imlib2 v1.9.1 was discovered to mishandle memory allocation in the function init_imlib_fonts().
AFFECTED_PRODUCTS:
Enlightenment Imlib2
An issue in the imlib_free_image_and_decache function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image.
AFFECTED_PRODUCTS:
Enlightenment Imlib2
An issue in the imlib_load_image_with_error_return function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image.
AFFECTED_PRODUCTS:
Enlightenment Imlib2
An issue in the HuginBase::PTools::setDestImage function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsing a crafted image.
AFFECTED_PRODUCTS:
Hugin Project Hugin
Improper handling of values in HuginBase::PTools::Transform::transform of Hugin 2022.0.0 leads to an assertion failure.
AFFECTED_PRODUCTS:
Hugin Project Hugin
An issue in the HuginBase::ImageVariable<double>::linkWith function of Hugin v2022.0.0 allows attackers to cause a heap-use-after-free via parsing a crafted image.
AFFECTED_PRODUCTS:
Hugin Project Hugin
An issue in the HuginBase::PanoramaMemento::loadPTScript function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsing a crafted image.
AFFECTED_PRODUCTS:
Hugin Project Hugin
Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/member_count API resulting in channel member counts being leaked to a user without permissions.
AFFECTED_PRODUCTS:
Mattermost Mattermost Server
Mattermost Jira Plugin handling subscriptions fails to check the security level of an incoming issue or limit it based on the user who created the subscription resulting in registered users on Jira being able to create webhooks that give them access to all Jira issues.
AFFECTED_PRODUCTS:
Mattermost Mattermost Server
Mattermost Jira Plugin fails to protect against logout CSRF allowing an attacker to post a specially crafted message that would disconnect a user's Jira connection in Mattermost only by viewing the message.
AFFECTED_PRODUCTS:
Mattermost Mattermost Server
Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2.
AFFECTED_PRODUCTS:
Hotel Management System Project Hotel Management System
Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'eid' parameter in Hotel/admin/usersettingdel.php?eid=2.
AFFECTED_PRODUCTS:
Hotel Management System Project Hotel Management System
Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2.
AFFECTED_PRODUCTS:
Hotel Management System Project Hotel Management System
Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'sid' parameter in Hotel/admin/show.php?sid=2.
AFFECTED_PRODUCTS:
Hotel Management System Project Hotel Management System
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."
AFFECTED_PRODUCTS:
Code-Projects Simple School Management System
Code-projects Cinema Seat Reservation System 1.0 allows SQL Injection via the 'id' parameter at "/Cinema-Reservation/booking.php?id=1."
AFFECTED_PRODUCTS:
Code-Projects Cinema Seat Reservation System
Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter.
AFFECTED_PRODUCTS:
Remyandrade Event Student Attendance System
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oduyo Financial Technology Online Collection allows SQL Injection.This issue affects Online Collection: before v.1.0.2.
AFFECTED_PRODUCTS:
Oduyo Online Collection
Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacher_login.php.
AFFECTED_PRODUCTS:
Code-Projects Simple School Management System
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/sub_delete.php?id=5."
AFFECTED_PRODUCTS:
Code-Projects Simple School Management System
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacher_login.php.
AFFECTED_PRODUCTS:
Code-Projects Simple School Management System
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacher_login.php.
AFFECTED_PRODUCTS:
Code-Projects Simple School Management System
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php".
AFFECTED_PRODUCTS:
Code-Projects Simple School Management System
Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/index.php.
AFFECTED_PRODUCTS:
Code-Projects Simple School Management System
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."
AFFECTED_PRODUCTS:
Code-Projects Simple School Management System
Authorization Bypass Through User-Controlled Key vulnerability in Software Engineering Consultancy Machine Equipment Limited Company Hearing Tracking System allows Authentication Abuse.This issue affects Hearing Tracking System: before for IOS 7.0, for Android Latest release 1.0.
AFFECTED_PRODUCTS:
Simgesel Hearing Tracking System,
Simgesel Hearing Tracking System
In PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTION_CLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as part of exploitation.
AFFECTED_PRODUCTS:
Pquic Pquic
In LiteSpeed QUIC (LSQUIC) Library before 4.0.4, DCID validation is mishandled.
AFFECTED_PRODUCTS:
Litespeedtech Lsquic
In Min before 1.31.0, local files are not correctly treated as unique security origins, which allows them to improperly request cross-origin resources. For example, a local file may request other local files through an XML document.
AFFECTED_PRODUCTS:
Minbrowser Min
An issue was discovered in MISP before 2.4.184. A client does not need to use POST to start an export generation process. This is related to app/Controller/JobsController.php and app/View/Events/export.ctp.
