CVE Catalog

A critical vulnerability allowing authentication bypass has been identified in the D-Link DHP-W310AV model 1.04. This issue arises from an unknown code manipulation that enables spoofing attacks, allowing unauthorized access to the device. The vulnerability can be exploited remotely without any authentication requirements.

A vulnerability in the WP All Export Pro plugin for WordPress, present in all versions through 1.9.1, allows for unauthorized data modification that could lead to privilege escalation. This issue arises from inadequate validation and sanitization of user input, enabling authenticated attackers with Shop Manager-level access or higher to alter arbitrary options on the WordPress site. Exploitation of this vulnerability could involve changing the default registration role to administrator and activating user registration, thereby granting administrative access to the attacker on the compromised site.

A vulnerability allowing improper access control has been identified in several models of the Welch Allyn ELI Resting Electrocardiograph series. This vulnerability may lead to privilege escalation by allowing unauthorized access to certain functions or data. The issue affects the ELI 380, ELI 280/BUR280/MLBUR 280, ELI 250c/BUR 250c, and ELI 150c/BUR 150c/MLBUR 150c models, with various versions prior to the ones specified in the mitigation section.

A vulnerability allowing authentication abuse through hard-coded passwords has been identified in several models of the Baxter Hillrom ELI Resting Electrocardiographs. This issue affects the ELI 380, ELI 280/BUR280/MLBUR 280, ELI 250c/BUR 250c, and ELI 150c/BUR 150c/MLBUR 150c models, with varying version vulnerabilities. The hard-coded passwords could be exploited to bypass authentication mechanisms, potentially leading to unauthorized access or manipulation of device functions.

A PHP Object Injection vulnerability has been identified in the WP All Import Pro plugin for WordPress, affecting all versions through 4.9.7. The vulnerability arises from the deserialization of untrusted input from import files, allowing authenticated attackers with Administrator-level access to inject PHP objects. While the vulnerable software does not have a known proof-of-concept chain, the presence of such a chain through an additional plugin or theme could enable the attacker to delete arbitrary files, access sensitive data, or execute code.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WP All Import Pro plugin for WordPress, affecting all versions through 4.9.7. The issue arises from inadequate nonce validation in the delete_and_edit function, enabling unauthenticated attackers to delete imported content such as posts, comments, and users. This exploitation requires tricking a site administrator into clicking a link that initiates the deletion.

A remote code execution vulnerability exists in the WP All Export Pro plugin for WordPress, affecting all versions through 1.9.1. The issue arises from inadequate input validation and sanitization of user-supplied data in custom export fields. This vulnerability allows unauthenticated attackers to inject arbitrary PHP code into form fields, which is executed on the server during the export process, potentially compromising the entire site. The vulnerability requires the custom export field to include user-supplied data.

A vulnerability in DataEase version 1 allows attackers to execute arbitrary code by exploiting the user account and password components.

A vulnerability in Gleamtech FileVista version 9.2.0.0 allows remote attackers to bypass authentication and gain unauthorized access to sensitive image files. This issue arises from inadequate validation of authentication tokens on the server side, enabling attackers to remove authentication-related HTTP headers, such as the Cookie header, and access files without proper login credentials.

A directory traversal vulnerability has been identified in Gleamtech FileVista version 9.2.0.0. This vulnerability allows remote attackers to execute code, disclose information, and escalate privileges by injecting malicious payloads into HTTP requests. The exploitation involves manipulating file paths to bypass access controls and upload harmful files.

A local file inclusion vulnerability has been identified in DHTMLX File Explorer version 8.4.6. This vulnerability allows remote attackers to access sensitive information by exploiting the file download functionality. The issue arises from improper handling of file paths, which can be manipulated to traverse directories and access restricted files, such as the passwd file on Unix-based systems.

A directory traversal vulnerability has been identified in dhtmlxFileExplorer version 8.4.6. This vulnerability allows remote attackers to access sensitive information by exploiting the File Listing function. The issue arises from improper validation of file paths, enabling unauthorized access to system files through path traversal attacks.

A vulnerability exists in AudioCodes Mediant Session Border Controllers (SBCs) prior to version 7.40A.501.841, due to inadequate password obfuscation that allows for decryption of passwords from configuration exports. This issue was identified by reverse engineering the main application binary, which revealed that the encryption relied on simple XOR operations with a dynamically generated, password-based key.

