CVE Vulnerability Catalog

Cross-site request forgery (CSRF) vulnerability in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote attackers to add and edit publication comments.

Frappe Learning is a learning system that helps users structure their content. In versions prior to 2.38.0, the system did stored the attachments uploaded by the students in their assignments as public files. This issue potentially exposed student-uploaded files to the public. Anyone with the file URL could access these files without authentication.

Astro is a web framework. Prior to version 5.14.2, Astro reflects the value in X-Forwarded-Host in output when using Astro.url without validation, allowing a malicious request to manipulate this value. This could lead to redirection to a malicious site or capture of login credentials, especially in setups with a caching proxy. Version 5.14.2 contains a fix.

A security vulnerability has been detected in PowerJob up to 5.1.2 affecting the /openApi/runJob file of the OpenAPIController component, leading to missing authorization. The attack can be launched remotely and the exploit has been publicly disclosed.

An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code by uploading a crafted file.

A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field. This issue only affects applications using IPv6.

A missing validation check in FreeRTOS-Plus-TCP's IPv6 packet processing code can lead to an out-of-bounds read when receiving an IPv6 packet with incorrect payload lengths in the packet header. This issue only affects applications using IPv6.

A missing validation check in FreeRTOS-Plus-TCP's ICMPv6 packet processing code can lead to an out-of-bounds read when receiving ICMPv6 packets of certain message types which are smaller than the expected size. These issues only affect applications using IPv6.

PowerJob up to 5.1.2 contains a missing authorization vulnerability in the list function of the /user/list file. Manipulation of this function allows unauthorized access to the user list. The attack can be initiated remotely, and the exploit has been publicly disclosed and may be used.

An information disclosure vulnerability in Rack::Sendfile when running behind a proxy that supports x-sendfile headers (e.g., Nginx). Specially crafted x-sendfile-type and x-accel-mapping headers are interpreted as proxy configuration directives, potentially triggering unintended internal requests that bypass proxy-level access restrictions.

A Cross Site Scripting (XSS) vulnerability was found in the Add Room function of Simple Online Hotel Reservation System 1.0. Malicious JavaScript entered in the Description field can leak administrator cookies when viewing room details.

Podatność CVE-2025-8887 w systemie Aybs Interaktif firmy Usta Information Systems Inc. umożliwia obejście autoryzacji poprzez kontrolowany przez użytkownika klucz, co prowadzi do wymuszonego przeglądania, wstrzykiwania parametrów oraz manipulacji danymi wejściowymi. Problem ten występuje od 2024 roku do 28 sierpnia 2025 roku.

Podatność CVE-2025-8886 dotyczy niewłaściwego przypisania uprawnień do krytycznych zasobów w systemie Aybs Interaktif, co prowadzi do możliwości nadużycia uprawnień oraz ominięcia autoryzacji. Problem ten może skutkować ujawnieniem wrażliwych informacji osobom nieuprawnionym.

A cross-site scripting (XSS) vulnerability in the workflow process builder in Liferay Portal and Liferay DXP allows remote authenticated attackers to inject arbitrary web script or HTML via crafted input in a workflow definition.

Stored cross-site scripting (XSS) vulnerability on the Membership page in Account Settings in Liferay Portal and Liferay DXP allows remote authenticated attackers to inject arbitrary web script or HTML via a crafted payload injected into an Account's "Name" text field. The vulnerability affects Portal 7.4.3.21 through 7.4.3.111 and DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 21 through update 92.

Stored cross-site scripting (XSS) vulnerability in Commerce's view order page in Liferay Portal and Liferay DXP allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an Account's "Name" text field. The vulnerability affects Portal 7.4.3.8 through 7.4.3.111 and DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 8 through update 92.

The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Stored Cross-Site Scripting via the 'cs_job_title' parameter in all versions up to and including 7.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Candidate-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to authorization bypass in all versions up to and including 7.6. This is due to insufficient login restrictions on inactive and pending accounts, making it possible for authenticated attackers with Candidate- and Employer-level access and above to log in to the site even if their account is inactive or pending.

The rardecode library (github.com/nwaples/rardecode) versions up to 2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, allowing an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash.

A vulnerability in HCL AION allows bypass of the script allowlist configuration. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks. This issue affects AION: 2.0.