Threats affecting pkg:bitnami/powershell

A Missing Authorization vulnerability (CWE-862) exists in Magepeople inc.'s Taxi Booking Manager for WooCommerce (ecab-taxi-booking-manager) up to version 2.1.6. This flaw allows unauthorized users to exploit incorrectly configured access control security levels, potentially leading to unauthorized modification of data or functionality. The vulnerability has a CVSS 3.1 base score of 5.3 (medium severity), indicating limited impact on confidentiality but potential integrity issues. No public exploits or known active exploitation have been reported. No patch or remediation information is currently available.

An insecure permissions vulnerability exists in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730. This flaw allows unauthorized attackers to read flashcards across the user's entire memorization database.

Share 2 Archive Today versionCode 61 has insecure permissions that allow unauthorized attackers to overwrite another user's clipboard content by supplying a crafted URL.

A vulnerability exists in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 that allows attackers to force users to fetch a crafted URL.

An insecure permissions vulnerability in the ContentProvider component of mhss1 MyBrain version 3.1.0 allows unauthorized attackers to read private user data such as notes, tasks, and diary entries.

An insecure permission issue in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to trigger automated actions configured by other users.

A Cross-Site Scripting (XSS) vulnerability exists in the Brave browser's brave-popup-builder component due to improper neutralization of script-related HTML tags. This vulnerability allows code injection. It affects Brave versions up to 0.8.8. The vulnerability has a medium severity with a CVSS score of 5.3. No known exploits in the wild or patches are currently documented.

Ghost Commander File Manager versionCode 479 has insecure permissions that allow unauthorized attackers to arbitrarily read and write files within the application's private storage.

The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed has an insecure access control vulnerability due to an exposed UART debugging interface without authentication or authorization. An attacker with physical access who solders and connects to this interface can gain unauthenticated root shell access to the device.

A stored cross-site scripting (XSS) vulnerability exists in Codection Import and export users and customers import-users-from-csv-with-meta component, affecting versions up to 2.5.9. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker to inject malicious scripts that execute in the context of affected users. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level.

Fossify version 1.3.0 has insecure permissions that allow unauthorized attackers to access and read stored contacts of other users.

A vulnerability in dnsmasq's DHCPv6 client hostname parser allows reading one byte past the end of a crafted FQDN option. This out-of-bounds read occurs because the parser checks the next label length without confirming the pointer remains inside the option. The flaw can be triggered by an attacker on the local network with a single DHCPv6 packet. No crash or data leak has been demonstrated, and the extra byte is not returned or logged.

Simple Contacts Pro versionCode 107 has insecure permissions that allow unauthorized attackers to read and write notes in another user's note database. This vulnerability compromises user data confidentiality and integrity by permitting unauthorized access to personal notes.

A stored cross-site scripting (XSS) vulnerability exists in bPlugins PDF Poster versions up to 2.6.1. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker to inject malicious scripts. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level.

Bander Notepad versionCode 12 has insecure permissions that allow unauthorized attackers to read and write notes in another user's note database. This vulnerability could lead to unauthorized data access and modification within the application.

A vulnerability in dnsmasq occurs when the DHCP leasequery feature is enabled without restricting allowed source addresses. This flaw allows any host on the local network to request DHCP lease records, revealing assigned IP addresses, MAC addresses, hostnames, and lease metadata. The leasequery feature is disabled by default and must be explicitly enabled by an administrator. Red Hat rates this vulnerability as low impact because the exposed data is not highly sensitive and the feature is opt-in.

A missing authorization vulnerability exists in HivePress Claim Listings (hivepress-claim-listings) up to version 1.1.4. This flaw allows attackers with limited privileges to exploit incorrectly configured access control, potentially leading to unauthorized actions. The vulnerability has a CVSS score of 4.3, indicating a medium severity impact primarily on integrity without affecting confidentiality or availability.

An uncaught exception vulnerability exists in llama.cpp versions from b2877 up to but not including b11935 in the ggml-rpc server. This flaw allows unauthenticated remote attackers to crash the rpc-server by sending oversized message lengths after the HELLO handshake, causing a denial of service.

Multiple Pages Generator by Themeisle versions before 4.2.5 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows users with Contributor-level permissions to inject malicious scripts via the [mpg] and [mpg_match] shortcode base-url attribute. The vulnerability arises because entity-encoded payloads bypass kses filtering but are decoded and rendered unescaped in administrator browsers, enabling script execution.

lwIP versions 2.0.0 through 2.2.1, when built with the SNMP agent, have an out-of-bounds read vulnerability in the function snmp_pbuf_stream_writeto(). This flaw occurs because the function bounds copies by pbuf->len instead of the remaining bytes, allowing remote unauthenticated attackers who know the SNMP read community string to send fragmented SNMP requests and receive adjacent memory from the receive buffer or pool in responses.