A path traversal vulnerability has been identified in AudioCodes One Voice Operations Center (OVOC) versions prior to 8.4.582. This vulnerability allows for the unauthorized reading of sensitive data. The issue arises in the PHP application at the web path '/ipp/admin/AudioCodes_files/ipp_params.php', where the 'name' GET parameter can be manipulated to access files with a '.csv' extension. Exploiting this vulnerability could lead to the exposure of sensitive information, such as encrypted passwords of assigned devices, including Session Border Controllers, which could be decrypted to gain administrative rights on those devices.

A cross-site scripting (XSS) vulnerability has been identified in AudioCodes One Voice Operations Center (OVOC) versions prior to 8.4.582. The issue arises from improper input sanitization via the devices' API, allowing attackers to inject malicious JavaScript that targets logged-in administrator sessions. This vulnerability can be exploited by sending an 'Init' request to the API, where the injected script is executed when the devices' manager landing page is accessed.

A vulnerability exists in AudioCodes One Voice Operations Center (OVOC) versions prior to 8.4.582) that allows an attacker to decrypt sensitive information, including passwords, from the topology file. This issue arises from the use of a hard-coded cryptographic key, which is static, weak, and easily guessable. The vulnerability was discovered by reverse engineering the OVOC server, where the class responsible for the decryption was identified. The decrypted passwords can include administrative credentials for assigned devices, such as Session Border Controllers.

A DLL hijacking vulnerability has been identified in Tally Prime Edit Log version 2.1, specifically within the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code by uploading a crafted DLL. The issue arises because TextShaping.dll is absent from the installed path of Easy Chat Server, enabling the execution of malicious code or the establishment of persistence on the victim's machine.

A null pointer dereference vulnerability has been identified in the D-Link DIR-823X router, specifically in the 240126 and 240802 firmware versions. The issue arises in the 'set_wifi_blacklists' function within the '/goform/set_wifi_blacklists' file, part of the HTTP POST request handler. The vulnerability is triggered by manipulating the 'macList' parameter, leading to a crash as the application attempts to dereference a null pointer. This vulnerability can be exploited remotely, and a public proof-of-concept exploit is available.

A buffer overflow vulnerability has been identified in the NEXTU FLETA AX1500 WiFi6 router, specifically in version 1.0.3. The issue arises in the router's web management interface, where the Boa web server improperly handles the length of QoS rule names. This flaw allows attackers to exploit the vulnerability by sending a crafted POST request, leading to a stack buffer overflow. As a result, the vulnerability can cause a denial-of-service condition or potentially allow for arbitrary code execution.

A cross-site scripting (XSS) vulnerability has been identified in the gitlab-web-ide-vscode-fork component, distributed via CDN. This issue affects all versions prior to 1.89.1-1.0.0-dev-20241118094343. The vulnerability is present in all versions of GitLab CE/EE from 15.11 up to 17.3, and it temporarily impacted versions 17.4, 17.5, and 17.6. The XSS attack vector is triggered when .ipynb files are loaded in the web IDE.

A vulnerability exists in Janto versions prior to r12, related to insufficient verification of data authenticity. This flaw enables an unauthenticated attacker to alter the content of emails that are sent for password reset purposes. The exploitation involves sending a POST request with injected malicious content into the 'Xml' parameter, directed at the '/public/cgi/Gateway.php' endpoint.

A vulnerability allowing password changes without current password verification exists in Janto versions prior to r12. This issue could enable an unauthenticated attacker to change another user's password by sending a specific POST request to the '/public/cgi/Gateway.php' endpoint.

A cross-protocol scripting vulnerability exists in Apache Kvrocks versions prior to 2.11.0. The issue arises because Kvrocks does not validate the presence of 'Host:' or 'POST' in RESP requests. This oversight allows a legitimate HTTP request to be interpreted as a valid RESP request, potentially triggering harmful database operations. This vulnerability could be particularly dangerous when combined with server-side request forgery (SSRF) attacks.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress BookPress – For Book Authors plugin, affecting versions through 1.2.7. This vulnerability allows for Cross-Site Scripting (XSS) attacks, where an attacker could inject malicious scripts that are executed in the context of the user's browser.

A missing authorization vulnerability has been identified in the WordPress BookPress – For Book Authors plugin, specifically in versions through 1.2.7. This vulnerability allows unauthorized users to exploit improperly configured access control security levels, potentially leading to unauthorized actions or access.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress InLocation plugin, affecting versions through 1.8. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where malicious scripts can be injected and executed.

