CVE Vulnerability Catalog

The DataPress (Dataverse Integration) WordPress plugin before 2.91 does not properly restrict access to its template rendering feature and exposes the viewing user's data to it, allowing users with a role as low as Contributor to disclose sensitive information, such as the session cookies of higher privileged users who view the affected content.

Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is fixed in 6.2.1.

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid is vulnerable to CSS injection via sibling combinator selectors generated from diagram-supplied class or id names. An attacker who can supply diagram text can inject arbitrary CSS into the rendered page, potentially altering the appearance or behavior of unrelated page elements. This issue is fixed in versions 10.9.8 and 11.16.1.

Frappe is a full-stack web application framework. Prior to 16.19.0 and 15.109.0, Data Import does not escape imported column headers before rendering previews and results, allowing an authenticated importer to persist script content that executes when another user views the import interface. This issue is fixed in versions 16.19.0 and 15.109.0.

OpenReception's appointment booking software prior to version 1.0.2 has a vulnerability in the `/api/log` endpoint that accepts unauthenticated POST requests, applies no schema validation to the message body, writes attacker-controlled content directly into the application's stdout log, interprets newline characters as real line breaks, and enforces no size or rate limits. Three independent abuse modes follow: log injection (forge log lines that look like legitimate system events), log volume DoS (saturate the logging pipeline at sustained 100+ requests per second of small messages), and oversized-payload submission (100 KB payloads accepted; larger sizes not tested). The most operationally damaging mode is log injection. An attacker can inject lines that an operator scanning logs would mistake for real system errors, mask their own activity behind fake noise, or pollute SIEM alerting rules with crafted false positives. Version 1.0.2 fixes the issue.

Prior to version 1.0.5, the unauthenticated `/api/tenants/{id}/schedule` endpoint returns all non-archived channels for a tenant regardless of the `isPublic` flag. Channels marked `isPublic = false` are intended to be hidden from public callers, but the endpoint discloses their names, descriptions, IDs, agent associations, pause status, confirmation requirements, and slot availability. Version 1.0.5 patches the issue.

Prior to version 1.1.0, the GET handler at `/api/tenants/{id}/appointments/{appointmentId}` performs no authorization check before returning the appointment record. Any party who knows or obtains a valid appointment UUID receives the full row, including channel and agent IDs, time and timezone, status, and the AES-GCM ciphertext components. Version 1.1.0 patches the issue.

A vulnerability in OpenReception's appointment booking software (versions 1.0.1 and prior) allows an unauthenticated attacker to add an appointment to a private channel (where `isPublic = false`). The new-client booking flow does not bind the access token to `channelId`, and the validation in `createNewClientWithAppointment` lacks the `channel.isPublic` check, enabling bypass. The attack requires only solving a 16-bit proof-of-work (trivial) and knowing the channel ID, which can be obtained from another vulnerability (V-10).

A vulnerability in OpenReception's appointment booking software before version 1.0.5 allows an unauthenticated attacker to add arbitrary appointments to any client tunnel. The `add-to-tunnel` endpoint does not verify the caller's identity, only that a tunnel with the given `emailHash` exists, enabling insertion of appointments with CONFIRMED status, attacker-controlled ciphertext fields, date, duration, and chosen agent.

Prior to version 1.0.4, the PIN-type challenge throttle uses `emailHash` as the only key, and the `challenge_throttle` table is shared across all tenants. An attacker who knows a patient's email can lock out that patient on another tenant by issuing failed challenge responses against one tenant. The lockout escalates with repeated failures, leading to sustained denial of service. Version 1.0.4 patches the issue.

Prior to version 16.18.0, the Workspace Save API accepts a controlled workspace identifier from any authenticated user without enforcing workspace ownership, allowing modification of another user's private workspace and persistent script injection. This issue is fixed in version 16.18.0.

Prior to versions 0.30.9, 0.31.5, and 0.32.0.rc2, when VAPID delivery is enabled, the notification subscription flow stores a client-supplied push endpoint without validating that it belongs to an approved push service, and SendPushNotification later passes that endpoint to WebPush.payload_send, allowing an authenticated user to create stored, mostly blind server-side requests to arbitrary reachable HTTPS endpoints. This issue is fixed in versions 0.30.9, 0.31.5, and 0.32.0.rc2.

Prior to versions 0.30.9, 0.31.5, and 0.32.0.rc2, an administrator with landing-page editing privileges can store arbitrary HTML and JavaScript in an HTML content block, which Decidim::ContentBlocks::HtmlCell#html_content renders without sanitization, causing the script to execute in visitors' browsers. This issue is fixed in versions 0.30.9, 0.31.5, and 0.32.0.rc2.

Prior to versions 0.30.9, 0.31.5, and 0.32.0.rc2, the /admin/csv_census/census_logs record-management endpoints do not enforce full administrator authorization before rendering or mutating Decidim::Verifications::CsvDatum, allowing a participant manager to create, alter, or remove census records. This issue is fixed in versions 0.30.9, 0.31.5, and 0.32.0.rc2.

llama.cpp builds b4882 before b8487 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with an oversized seq_id value to trigger an out-of-bounds read that leaks heap data including pointer values into server logs, defeating ASLR protections and facilitating further exploitation.

Path Traversal vulnerability in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to write a root-owned file with partially attacker-controlled body to any path ending in .network, and create missing parent directories with mode 0777 via network Alias on Ubuntu. Affects BOSH agent < v2.847.0 (jammy <= v1.1202, noble <= v1.364).

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.

An issue in the billing and license activation subsystem allows remote attackers to bypass payment authorization workflows. By exploiting insufficient cryptographic validation or lack of server-side state verification on promotional/lifetime-deal (LTD) redemption codes, an unauthenticated attacker can forge valid redemption tokens or replay existing single-use codes to activate permanent, tier-highest paid subscriptions without a financial transaction.

Use-after-free vulnerability in MZ Automation libiec61850 up to 1.6.1, in the function deleteDataSetValuesShadowBuffer of the file src/iec61850/server/mms_mapping/reporting.c (URCB Revalidation component). The attack requires local access. The exploit has been made public. Upgrading to version 1.6.2 fixes the issue.

SQL injection vulnerability in itsourcecode Hospital Management System 1.0, in an unknown function of the file /viewappointment.php, via manipulation of the argument delid. The attack can be performed remotely. The exploit has been published.