CVE Vulnerability Catalog

An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the 'Is visible for customer' flag and prevent users from disabling it via the UI. This leads to unintended exposure of internal ticket information to the External Frontend.

A heap-based buffer overflow vulnerability was discovered in DCMTK 3.7.0 in the function DcmQueryRetrieveIndexDatabaseHandle::deleteOldestImages in file dcmqrdb/libsrc/dcmqrdbi.cc. Remote attack is possible. A patch is available with ID 0f78a4ef6f645ea5530166e445e5436a5de58e75.

A vulnerability was found in OFCMS up to version 1.1.3 in the file ComnController.java. The Query function with argument system.user.query allows SQL injection. The attack can be performed remotely and the exploit has been published.

A vulnerability was found in Tenda W12 3.0.0.7(4763). It affects the cgiSysWebTimeoutSet function in the file /bin/httpd of the Web Management Interface component. Manipulating the web_over_time argument results in denial of service. The attack can be launched remotely. The exploit has been made public.

TRENDnet TEW-432BRP router version 3.10B20 has a command injection vulnerability in the formWlanSetup function. Manipulating the enrollee argument allows remote command execution. The product has been EOL for 15 years and no patch will be released.

TRENDnet TEW-432BRP router version 3.10B20 has a command injection vulnerability in the formSysCmd function. Manipulating the sysCmd argument allows remote command execution. The product has been EOL for 15 years and no patch will be released.

Vulnerability in Aider (Aider-AI) version 0.86.3 allows SSRF (Server-Side Request Forgery) through manipulation in the requests.get function of the api_docs.py file, affecting the AWS EC2 Metadata Endpoint component.

A vulnerability was found in Aider 0.86.3 by Aider-AI in the Code Generation Workflow component. An unknown functionality allows SQL injection. The attack can be performed remotely and the exploit has been published.

Aider-AI Aider 0.86.3 has a vulnerability in the Architect Mode component, in file auth.py, function editor_coder.run. Manipulation leads to code injection. The attack can be performed remotely. The exploit has been published and may be used. The project was informed but has not responded.

A vulnerability was identified in Aider version 0.86.3 in an unknown function of file aider/args.py in the Pre-commit Hook Handler component. Manipulation of the argument git-commit-verify leads to protection mechanism failure. The attack may be launched remotely, and the exploit is publicly available. The project was informed but did not respond.

A weakness has been identified in Orthanc Explorer 2 up to version 1.12.0. An unknown function in WebApplication/src/components/StudyList.vue of the URL Handler component is vulnerable to cross site scripting via the remote-source argument. The attack can be initiated remotely and the exploit is public.

Vulnerability in Bdtask Multi-Store Inventory Management System 1.0 allows unrestricted file upload by manipulating the module argument in the Upload function of the file application/modules/dashboard/controllers/Module.php.

Vulnerability in code-projects Online Music Site 1.0 allows SQL Injection by manipulating the ID argument in the file /Administrator/PHP/AdminUpdateAlbum.php.

Code-projects Visitor Management System 1.0 has an SQL injection vulnerability in file /vms/php/phone_0.php via the phone argument. The attack can be performed remotely. The exploit has been published and may be used.

OUSL-GROUP-BrinaryBrains School Student Management System up to commit 1e70e5ad1125b86dca4ee086eb6bb121f17708b6 has a vulnerability in the marks function of file application/controllers/Parents.php. Manipulation of the param1 argument leads to improper control of resource identifiers. The attack can be performed remotely. The exploit has been published. The project has not responded.

A vulnerability in the Advanced Custom Fields (ACF) plugin for WordPress (up to version 6.8.1) allows authorization bypass. Unauthenticated attackers can overwrite the post_title and post_content of any post bound to a publicly accessible acf_form() instance by injecting values into the _post_title and _post_content parameters of a form submission request.

Edimax BR-6478AC router version 1.23 has a command injection vulnerability in the formWlbasic function. Manipulating the rootAPmac argument allows remote command execution. The exploit is public.

In Open5GS up to version 2.7.7, the handle_amf_info function in the /lib/sbi/nnrf-handler.c library of the nf-instances Endpoint component allows resource consumption via manipulation of the nf_info_pool argument. The attack is remotely exploitable and the exploit is publicly available.

Vulnerability in Bdtask Multi-Store Inventory Management System 1.0 allows SQL Injection by manipulating the dtpToDate argument in the accounts_report_search function of the file application/modules/accounts/controllers/Accounts.php.

Dolibarr ERP CRM versions 23.0.0, 23.0.1, and 23.0.2 have a vulnerability in an unknown function in htdocs/user/messaging.php, where manipulation of the ID argument leads to authorization bypass. The attack can be executed remotely. The fix is available in version 23.0.3.