CVE Vulnerability Catalog

In functions of AccessibilityManagerService.java, improper input validation can lead to persistent denial of service. No additional privileges or user interaction are needed.

In isSameApp of NotificationManagerService.java, resource exhaustion can lead to persistent denial of service. No additional privileges or user interaction are needed.

DoS vulnerability in Dräger Infinity Delta, Delta XL, and Kappa patient monitors. A remote attacker can cause the monitor to reboot by sending a malformed network packet. Repeated attacks can disrupt patient monitoring until network connectivity is lost.

ZeusCart 4.0 contains a cross-site request forgery (CSRF) vulnerability that allows attackers to perform unauthorized actions on behalf of victims, such as deactivating customer accounts via the regstatus endpoint with action=deny parameters.

The DeepAI endpoint 'https://api.deepai.org/change_user_email' accepts POST requests without CSRF protection, allowing an attacker to change the victim's email and take over the account.

Nanobot prior to version 0.2.1 has a denial of service vulnerability in the Matrix channel media download handler. Authenticated room members can exhaust process memory and bandwidth by sending media events with missing or invalid size metadata.

Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the web_fetch tool, allowing attackers to reach internal hosts via URL redirection to loopback or private addresses, exploiting automatic HTTP redirect following.

A security flaw in code-projects Hotel and Tourism Reservation System 1.0 in file /ht/tour.php allows cross site scripting via manipulation of arguments name, email, people, number. Remote attack is possible and exploit is public.

CodeAstro Payroll System 1.0 has a SQL Injection vulnerability in an unknown part of /home_employee.php. Manipulation of the emp_id argument allows remote attackers to inject SQL code. The exploit has been published and may be used.

In DevaslanPHP project-management up to 2.0.0-beta1, an improper authorization vulnerability was found in the KanbanScrumHelper::recordUpdated function in app/Helpers/KanbanScrumHelper.php. The attack can be performed remotely. The project has not responded.

In DevaslanPHP project-management up to 2.0.0-beta1, an improper authorization vulnerability was found in the editComment/doDeleteComment functions in app/Filament/Resources/TicketResource/Pages/ViewTicket.php. The attack can be performed remotely. The project has not responded.

Nextcloud Server before versions 31.0.12 and 32.0.3 has a missing check of a relation, allowing authenticated users with access to any file comment to read the content of all comments.

Thor Vector Graphics (ThorVG) before version 1.0.5 has a null pointer dereference vulnerability in SvgLoader::run(). Any caller passing untrusted SVG data to Picture::load() can crash the process with a 6-byte payload.

In Nextcloud Server before versions 32.0.9 and 33.0.3, a pre-2FA session cookie can be reused as a Bearer token to authenticate against DAV endpoints, bypassing mandatory two-factor authentication.

In Nextcloud Server before versions 32.0.9 and 33.0.3, an attacker with knowledge of a user's password can bypass two-factor authentication by extracting a temporary session token and replaying it via HTTP Basic Authentication.

Nextcloud Tables from version 0.8.0 to before 1.0.4 exposes view filter criteria to users with read-only permissions. This issue is patched in versions 1.0.4 and 2.0.0.

Nextcloud from version 4.3.0 to before 5.2.7 allows a removed collaborator to retain unauthorized read access to uploaded respondent files for the affected form. The scope is limited to forms where that user previously had results access.

Nextcloud is an open source content collaboration platform. From versions 5.5.13 to before 5.5.17, and 6.2.0 to before 6.2.3, an authenticated user can enumerate users on the same Nextcloud instance by using the Calendar app's endpoint for suggesting attendees.

In Nextcloud Server before versions 32.0.9 and 33.0.3, sharing a folder or file with a team containing an external member automatically creates a public link that is invisible to the owner and cannot be revoked, granting full permissions.

In Nextcloud from version 1.3.6 to before 8.4.0, an improper check allowed users provided by LDAP to still authenticate via OIDC after being deleted from LDAP.