CVE Vulnerability Catalog

The elixir-mint library has an Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling) vulnerability. A malicious HTTP/1 server can desynchronize an intermediary and the Mint client on a pooled connection, poisoning responses to subsequent requests that share the connection.

A vulnerability in the mint library (Elixir) allows a malicious HTTP/2 server to make the client buffer up to about 16 MiB per connection in frames it should reject, consuming client memory. This occurs because the frame is compared with the maximum size only after the entire declared payload has arrived, leading to excessive memory usage.

A cross-site scripting (XSS) vulnerability in Agentis by Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. is caused by improper neutralization of input during web page generation. It allows XSS targeting HTML attributes.

A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container, transfers the archive, and unpacks it locally; a malicious tar can execute arbitrary code and write files to arbitrary paths on the user's machine.

A vulnerability was identified in Thinkware U3000 up to 1.02.04 in the get_file function of /tmp/wpa_supplicant.conf in the TCP Service component. The manipulation leads to improper access controls, and remote exploitation is possible. The exploit is publicly available and might be used.

A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813, affecting the HTTP Multipart Form-Data Parser component. Performing a manipulation results in denial of service, and the attack can be carried out remotely. The exploit has been released publicly.

Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=com_virtuemart&page=admin.user_list'. Successful exploitation could allow an authenticated attacker to inject malicious code and execute it in users' browsers without their consent.

Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.user_add&user_id=45&option=com_virtuemart'. Successful exploitation could allow an authenticated attacker to inject malicious code and execute it in users' browsers without their consent.

Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the parameter 'vendor_store_name' in the endpoint '/administrator/index.php?pshop_mode=admin&page=store.store_add&option=com_virtuemart&vendor_id=[ID]'. Successful exploitation could allow an authenticated attacker to inject malicious code and execute it in users' browsers without their consent.

A vulnerability in FLB-Music-Player 1.1.8/1.1.9/1.2.0/1.2.1 affects the path.join function in /src/main/core/createParsedTrack.ts. Manipulation leads to path traversal. The attack must be carried out locally, and the exploit has been publicly disclosed.

A flaw in UERANSIM up to 3.3.0 affects the DecodePlainMmMessage function in the library src/lib/nas/encode.cpp of the nr-gnb component. Executing a manipulation leads to an uncaught exception. The attack can be launched remotely, and the exploit has been published.

A vulnerability in XunruiCMS up to 4.7.2 affects the group_all_edit function in dayrui/App/Member/Controllers/Admin/Home.php of the Group Editing component. Manipulation of the groupid argument causes SQL injection. The attack can be carried out remotely, and the exploit has been publicly disclosed.

A denial of service via unsigned underflow in libXpm's write path before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.

An out-of-bounds read in libX11's byte-oriented codeset parser before 1.8.14 could be used by malicious X servers to crash attached X clients.

An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser before 1.8.14 could be used by malicious X servers to crash attached X clients.

An out-of-bounds read vulnerability in libX11's XIM attribute parser before 1.8.14 could be used by malicious X servers to crash attached X clients.

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion before 1.8.4 could be used by malicious X server to crash an attached X client.

Improper neutralization of input in Apache Roller 6.1.5 allows an anonymous remote attacker to store a crafted comment-author URL that can execute script in the session of a weblog moderator or global administrator when the comment management page is viewed. This affects sites that permit comments on at least one weblog and whose moderator subsequently reviews the submitted comment; no non-default server setting is required.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.

Path Traversal vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows an attacker to access files outside the restricted directory. Affects versions from 6.7.141 before 10.0.11.