HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
AFFECTED_PRODUCTS:
Wireshark Wireshark
An issue was discovered on GL.iNet devices through 4.5.0. Attackers who are able to steal the AdminToken cookie can execute arbitrary code by uploading a crontab-formatted file to a specific directory and waiting for its execution. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6,...
AFFECTED_PRODUCTS:
Gl-Inet Gl Mt300n V2 Firmware,
Gl-Inet Gl Ax1800 Firmware,
Gl-Inet Gl Mt3000 Firmware
... (+9)
The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's embed_oembed_html shortcode in all versions up to 3.9.5 (exclusive) due to insufficient inp...
AFFECTED_PRODUCTS:
Wpdeveloper Embedpress
Directory Traversal vulnerability in fuwushe.org iFair versions 23.8_ad0 and before allows an attacker to obtain sensitive information via a crafted script.
AFFECTED_PRODUCTS:
Fuwushe Ifair
The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin for WordPress is vulnerable to SQL Injection via the 'group_id' parameter in all versions up to, and including, 6.5 due to insufficient escaping on the user supplied parameter and lack of sufficient prepar...
AFFECTED_PRODUCTS:
Veronalabs Wp Sms
The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.5. This is due to missing or incorrect nonce validation on the 'delete' action of the wp-sms-subscribers pa...
AFFECTED_PRODUCTS:
Veronalabs Wp Sms
The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin for WordPress is vulnerable to unauthorized modification of data and Stored Cross-Site Scripting due to a missing capability check on the update_settings() function hooked via admin_init in all versions up to, and including, 5.7.9. T...
AFFECTED_PRODUCTS:
Daan Omgf
The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the map title parameter in all versions up to and including 2.88.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor ac...
AFFECTED_PRODUCTS:
Mappresspro Mappress
An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service (DoS) via a crafted request to the E2Manager API component.
AFFECTED_PRODUCTS:
O-Ran-Sc Ric Plt E2mgr
The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘device’ header in all versions up to, and including, 2.8.7 due to insufficient input sanitization and output escaping. This mak...
AFFECTED_PRODUCTS:
Wpexperts Post Smtp
The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘msg’ parameter in all versions up to, and including, 2.8.6 due to insufficient input sanitization and output escaping. This...
AFFECTED_PRODUCTS:
Wpexperts Post Smtp
In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nestedProperty.
AFFECTED_PRODUCTS:
Plotly Plotly.js
HCL DRYiCE MyXalytics is impacted by improper access control (Unauthenticated File Download) vulnerability. An unauthenticated user can download certain files.
AFFECTED_PRODUCTS:
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics
HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other users.
AFFECTED_PRODUCTS:
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics
HCL DRYiCE MyXalytics is impacted by an Insecure Direct Object Reference (IDOR) vulnerability. A user can obtain certain details about another user as a result of improper access control.
AFFECTED_PRODUCTS:
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics
HCL DRYiCE MyXalytics is impacted by Improper Access Control (Obsolete web pages) vulnerability. Discovery of outdated and accessible web pages, reflects a "Missing Access Control" vulnerability, which could lead to inadvertent exposure of sensitive information and/or exposing a vulnerable endpoint....
AFFECTED_PRODUCTS:
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics
HCL DRYiCE MyXalytics product is impacted by unauthenticated file upload vulnerability. The web application permits the upload of a certain file without requiring user authentication.
AFFECTED_PRODUCTS:
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics
HCL DRYiCE MyXalytics is impacted by path traversal vulnerability which allows file upload capability. Certain endpoints permit users to manipulate the path (including the file name) where these files are stored on the server.
AFFECTED_PRODUCTS:
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics
HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special el...
AFFECTED_PRODUCTS:
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics
HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data.
AFFECTED_PRODUCTS:
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics
HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an attacker ability to decrypt sensitive information.
AFFECTED_PRODUCTS:
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics
HCL DRYiCE MyXalytics is impacted by an improper error handling vulnerability. The application returns detailed error messages that can provide an attacker with insight into the application, system, etc.
AFFECTED_PRODUCTS:
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics
HCL DRYiCE MyXalytics is impacted by an information disclosure vulnerability. Certain endpoints within the application disclose detailed file information.
AFFECTED_PRODUCTS:
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics
HCL DRYiCE MyXalytics is impacted by an Open Redirect vulnerability which could allow an attacker to redirect users to malicious sites, potentially leading to phishing attacks or other security threats.
