CVE Vulnerability Catalog

The fix for CVE-2025-68161 in Apache Log4j Core was incomplete: it addressed hostname verification only via the log4j2.sslVerifyHostName system property, not via the verifyHostName attribute of the <Ssl> element. This attribute was silently ignored in all versions through 2.25.3, leaving TLS connections vulnerable to interception.

HDF5 is software for managing data. In 1.14.1-2 and earlier, an attacker who can control an h5 file parsed by HDF5 can trigger a write-based heap buffer overflow condition in the H5T__ref_mem_setnull method. This can lead to a denial-of-service condition, and potentially further issues such as remote code execution depending on the practical exploitability of the heap overflow against modern operating systems.

Canonical Juju 4.0.5, 3.6.20, and 2.9.56 have improper synchronization of the userTokens map in the API server. This may allow an authenticated user to cause a denial of service or reuse a single-use discharge token.

W podatności CVE-2021-47960 w kliencie Synology SSL VPN przed wersją 1.4.5-0684, zewnętrzni napastnicy mogą uzyskać dostęp do plików w katalogu instalacyjnym poprzez lokalny serwer HTTP związany z interfejsem loopback. Wykorzystując interakcję użytkownika z przygotowaną stroną internetową, napastnicy mogą uzyskać wrażliwe pliki, takie jak pliki konfiguracyjne, certyfikaty i logi.

Checkmk versions <2.5.0b4, <2.4.0p26, and <2.3.0p47 contain a Livestatus injection on the prediction graph page. An authenticated user can inject arbitrary Livestatus commands via a crafted service name parameter due to insufficient sanitization of the service description value.

Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insufficient input sanitization in search filter plugins.

In code-projects Vehicle Showroom Management System 1.0, in /BranchManagement/ServiceAndSalesReport.php, manipulation of the BRANCH_ID argument leads to cross-site scripting. The attack is remotely exploitable, and the exploit has been publicly disclosed and may be used.

A vulnerability was found in code-projects Vehicle Showroom Management System 1.0 in the file /BranchManagement/ProfitAndLossReport.php. Manipulating the BRANCH_ID argument leads to cross-site scripting. The attack can be launched remotely and a public exploit is available.

A vulnerability was found in CodeAstro Online Classroom 1.0 in /updatedetailsfromstudent.php. Manipulating the fname argument leads to SQL injection. The attack can be performed remotely and a public exploit exists.

In code-projects Simple Laundry System 1.0, manipulation of the serviceId argument in /checkcheckout.php results in cross-site scripting (XSS). The attack can be carried out remotely and the exploit has been publicly disclosed.

W Notepad++ w wersji 8.9.3 występuje podatność na przepełnienie bufora stosu w komponencie obsługi przeciągania i upuszczania plików. Problem występuje, gdy użytkownik przeciąga i upuszcza ścieżkę katalogu o dokładnie 259 znakach bez końcowego ukośnika, co prowadzi do przepełnienia bufora i awarii aplikacji.

OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS) vulnerability in the console because document.write is used unsafely. This is relevant when administrators use the console web interface to view instance console logs.

A vulnerability was found in itsourcecode Construction Management System 1.0 in an unknown function of /del1.php. Manipulation of the 'toolname' argument causes SQL injection. Remote exploitation is possible, and the exploit has been published and may be used.

The YML for Yandex Market WordPress plugin before 5.0.26 is vulnerable to Remote Code Execution via the feed generation process.

The installer certificate files in the …/bootstrap/common/ssl folder on Windows systems do not have restricted permissions, allowing users to read and execute. In particular, the client.key file could lead to exploits as it exposes agent identity material to any locally authenticated standard user.

A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php. Affected by this vulnerability is an unknown functionality of the file /OnlineClassroom/takeassessment2.php?exid=14. Performing a manipulation of the argument Q1 results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /del.php. The manipulation of the argument equipname results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

A vulnerability has been found in code-projects Patient Record Management System 1.0. The impacted element is an unknown function of the file /edit_hpatient.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A flaw has been found in code-projects Patient Record Management System 1.0. The affected element is an unknown function of the file /hematology_print.php. Executing a manipulation of the argument hem_id can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.

A vulnerability was found in code-projects Online Library Management System 1.0 affecting /sql/library.sql of the SQL Database Backup File Handler component. Manipulation leads to information disclosure, the attack can be initiated remotely, and the exploit is publicly available.