall Demo
Rejected reason: Invalid security issue.
The vulnerability allows a malicious low-privileged PAM user to access information about other PAM users and their group memberships.
A specific authentication strategy allows a malicious attacker to learn ids of all PAM users defined in its database.
Local Privilege Escalation in MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows allows a local unprivileged user to escalate privileges to SYSTEM.
This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request.
A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface. A remote attacker able to convince a PAM user to click on a specially crafted link to the PAM UI web interface could potentially execute arbitrary client-side code in the context of PAM UI.
AFFECTED_PRODUCTS:
Broadcom Symantec Privileged Access Management
This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file.
The vulnerability allows an unauthenticated attacker to read arbitrary information from the database.
The vulnerability allows a malicious low-privileged PAM user to perform server upgrade related actions.
The vulnerability allows an attacker to bypass the authentication requirements for a specific PAM endpoint.
This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file.
An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request.
Rejected reason: ** REJECT **
DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2024-5324. Reason: This record is a reservation duplicate of CVE-2024-5324. Notes: All CVE users should reference CVE-2024-5324 instead of this record. All references and descriptions in this record have been removed to prev...
A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerability is an unknown functionality of the file \EasySpider\resources\app\server.js of the component HTTP GET Request Handler. The manipulation with the input /../../../../../../../.....
AFFECTED_PRODUCTS:
Easyspider Easyspider
Unquoted Search Path or Element vulnerability in ABB Mint Workbench.
A local attacker who successfully exploited this vulnerability could gain elevated privileges by inserting an executable file in the path of the affected service.
This issue affects Mint Workbench I versions: from 5866 before...
AFFECTED_PRODUCTS:
Abb Mint Workbench
A vulnerability classified as critical has been found in code-projects Simple Ticket Booking 1.0. Affected is an unknown function of the file adminauthenticate.php of the component Login. The manipulation of the argument email/password leads to sql injection. It is possible to launch the attack remo...
AFFECTED_PRODUCTS:
Code-Projects Simple Ticket Booking
Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed. Unauthenticated remote attackers can exploit this vulnerability using specific JavaScript code to obtain the session cookie with the HttpOnly flag enabled.
AFFECTED_PRODUCTS:
Openfind Mail2000,
Openfind Mail2000
An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows information stored in a customizable block page to be disclosed to third-party websites due to Same Origin Policy Bypass of browsers in certain scenarios. The risk is low, because other...
AFFECTED_PRODUCTS:
Skyhighsecurity Secure Web Gateway,
Skyhighsecurity Secure Web Gateway
In the Linux kernel, the following vulnerability has been resolved:
tcp: avoid too many retransmit packets
If a TCP socket is using TCP_USER_TIMEOUT, and the other peer
retracted its window to zero, tcp_retransmit_timer() can
retransmit a packet every two jiffies (2 ms for HZ=1000),
for about 4 mi...
AFFECTED_PRODUCTS:
Linux Linux Kernel,
Linux Linux Kernel,
Linux Linux Kernel
... (+3)
Mattermost Mobile Apps versions <=2.16.0 fail to validate that the push notifications received for a server actually came from this serve that which allows a malicious server to send push notifications with another server’s diagnostic ID or server URL and have them show up in mobile apps as that ser...
AFFECTED_PRODUCTS:
Mattermost Mattermost Mobile
Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions.
AFFECTED_PRODUCTS:
Mattermost Mattermost Mobile
Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to inject JavaScript code within the attachment and perform Stored Cross-site scripting attacks.
AFFECTED_PRODUCTS:
Openfind Mail2000,
Openfind Mail2000
Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has been...
AFFECTED_PRODUCTS:
Otrs Otrs
An incorrect privilege assignment vulnerability in the inline editing functionality of OTRS can lead to privilege escalation. This flaw allows an agent with read-only permissions to gain full access to a ticket. This issue arises in very rare instances when an admin has previously enabled the settin...
AFFECTED_PRODUCTS:
Otrs Otrs
In Apache Linkis <=1.5.0, due to the lack of effective filtering
of parameters, an attacker configuring malicious
db2
parameters in the DataSource Manager Module will result in jndi injection. Therefore, the parameters in the DB2 URL should be blacklisted.Â
This attack requires the attacker to...
AFFECTED_PRODUCTS:
Apache Linkis
In Apache Linkis <= 1.5.0, data source management module, when adding Mysql data source, exists remote code execution vulnerability for java version < 1.8.0_241. The deserialization vulnerability exploited through jrmp can inject malicious files into the server and execute them.
This attack requi...
AFFECTED_PRODUCTS:
Apache Linkis
In Apache Linkis =1.4.0, due to the lack of effective filtering
of parameters, an attacker configuring malicious Mysql JDBC parameters in the DataSource Manager Module will trigger arbitrary file reading. Therefore, the parameters in the Mysql JDBC URL should be blacklisted. This attack requires th...
AFFECTED_PRODUCTS:
Apache Linkis
The SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input, leading to a Buffer Overflow vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the remote server.
AFFECTED_PRODUCTS:
Cellopoint Secure Email Gateway
AguardNet's Space Management System does not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
AFFECTED_PRODUCTS:
Space Management System Project Space Management System,
Space Management System Project Space Management System
AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regular privileges to inject JavaScript and perform Reflected Cross-site scripting attacks.
AFFECTED_PRODUCTS:
Space Management System Project Space Management System
The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.
AFFECTED_PRODUCTS:
Wpserveur Wps Hide Login
The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
AFFECTED_PRODUCTS:
Tipsandtricks-Hq Wp Estore
The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
AFFECTED_PRODUCTS:
Tipsandtricks-Hq Wp Estore
The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
AFFECTED_PRODUCTS:
Tipsandtricks-Hq Wp Estore
The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
AFFECTED_PRODUCTS:
Tipsandtricks-Hq Wp Estore
The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
AFFECTED_PRODUCTS:
Tipsandtricks-Hq Wp Estore
The Insert or Embed Articulate Content into WordPress plugin before 4.3000000024 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.
AFFECTED_PRODUCTS:
Elearningfreak Insert Or Embed Articulate Content
Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' on all values. An attacker can exploit this vulnerability and execute arbitrary python code if they c...
AFFECTED_PRODUCTS:
Langchain Langchain Experimental
The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session cookie via XSS.
AFFECTED_PRODUCTS:
Openfind Mailaudit,
Openfind Mailgates
The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modifying the URL.
AFFECTED_PRODUCTS:
Wisdomgarden Tronclass
The access control in the Electronic Official Document Management System from 2100 TECHNOLOGY is not properly implemented, allowing remote attackers with regular privileges to access the account settings functionality and create an administrator account.
AFFECTED_PRODUCTS:
Electronic Official Document Management System Project Electronic Official Document Management System