AFFECTED_PRODUCTS:
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics,
Hcltech Dryice Myxalytics
There is a command injection vulnerability of ZTE's ZXCLOUD iRAI. Due to the program failed to adequately validate the user's input, an attacker could exploit this vulnerability to escalate local privileges.
AFFECTED_PRODUCTS:
Zte Zxcloud Irai
There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the program failed to adequately validate the user's input, an attacker could exploit this vulnerability to escalate local privileges.
AFFECTED_PRODUCTS:
Zte Zxcloud Irai
There is an illegal memory access vulnerability of ZTE's ZXCLOUD iRAI product.When the vulnerability is exploited by an attacker with the common user permission, the physical machine will be crashed.
AFFECTED_PRODUCTS:
Zte Zxcloud Irai
There is a local privilege escalation vulnerability of ZTE's ZXCLOUD iRAI.Attackers with regular user privileges can create a fake process, and to escalate local privileges.
AFFECTED_PRODUCTS:
Zte Zxcloud Irai
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_mmac_params function in the modules/preprocs/nasm/nasm-pp.c component.
AFFECTED_PRODUCTS:
Yasm Project Yasm
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasm_section_bcs_first function in the libyasm/section.c component.
AFFECTED_PRODUCTS:
Yasm Project Yasm
Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expr_delete_term function in the libyasm/expr.c component.
AFFECTED_PRODUCTS:
Yasm Project Yasm
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_smacro function in the modules/preprocs/nasm/nasm-pp.c component.
AFFECTED_PRODUCTS:
Yasm Project Yasm
Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_directive function in the modules/preprocs/nasm/nasm-pp.c component.
AFFECTED_PRODUCTS:
Yasm Project Yasm
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_destroy function in the msj.c file.
AFFECTED_PRODUCTS:
Cesanta Mjs
An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_stringify function in the msj.c file.
AFFECTED_PRODUCTS:
Cesanta Mjs
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_parse function in the msj.c file.
AFFECTED_PRODUCTS:
Cesanta Mjs
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component.
AFFECTED_PRODUCTS:
Cesanta Mjs
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_getretvalpos function in the msj.c file.
AFFECTED_PRODUCTS:
Cesanta Mjs
In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a
possible way to access adb before SUW completion due to an insecure default
value. This could lead to local escalation of privilege with no additional
execution privileges needed. User interaction is not needed for
...
omniauth-microsoft_graph provides an Omniauth strategy for the Microsoft Graph API. Prior to versions 2.0.0, the implementation did not validate the legitimacy of the `email` attribute of the user nor did it give/document an option to do so, making it susceptible to nOAuth misconfiguration in cases...
AFFECTED_PRODUCTS:
Recognizeapp Omniauth\
Rust EVM is an Ethereum Virtual Machine interpreter. In `rust-evm`, a feature called `record_external_operation` was introduced, allowing library users to record custom gas changes. This feature can have some bogus interactions with the call stack. In particular, during finalization of a `CREATE` or...
AFFECTED_PRODUCTS:
Evm Project Evm
PrestaShop is an open-source e-commerce platform. Prior to version 8.1.3, the isCleanHtml method is not used on this this form, which makes it possible to store a cross-site scripting payload in the database. The impact is low because the HTML is not interpreted in BO, thanks to twig's escape mechan...
AFFECTED_PRODUCTS:
Prestashop Prestashop
A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed to...
AFFECTED_PRODUCTS:
Ssssssss Magic Api
Google Nest WiFi Pro root code-execution & user-data compromise
An issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF.
AFFECTED_PRODUCTS:
Open5Gs Open5gs
An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of Nudm_UECM_Registration response.
AFFECTED_PRODUCTS:
Open5Gs Open5gs
There is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of health data with no additional execution privileges needed.
A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the 'user_id' parameter after the login portal.
AFFECTED_PRODUCTS:
Gilacms Gila Cms
A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the ID parameter after the login portal.
AFFECTED_PRODUCTS:
Gilacms Gila Cms
SQL Injection vulnerability discovered in Gila CMS 1.15.4 and earlier allows a remote attacker to execute arbitrary web scripts via the Area parameter under the Administration>Widget tab after the login portal.
AFFECTED_PRODUCTS:
Gilacms Gila Cms