CVE Vulnerability Catalog

Apache HTTP Server versions 2.4.0 through 2.4.67 contain an out-of-bounds read vulnerability in mod_headers and mod_mime when handling multiple response languages. The vulnerability can be exploited remotely.

A mass assignment vulnerability in the tool update endpoint of Flowise allows authenticated users to modify server-controlled properties such as workspaceId, breaking tenant isolation in multi-workspace environments.

In Apache HTTP Server 2.4.67 and earlier, a cross-site scripting (XSS) vulnerability exists in mod_proxy_ftp's HTML directory list generation when listing FTP directory contents via forward or reverse proxy configuration.

A SQL injection vulnerability was detected in designcomputer mysql-mcp-server up to version 0.2.2 in the read_resource function of src/mysql_mcp_server/server.py in the mysql URI Handler component via manipulation of the uri_str argument. The attack can be carried out remotely, and the exploit has been publicly disclosed. The issue is fixed in version 0.3.0.

In the Linux kernel, the custom vblank timer in the DRM vkms driver was replaced with the DRM implementation. The corresponding hrtimer in struct vkms_output was removed, and timeout code is now called via DRM.

OfflineIMAP before version 8.0.3 trusts the server's STARTTLS capability prior to authentication, allowing STRIPTLS/man-in-the-middle attacks. An attacker can hijack the connection and extract account credentials in cleartext.

QloApps through version 1.7.0 contains a stored cross-site scripting vulnerability in the admin file manager. Authenticated administrators can inject malicious JavaScript by uploading crafted SVG files with embedded event handlers such as onload.

In bank-management-system-springboot up to commit 7b9bcc65ad7df3db29af71aed9bb500e5f24d948, a vulnerability exists in TransactionController.java at the Transaction endpoint. Manipulation leads to improper authorization, allowing remote attack. Exploit is publicly available.

A vulnerability in SourceCodester Inventory System 1.0 in the file /Product_Inventory/api/users_handler.php of the Account Creation Handler component allows manipulation of the ROLE argument, leading to improper authorization and remote attack.

SourceCodester Inventory System 1.0 has a cross-site scripting (XSS) vulnerability in /users.php (User Management Page) via the fullname and username parameters. The attack is remotely exploitable and the exploit is publicly available.

UTT HiPER 2610G router up to version 3.0.0-171107 has a buffer overflow in the strcpy function of the file /goform/formNatStaticMap when manipulating the NatBinds argument. The exploit has been made public and could be used.

Stored XSS in service discovery active check output in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 allows an admin to inject malicious HTML/JavaScript into check output.

Improper neutralization of HTML-encoded characters in URL validation in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 allows an authenticated user to bypass URL validation and inject malicious URLs like javascript: URIs, leading to XSS.

Stored XSS in global settings change log in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 allows an admin to store malicious HTML/JavaScript in changelog messages.

Checkmk before version 2.5.0p5 has an incorrect authorization vulnerability in the User Messages dashboard widget. Message-fetching endpoints return the dashboard creator's messages instead of the viewer's, allowing an attacker with a valid public dashboard share token to read the issuer's personal messages.

Stored XSS in URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 allows a user with dashboard editing permissions to store a URL with a dangerous URI scheme like javascript:.

In SourceCodester Barangay Resident Profiling and Information Management System 1.0, a vulnerability involving a hard-coded password was found. An attacker can remotely manipulate the new_password argument in passsword_reset.php, leading to use of a default password. The exploit is publicly available.

SQL injection vulnerability in /addpatient.php of itsourcecode Hospital Management System 1.0 via the admissiontme argument allows remote SQL injection.

SQL injection vulnerability in /adminaccount.php of itsourcecode Hospital Management System 1.0 via the Date argument allows remote SQL injection.

In Hospital Management System 1.0 by itsourcecode, an XSS vulnerability exists in /billing.php via manipulation of the patientid argument. The attack can be performed remotely, and exploit is publicly available.