CVE Vulnerability Catalog

In yangshare warehouseManager 仓库管理系统 1.1.0, the addCustomer function in CustomerManageHandler.java is vulnerable to cross site scripting (XSS) via manipulation of the Name argument. The attack can be executed remotely, and the exploit is publicly available.

Multiple constant-time implementations in wolfSSL before version 5.8.4 may be transformed into non-constant-time binary by LLVM optimizations, which can potentially result in observable timing discrepancies and lead to information disclosure through timing side-channel attacks.

In JetBrains TeamCity before 2025.11, path traversal was possible via file upload.

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata.

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure.

In Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2, opening a malicious PDF containing a crafted JavaScript call to search.query() with a crafted cDIPath parameter (e.g., "/") may cause an out-of-bounds read in internal path-parsing logic, potentially leading to information disclosure or memory corruption.

A vulnerability in baowzh hfly (up to commit 638ff9abe9078bc977c132b37acbe1900b63491c), affecting unknown processing in the file /admin/index.php/advtext/add of the advtext Module. The manipulation results in cross-site scripting (XSS). The attack can be executed remotely. The exploit has been released publicly.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to, under certain conditions, render content in dialogs to other users by injecting malicious HTML content into merge request titles.

The TableProgressTracking MediaWiki extension in versions 1.2.0 and below does not enforce CSRF token validation in the REST API. An attacker could craft a malicious webpage that, when visited by an authenticated user on a wiki with the extension enabled, triggers unintended authenticated actions through the victim's browser. Due to the lack of token validation, an attacker can delete or track progress against tables.

In Canonical's Apport crash reporting tool, process_crash() in data/apport may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account.

Podatność CVE-2025-13127 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w systemie GoldenHorn firmy TAC Information Services. Umożliwia to ataki typu Cross-Site Scripting (XSS).

A flaw was found in Keycloak Admin REST API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/{realm}/roles endpoint.

Mastodon versions 4.2.27 and prior, 4.3.0-beta.1 through 4.3.14, 4.4.0-beta.1 through 4.4.9, 4.5.0-beta.1 through 4.5.2 have discrepancies in error handling that allow checking whether a given status exists by sending a request with a non-English Accept-Language header. An attacker who knows the identifier of a status they are not allowed to see can confirm whether it exists. This cannot be used to learn the contents or any other property besides existence.

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this to bypass cryptographic protections and gain limited unauthorized write access.

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this to gain limited unauthorized write access.

An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, 6.5 all versions, 6.4 all versions, 6.3 all versions may allow an authenticated attacker with at least read-only admin permission to obtain the credentials of other administrators' messaging services via crafted requests.

Fortinet FortiAuthenticator versions 6.6.0 through 6.6.6, and all versions of 6.5, 6.4, 6.3 have a forced browsing vulnerability that allows an authenticated attacker with at least sponsor permissions to read and download device logs via accessing specific endpoints.

The NETGEAR Nighthawk R7000P (end of service) router has an improper input validation vulnerability that allows an authenticated administrator with local network access to execute OS command injections and make unauthorized modifications to the router software.

Android App "Brother iPrint&Scan" versions 6.13.7 and earlier improperly uses an external cache directory. If exploited, application-specific files may be accessed from other malicious applications.