AFFECTED_PRODUCTS:
Misp Misp
An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and MIME type.
AFFECTED_PRODUCTS:
Misp Misp
The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section.
AFFECTED_PRODUCTS:
Zabbix Zabbix,
Zabbix Zabbix,
Zabbix Zabbix
... (+1)
A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, 2.0.0 through 2.0.13, 1.2.0 through...
AFFECTED_PRODUCTS:
Fortinet FortiOS,
Fortinet FortiOS,
Fortinet FortiOS
... (+7)
Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. All references and descriptions in this record have been removed to prevent accidental usage.
SQL Injection vulnerability in Boostmyshop (boostmyshopagent) module for Prestashop versions 1.1.9 and before, allows remote attackers to escalate privileges and obtain sensitive information via changeOrderCarrier.php, relayPoint.php, and shippingConfirmation.php.
AFFECTED_PRODUCTS:
Boostmyshop Boostmyshop
KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insufficient input sanitization and validation, failure to escape special characters, and insecure system calls (at lines 2369-2390). This allows an attacker to add inputs inside the filen...
AFFECTED_PRODUCTS:
9Bis Kitty
SQL injection vulnerability in Presta Monster "Multi Accessories Pro" (hsmultiaccessoriespro) module for PrestaShop versions 5.1.1 and before, allows remote attackers to escalate privileges and obtain sensitive information via the method HsAccessoriesGroupProductAbstract::getAccessoriesByIdProducts(...
AFFECTED_PRODUCTS:
Prestamonster Multi Accessories Pro
SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" (idxrmanufacturer) module for PrestaShop versions 2.0.4 and before, allows remote attackers to escalate privileges and obtain sensitive information via the methods IdxrmanufacturerFunctions::getCornersLink, Id...
AFFECTED_PRODUCTS:
Innovadeluxe Manufacturer Or Supplier Alphabetical Search
KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the username, occurs due to insufficient bounds checking and input sanitization (at line 2600). This allows an attacker to overwrite adjacent memory, which leads to arbitrary code execution.
AFFECTED_PRODUCTS:
9Bis Kitty
KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the hostname, occurs due to insufficient bounds checking and input sanitization. This allows an attacker to overwrite adjacent memory, which leads to arbitrary code execution.
AFFECTED_PRODUCTS:
9Bis Kitty
An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or rem...
AFFECTED_PRODUCTS:
Red Hat Enterprise Linux,
Red Hat Enterprise Linux,
Red Hat Enterprise Linux
... (+13)
Cross Site Scripting (XSS) vulnerability in EasyEmail v.4.12.2 and before allows a local attacker to execute arbitrary code via the user input parameter(s). NOTE: Researcher claims issue is present in all versions prior and later than tested version.
AFFECTED_PRODUCTS:
Zalify Easy Email
A cross-site scripting (XSS) vulnerability in Grav versions 1.7.44 and before, allows remote authenticated attackers to execute arbitrary web scripts or HTML via the onmouseover attribute of an ISINDEX element.
AFFECTED_PRODUCTS:
Getgrav Grav
The Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_data() function in all versions up to, and including, 3.3.50. This makes it possible for unauthenticated atta...
AFFECTED_PRODUCTS:
Themewinter Eventin
The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.5. This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenticated attackers to make excessive request...
AFFECTED_PRODUCTS:
Softaculous Backuply
The Internal Link Juicer: SEO Auto Linker for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings such as 'ilj_settings_field_links_per_page' in all versions up to, and including, 2.23.4 due to insufficient input sanitization and output escaping. This make...
AFFECTED_PRODUCTS:
Internallinkjuicer Internal Link Juicer
In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could bypass authentication and acquire admin capabilities.
AFFECTED_PRODUCTS:
Emerson Gc370xa Firmware,
Emerson Gc700xa Firmware,
Emerson Gc1500xa Firmware
In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an authenticated user with network access could run arbitrary commands from a remote computer.
AFFECTED_PRODUCTS:
Emerson Gc370xa Firmware,
Emerson Gc700xa Firmware,
Emerson Gc1500xa Firmware
In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could execute arbitrary commands in root context from a remote computer.
AFFECTED_PRODUCTS:
Emerson Gc370xa Firmware,
Emerson Gc700xa Firmware,
Emerson Gc1500xa Firmware
In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could obtain access to sensitive information or cause a denial-of-service condition.
AFFECTED_PRODUCTS:
Emerson Gc370xa Firmware,
Emerson Gc700xa Firmware,
Emerson Gc1500xa Firmware