A path traversal vulnerability has been identified in the WordPress Plugin A/B Image Optimizer, affecting versions through 3.3. This vulnerability allows arbitrary file download, enabling attackers to download any file from the affected website, including sensitive files such as login credentials or backup files.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Style Tweaker plugin, specifically in versions through 0.11. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks. The issue arises from the plugin's failure to properly validate requests, enabling attackers to trick users with higher privileges into performing actions that could inject malicious scripts, which are then stored and executed later.

A stored cross-site scripting vulnerability has been identified in the WordPress WP Doodlez plugin, affecting versions through 1.0.10. This vulnerability arises from improper input sanitization during web page generation, allowing malicious scripts to be injected and executed when users visit the affected site.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Quote Comments plugin, specifically in versions through 3.0.0. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where malicious scripts can be injected and executed.

A path traversal vulnerability has been identified in the WordPress Music Sheet Viewer plugin, specifically in versions through 4.1. This vulnerability allows for arbitrary file download, enabling malicious actors to download any file from the affected website, including sensitive files such as those containing login credentials or backups.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Custom Comment Notifications plugin, specifically in versions through 1.0.8. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where malicious scripts can be injected and executed within the context of the user's browser.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Simple Auto Tag plugin, affecting versions through 1.1. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks. The issue arises from the plugin's insufficient protection against CSRF, which could enable attackers to manipulate actions on behalf of users with higher privileges.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Smart DoFollow plugin, specifically in versions through 1.0.2. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where a malicious actor could potentially inject harmful scripts that are executed when a user interacts with the affected site.

A SQL injection vulnerability has been identified in the WordPress uListing plugin, affecting versions through 2.1.6. This vulnerability allows for improper neutralization of special elements used in SQL commands, potentially enabling malicious actors to interact with the database and steal information.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Login Box plugin, specifically in versions through 2.0.4. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where malicious scripts can be injected and executed.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Read More Copy Link plugin, specifically in versions through 1.0.2. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks. The issue arises from the plugin's failure to properly validate requests, enabling attackers to trick users with higher privileges into performing actions that could inject malicious scripts, which are then stored and executed later.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Auto SEO plugin, specifically in versions through 2.5.6. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where malicious scripts can be injected and executed.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WordPress Songkick Concerts and Festivals plugin, affecting versions through 0.9.7. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WordPress Infusionsoft Analytics plugin, affecting versions 2.0 and prior. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A stored cross-site scripting vulnerability has been identified in the Theasys WordPress plugin, affecting versions through 1.0.1. This vulnerability arises from improper input neutralization during web page generation, allowing malicious actors to inject harmful scripts that are executed in the context of the user.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WordPress GlobalQuran plugin, specifically in versions through 1.0. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A local file inclusion vulnerability has been identified in the Zankover Fami Sales Popup WordPress plugin, affecting versions through 2.0.0. This vulnerability arises from improper control of filenames in include or require statements, allowing PHP local file inclusion.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Simple User Profile plugin, affecting versions through 1.9. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks. The issue arises because the plugin does not properly validate requests, enabling attackers to trick users with higher privileges into performing actions that could inject malicious scripts into the user profile.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Cynob IT Consultancy WP Custom Post RSS Feed plugin, affecting versions through 1.0.0. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where an attacker can inject malicious scripts that are executed by users.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Rishi On Page SEO + Whatsapp Chat Button plugin for WordPress, affecting versions through 2.0.0. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where an attacker can inject malicious scripts that are executed by users.

A stored cross-site scripting vulnerability has been identified in the WordPress Optimate Ads plugin, affecting versions through 1.0.3. This issue allows attackers to inject malicious scripts that are executed when users visit the affected site.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress plugin 'Custom Links On Admin Dashboard Toolbar', affecting versions through 3.3. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks. The issue arises because the plugin does not properly validate requests, enabling attackers to trick users with higher privileges into performing actions that could inject malicious scripts, which are then stored and executed later.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Facilita Form Tracker plugin, affecting versions through 1.0. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks. The issue arises because the plugin does not properly validate requests, enabling attackers to trick users with higher privileges into performing actions that could introduce malicious scripts that are permanently stored and executed later.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress ZMSEO plugin, specifically in versions through 1.14.1. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where malicious scripts can be injected and executed.