CVE Vulnerability Catalog

Vulnerability in SourceCodester Hospitals Patient Records Management System 1.0. The file /admin/?page=room_types is vulnerable to XSS via manipulation of the room argument. The attack can be performed remotely.

A business logic error was discovered in songquanpeng one-api up to version 0.6.11-preview.7 in the Redeem function of model/redemption.go. The attack is remote but requires high complexity and is difficult to exploit.

An information disclosure vulnerability was found in JeecgBoot up to version 3.9.2 in the queryPageList function of SysUserController.java. Manipulating the 'salt' argument allows remote unauthorized data access.

A vulnerability in SecureAge CatchPulse up to version 10.9.3. An unknown function in the saappctl.sys library (IOCTL Handler component) leads to information disclosure. Requires local access. The exploit has been publicly disclosed.

A vulnerability in FluentCMS 0.0.5 in an unknown function of file /admin/blocks in the Blocks Plugin component leads to cross-site scripting (XSS). The attack can be initiated remotely. The exploit has been made public.

Vulnerability in the WPvivid Backup & Migration WordPress plugin (up to version 0.9.128) allows an authenticated attacker with Administrator-level access to delete arbitrary directories on the server via the delete_cancel_staging_site() function due to insufficient path validation.

A cross site scripting (XSS) vulnerability has been identified in SourceCodester Ship Ferry Ticket Reservation System version 1.0 in the user management function. Manipulating the 'Username' argument allows for remote exploitation.

7-Zip versions 9.11 through 26.00 contain a heap out-of-bounds read vulnerability in the UDF file identifier descriptor parser. The issue occurs when processing UDF images, potentially leading to information disclosure and application crashes.

Zidentyfikowano słabość w thedotmack claude-mem do wersji 11.0.1. Problem dotyczy funkcji computeObservationContentHash w pliku src/services/sqlite/observations/store.ts, co prowadzi do użycia słabego hasha.

Wykryto podatność w onnx-mlir do wersji 0.5.0.0, dotycząca funkcji generate_hash_key w pliku backend.py. Problem ten prowadzi do użycia słabego hasha, co może być wykorzystane w ataku lokalnym, chociaż jego realizacja jest skomplikowana.

The vulnerability in Samsung Auto prior to versions 3.1.2.61 (Android 15) and 3.2.0.38 (Android 16) is due to improper export of application components. This allows a local attacker to change the audio configuration.

Nieprawidłowy eksport komponentów aplikacji android w ImsSettings przed wydaniem SMR czerwiec 2026 Release 1 umożliwia lokalnym atakującym wywołanie funkcji logowania.

In org.keycloak.services, an administrator with delegated access to read group memberships and users can bypass user profile permissions by accessing the group members endpoint, allowing them to view user attributes that are explicitly denied.

A vulnerability in bytedance InfiniStore up to version 0.2.33. The purge_kv_map function in the /src/infinistore.h library (KV Map Handler component) causes inefficient algorithmic complexity. The attack requires local access. The exploit has been published.

Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass discretionary access control via a crafted HTML page. (Severity: Low)

Google Chrome on Android prior to version 149.0.7827.53 has a vulnerability in CustomTabs due to insufficient policy enforcement. A remote attacker can leak cross-origin data via a crafted HTML page.

Vulnerability in Google Chrome prior to version 149.0.7827.53. Insufficient input validation in WebAuthentication allows an attacker who compromised the renderer process to bypass same origin policy via a crafted HTML page.

Insufficient validation of untrusted input in Loader in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Severity: Low)

In OpenStack Neutron before version 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value starting with "network:". Default port RBAC policies incorrectly included PROJECT_MANAGER without requiring network ownership, allowing any project manager to obtain trusted network-service port behavior on shared networks. Depending on backend and deployment, this can bypass anti-spoofing and security group protections, enabling DHCP, MAC, or IP spoofing against other tenants on the shared network. This is a regression of CVE-2015-5240.

LMCache up to 0.5.4 contains a vulnerability in the hex_hash_to_int16 function in lmcache/integration/vllm/utils.py, involving the use of a weak hash. The attack requires local access and high complexity, and the exploit has been published. A fix is available in version 0.5.5.