Archive
1 April 2024
Vulnerabilities first published on this day (UTC), newest first.
38 results · Clear filters · Feed
-
Medium 5.4
SourceCodester Computer Laboratory Management System save_users improper authorization
A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function save_users of the file /classes/Users.php?f=save. The manipulation of the argument id leads t…
-
Medium 4.5
Database Credential Exposure in the Logs
System->Maintenance-> Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment. OWAS…
-
Medium 4.5
In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is and always has been an A…
-
Medium 6.5
Cross-Site Request Forgery (CSRF) Vulnerability in mudler/localai
A Cross-Site Request Forgery (CSRF) vulnerability exists in the mudler/localai application, allowing attackers to craft malicious webpages that, when visited by a victim, perform unauthorized actions on the victim's local LocalAI instance without their consen…
-
Medium 6.2
Username Enumeration in CasaOS via bypass of CVE-2024-24766
Go package IceWhaleTech/CasaOS-UserService provides user management functionalities to CasaOS. The Casa OS Login page has disclosed the username enumeration vulnerability in the login page which was patched in version 0.4.7. This issue in CVE-2024-28232 has b…
-
Medium 6.3
SourceCodester Computer Laboratory Management System sql injection
A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=save_category. The manipulation of the argument id leads to sql …
-
Medium 6.3
SourceCodester Image Accordion Gallery App add-image.php unrestricted upload
A vulnerability was found in SourceCodester Image Accordion Gallery App 1.0. It has been classified as critical. This affects an unknown part of the file /endpoint/add-image.php. The manipulation of the argument image_name leads to unrestricted upload. It is …
-
Medium 6.6
Buffer copy without checking size of input (Classic buffer overflow) in HLOS
Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled.
-
Medium 5.5
Improper Validation of Array Index in Audio
Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.
-
Medium 6.4
WordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.7.
-
Medium 5.7
Insecure Data Storage leading to sensitive Information disclosure.
Hard-coded Credentials in CoolKit eWeLlink app are before 5.4.x on Android and IOS allows local attacker to unauthorized access to sensitive data via Decryption algorithm and key obtained after decompiling app
-
Medium 6.5
NUUO NVRmini 2 deletefile.php path traversal
A vulnerability, which was classified as critical, was found in NUUO NVRmini 2 up to 3.0.8. Affected is an unknown function of the file /deletefile.php. The manipulation of the argument filename leads to path traversal. It is possible to launch the attack rem…
-
Medium 6.1
WooCommerce Product Filter < 1.4.4 - Admin+ Stored XSS
Themify WordPress plugin before 1.4.4 does not sanitise and escape some of its Filters settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for ex…
-
Medium 4.8
WooCommerce Product Filter < 1.4.4 - Reflected XSS
Themify WordPress plugin before 1.4.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
-
Medium 5.3
Hubbub Lite < 1.33.1 - Unauthenticated Password Protected Posts Access
The Hubbub Lite WordPress plugin before 1.33.1 does not ensure that user have access to password protected post before displaying its content in a meta tag.
-
Medium 4.7
WooCommerce Product Filter < 1.4.4 - Filter Deletion via CSRF
Themify WordPress plugin before 1.4.4 does not have CSRF check in its bulk action, which could allow attackers to make logged in users delete arbitrary filters via CSRF attack, granted they know the related filter slugs
-
Medium 6.3
In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local informati…
-
Medium 6.6
In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation…
-
Medium 4.4
In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local informatio…
-
Medium 4.4
In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local informatio…
-
Medium 4.4
In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local informatio…
-
Medium 6.2
In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local informatio…
-
Medium 5.4
In battery, there is a possible out of bounds read due to an integer overflow. This could lead to local information dis…
-
Medium 6.6
In battery, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation…
-
Medium 6.6
In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr…
-
Medium 6.6
In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr…
-
Medium 6.6
In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr…
-
Medium 4.4
In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl…
-
Medium 6.1
'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109.0 contain a cross-sit…
-
Medium 4.3
Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input…
-
Medium 4.1
An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter.
-
Medium 6.8
JJWT (aka Java JWT) through 0.12.5 ignores certain characters and thus a user might falsely conclude that they have a s…
-
Medium 6.3
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupTimePolicy.php.
-
Medium 6.3
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php.
-
Medium 5.3
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsec_guide_1.php.
-
Medium 5.4
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php.
-
Medium 5.1
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php.
-
Medium 4.7
WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer.