CVE Vulnerability Catalog

The authentication endpoint accepts user-supplied input without enforcing expected validation constraints, leading to lack of proper output encoding. This allows injection of malicious JavaScript payloads, enabling reflected cross-site scripting. An attacker can redirect the browser to a malicious website, modify the UI, or retrieve information, but session hijacking is not possible due to httpOnly flag on session cookies.

Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of a specific application.

Dell Disk Library for Mainframe (versions DLm 8700/2700) contains a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability.

Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

In elie mcp-project 0.1.0, the search_papers function in research_server.py is vulnerable to path traversal via the topic argument. Local access required, exploit public.

A vulnerability was found in Grav CMS up to version 1.7.49.5/2.0.0-beta.1 in the FileCache::doGet function of the Cache Value Handler component, leading to deserialization. The attack can be launched remotely but requires high complexity and is difficult to exploit. The exploit has been made public. Upgrading to version 2.0.0-beta.2 addresses the issue.

Vulnerability in Xuxueli xxl-job up to 3.3.2 affects an unknown function in OpenApiController.java (OpenAPI Endpoint component). Manipulation of the default_token argument leads to use of a hard-coded cryptographic key. Remote attack is possible but difficult due to high complexity.

A weakness in Xuxueli xxl-job up to 3.3.2 in the triggerJob function in XxlJobServiceImpl.java allows manipulation of the addressList argument, leading to server-side request forgery (SSRF). The attack can be performed remotely and the exploit is publicly available.

A reflected Cross-Site Scripting (XSS) vulnerability was found in the School Management System by mahmoudai1. An unauthenticated remote attacker can execute arbitrary JavaScript in a victim's browser via the unsanitized type parameter in register.php.

In Elastic Package Registry, a vulnerability exists due to improper verification of cryptographic signature (CWE-347). An attacker positioned to intercept network traffic or influence contents served to a self-hosted registry can substitute a tampered package without integrity check failing.

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0 in the delete_category function of /admin/ajax.php?action=delete_category. Manipulating the ID argument results in SQL injection. The attack can be launched remotely and the exploit is publicly available.

A vulnerability in GRASSMARLIN v3.2.1 allows crafted session data to trigger improper handling of XML input, which may result in unintended exposure of sensitive information. The flaw stems from insufficient hardening of the XML parsing process.

In the GNU C Library (glibc) versions 2.0.1 through 2.43, a vulnerability exists in the deprecated functions ns_printrrf, ns_printrr, and fp_nquery. These functions fail to validate RDATA content against RDATA length in DNS responses for A6, CERT, LOC, TKEY, or TSIG records, potentially allowing an attacker to craft a DNS response causing application crash or uninitialized memory read.

A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another from logging in by triggering an account lockout via a specially crafted request. This can lead to denial of access for the victim.

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful exploit may lead to information disclosure.

NVIDIA Flare SDK contains a vulnerability where an attacker may cause Improper Input Validation by path traversing. A successful exploit may lead to information disclosure.

An insecure deserialization vulnerability was discovered in Cista v0.15 and below. Under certain conditions, it may leak stack/heap addresses, allowing bypass of ASLR protection.

A security flaw was discovered in SourceCodester Pharmacy Sales and Inventory System 1.0 in the save_expired function of the file /ajax.php?action=save_expired. Manipulation of the ID argument results in SQL injection. The attack can be launched remotely and the exploit has been publicly released.

A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0 in the delete_expired function of /ajax.php?action=delete_expired. Manipulating the ID argument leads to SQL injection. The attack can be initiated remotely and the exploit is publicly available.

In Spring gRPC 1.0.0 through 1.0.2, when an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker thread. A subsequent unauthenticated request on the same thread may inherit this identity and gain escalated permissions.