CVE Vulnerability Catalog

A security flaw was discovered in SourceCodester Online Reviewer Management System 1.0 affecting an unknown function of /reviewer_0/admins/assessments/activities/btn_functions.php?action=update. Manipulating the Title argument results in SQL injection, and the attack may be performed remotely. The exploit has been released to the public and may be used for attacks.

In the vdec component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote privilege escalation with no additional execution privileges needed. User interaction is needed for exploitation.

In the apu module, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.

In the Modem component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote privilege escalation if a UE connects to a rogue base station controlled by the attacker. User interaction is needed, but no additional execution privileges are required.

In the apu component, there is a possible memory corruption due to improper input validation. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.

In the neuropilot component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.

In the neuropilot component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.

In the Video HAL component, there is a possible escalation of privilege due to a missing bounds check. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.

In the Modem component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote privilege escalation if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are needed.

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. A network attacker presenting an invalid certificate once can intercept later automatic update checks, offer a fake version, and execute code as the user upon installation.

Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setConfig bridge. An attacker exploiting a Discord XSS can set additionalArguments to persistently add --proxy-server and --ignore-certificate-errors switches, routing all client traffic through an interception proxy.

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. An attacker running script in the Discord origin, such as through XSS, can abuse themes.folder, themes.uninstall, and themes.install to launch local executables, recursively delete directories, and write files outside the themes directory.

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig lacks certificate-authority-data, ignoring insecure-skip-tls-verify. On-path attackers can impersonate the Kubernetes API server to capture Bearer tokens or Basic credentials and tamper with WebSocket or REST API traffic.

SQL injection vulnerability in SourceCodester Drug Recommendation System 1.0. Affects the file /Auth/add_student.php in the Student Registration component, where manipulation of the cmdschool argument allows SQL injection. The attack can be executed remotely, and the exploit is public.

SQL injection vulnerability in itsourcecode Online Admission System 1.0. Affects the file /login1.php, where manipulation of the User argument leads to SQL injection. The attack can be initiated remotely, and the exploit is public.

Missing authentication in kishor-23 food-waste-management-system. Affects the file admin/signup.php in the Admin Signup component, where manipulation of the sign argument causes missing authentication. The attack can be initiated remotely, and the exploit is public. The project has not responded.

SQL injection vulnerability in kishor-23 food-waste-management-system. Affects the file delivery/delivery.php in the Take Order Handler component, where manipulation of order_id/delivery_person_id arguments leads to SQL injection. The attack can be executed remotely, and the exploit is public. The project has not responded.

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl_verify_peer to FALSE, which is passed to CURLOPT_SSL_VERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests, steal the API key from the query string, and tamper with responses.

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because http_connection in lib/gist.rb sets VERIFY_NONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth tokens and login credentials to read and modify the victim's gists.