CVE Vulnerability Catalog

Note Mark is an open-source note-taking application. Prior to version 0.19.3, after a note-mark owner soft-deletes a public book, its notes and uploaded assets stay readable at /api/notes/{id}, /api/notes/{id}/content, the slug URL, and the asset endpoints. Unauthenticated callers who hold the note ID or the slug path retain access. GORM's soft-delete scope does not reach the raw "JOIN books ..." clauses used by the note and asset queries.

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, there is an arbitrary file write vulnerability via `save_generated_slides`. This issue has been patched via commit 418491a.

PPTAgent, a framework for reflective PowerPoint generation, is vulnerable to arbitrary file write and directory creation via markdown_table_to_image. The issue has been patched in commit 418491a.

In Evolver prior to version 1.69.3, a prototype pollution vulnerability in the mailbox store module allows attackers to modify the behavior of all JavaScript objects by injecting malicious properties into Object.prototype. The _applyUpdate() and _updateRecord() functions use Object.assign() to merge user-controlled data without filtering dangerous keys like __proto__, constructor, or prototype.

A memory corruption vulnerability occurs while processing an IOCTL command when the device is in a power-save state.

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

A memory corruption vulnerability occurs when the size of a previously allocated buffer is dynamically changed while its contents are being modified. This can lead to undefined behavior or corruption of data in memory.

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

Transient DOS when processing target power rate tables during channel configuration.

A denial of service vulnerability was found in Assimp v.6.0.2 in the ParseVectorDataArray() function within FBXParser.cpp. A remote attacker can exploit this by sending specially crafted data, causing the application to crash.

ILM Informatique jOpenDocument has an improper restriction of XML external entity reference vulnerability that allows a Data Serialization External Entities Blowup. The issue affects jOpenDocument version 1.5.

A plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows retrieval of embedded sensitive data. This issue affects OpenConcerto 1.7.5.

Podatność na dzielenie odpowiedzi HTTP występuje w wielu modułach serwera Apache HTTP z niezaufanymi lub skompromitowanymi serwerami zaplecza. Problem dotyczy wersji serwera Apache HTTP od 2.4 do 2.4.66.

W Apache HTTP Server w wersji 2.4.66 i wcześniejszych występuje dereferencja wskaźnika NULL w mod_authn_socache, co pozwala nieautoryzowanemu zdalnemu użytkownikowi na awarię procesu potomnego w konfiguracji proxy z pamięcią podręczną.

Atak czasowy na mod_auth_digest w Apache HTTP Server 2.4.66 umożliwia zdalnemu atakującemu ominięcie uwierzytelniania Digest. Problem ten został naprawiony w wersji 2.4.67.

A vulnerability in Assimp v.6.0.2 allows a remote attacker to cause a denial of service (DoS) by exploiting an issue in FBXConverter.cpp, specifically in the FBXConverter::ConvertMeshMultiMaterial() function.

A denial of service vulnerability has been discovered in Assimp version 6.0.2. The issue resides in FBXMeshGeometry.cpp within the MeshGeometry::MeshGeometry() function. A remote attacker can exploit this flaw to cause a denial of service.

W Apache HTTP Server występuje podatność związana z niewłaściwym zakończeniem null oraz odczytem poza zakresem. Problem ten dotyczy wersji do 2.4.66.

Podatność typu Out-of-bounds Read w mod_proxy_ajp serwera Apache HTTP. Problem ten dotyczy wersji serwera Apache HTTP do 2.4.66.

A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0, affecting an unknown function of the /product_expiry/edit-admin.php file. Manipulation of the ID argument leads to SQL injection, and the attack can be launched remotely. The exploit is publicly available and might be used.