CVE Vulnerability Catalog

A potential JDBC source configuration validation vulnerability in Apache Kylin. It affects versions 4.0.0 through 5.0.4 and has minor impact unless Kylin backend services are open to the public network.

An SQL Injection vulnerability in Apache Kylin due to improper neutralization of special elements used in SQL commands. It affects versions 4.0.0 through 5.0.4 and has moderate impact in the default query-only mode.

A vulnerability in Apache Kylin involving missing authentication for in-house broadcast and polymorphic deserialization. It affects versions 4.0.0 through 5.0.4 and impacts mainly services directly exposed to the public network.

A vulnerability in Apache Kylin involving missing authorization on JDBC source configuration updates. It affects versions 4.0.0 through 5.0.4 and impacts mainly services directly exposed to the public network.

A Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. It affects versions 4.0.0 through 5.0.4 and impacts mainly the Kylin job service directly exposed to the public network.

A path-confinement bypass vulnerability in Apache Kylin during metadata backup deletion. It affects versions 4.0.0 through 5.0.4 and impacts mainly services directly exposed to the public network.

The Integratec application contains a UNION-based SQL injection vulnerability in the sInfo parameter sent via POST to the endpoint /login/ap_Login.aspx/start. Successful exploitation could allow an attacker to steal data from the database, such as credentials and user information, and cause errors and partial denial-of-service conditions.

MISP versions below 2.5.48 contain a data integrity flaw in event deletion logic where associated records (report tags, graph entries, proposal correlations, ssdeep chunks, attachment scan results) are not removed and remain orphaned. These records may contain sensitive threat intelligence data and could be exposed through other access paths.

In MISP versions below 2.5.48, the event synchronization process contains a logic error in preparing event reports for remote push — filtering of non-exportable tags is applied only once after iterating over all reports rather than to each report. As a result, all reports except the last are pushed with non-exportable tags intact, disclosing restricted information, and when the last report is empty, a null report is pushed causing the remote instance to fail saving the event.

MISP contains an access control flaw in the proposal (shadow attribute) visibility logic. The authorization check accepted any attribute or object carrying one of the user's sharing groups without verifying the distribution level, and denied the owning organisation access to proposals on its own organisation-only attributes. This could lead to unauthorized disclosure of proposed attribute changes.

MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local attacker with write permissions on this file can replace the bin/cygwin1.dll library contained within it with a malicious library. When the victim opens a Local Shell session or uses a Cygwin-based function, the application extracts the component and loads the tampered library, executing code with the victim's permissions.

A security flaw was discovered in DeepPavlov up to 1.7.0 affecting the resolve function in deeppavlov/core/common/params.py within the Config Reference Resolver component. Manipulation leads to code injection, and the attack can be launched remotely. The exploit has been released publicly and the project has not yet responded to the issue report.

A vulnerability was found in SourceCodester Inventory System 1.0 in unknown processing of /api/transactions_handler.php?action=save_sale within the sales management handler component. Manipulating the Hsn_Code argument results in cross-site scripting (XSS), and the attack can be launched remotely.

A vulnerability was found in SourceCodester Inventory System 1.0 in the file /api/transactions_handler.php (action save_purchase) of the Purchase Records Handler. Manipulation of the Product_Name, Product_Code or Vendor_Name arguments leads to cross-site scripting. The attack can be performed remotely and the exploit has been publicly disclosed.

A flaw was found in SourceCodester Inventory System 1.0 in the file /api/products_handler.php (action save) of the Product Management component. Manipulation of the Product_Id or Product_Name arguments can lead to cross-site scripting. The attack can be performed remotely and the exploit has been published.

In openGauss-server, src/common/backend/libpq/hba.cpp contains an access control bypass in replication connection authentication. hba_getauthmethod() for HADR/SW replication senders does not require is_node_internal_connection() and calls check_hba_replication(), which only performs weak matching on the replication flag, skipping full pg_hba checks (including the remote trust prohibition). This allows external replication connections to bypass internal connection restrictions and full pg_hba policy, enabling reading of backup and log data via the replication protocol.

VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted project file may cause the product to initiate unintended communication, potentially leading to the leak of sensitive information from the device where the product is installed or resulting in a denial-of-service (DoS) condition.

A security vulnerability was detected in mxml 4.0.5/4.0.6 affecting the mxml_load_data function in mxml-file.c. The manipulation leads to use after free, and the attack can be carried out remotely. The exploit has been disclosed publicly and the project has not yet responded to the issue report.

A cross-site scripting (XSS) vulnerability has been found in the online-clinic-management-system (subhajitkhan) in feedback.php. Manipulation of the msg argument allows remote injection of malicious script. The exploit has been publicly disclosed and may be used.

A cross-site scripting (XSS) vulnerability has been found in the Doctor Registration component of online-clinic-management-system (subhajitkhan) in doctorregistration.php. Manipulation of the doc_name argument in the echo function allows remote execution of malicious script. The exploit has been published and may be used.