CVE Vulnerability Catalog

ABB T-MAC Plus version 4.0-24 suffers from an incorrect authorization vulnerability, allowing a user to access functions or data they should not be permitted to.

ABB T-MAC Plus version 4.0-24 is vulnerable to cross-site scripting (XSS) due to improper neutralization of input during web page generation. An attacker can inject malicious scripts that execute in the victim's browser.

Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus version 4.0-24.

Vulnerability in mlflow/mlflow prior to 3.11.0 allows environment variable resolution in AI Gateway secrets, leading to exfiltration of sensitive server-side credentials.

The Prague theme by Fox-themes versions up to 2.2.8 has a Reflected XSS vulnerability due to improper input neutralization during page generation. An attacker can inject malicious script via a crafted URL, which executes in the victim's browser.

In FreeIPMI before version 1.6.18, a vulnerability was found in the ipmi-oem tool where response messages for the 'dell get-active-directory-config' and 'fujitsu get-sel-entry-long-text' subcommands cause buffer overflows.

SQL Injection vulnerability in the administrative panel of SourceCodester Pizzafy E-Commerce System 1.0. The Login function in /admin/admin_class_novo.php allows manipulation of the Username argument, enabling remote SQL injection. The exploit is publicly available.

Denial of service vulnerability in Cpanel::JSON::XS for Perl before version 4.41. Specially crafted input with a UTF-8 BOM prefix can cause the Perl interpreter to crash when a decode filter callback throws an exception.

Type confusion in Cpanel::JSON::XS before 4.41 for Perl with dupkeys_as_arrayref enabled. decode_hv() dereferences a non-reference scalar as a reference, causing crashes.

A vulnerability in SourceCodester Online Food Ordering System 2.0. The include function in /index.php allows remote file inclusion via manipulation of the page argument. The attack can be launched remotely and the exploit is public.

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete file records through `DELETE /api/files` that the owner has reused across multiple agents. The deletion removes the file globally — not just from the shared agent — breaking the owner's other private agents that reference the same `file_id`. The private agent retains a stale `file_id` reference that no longer resolves. A shared-agent editor can destroy files that the owner uses across multiple agents. The owner's private agents — which the attacker has no access to — break silently with stale `file_id` references. This is a cross-agent integrity violation: editing access to one agent should not affect another. Version 0.8.4 contains a patch.

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU resources.

GLPI versions 11.0.0 through 11.0.6 allow a technician to store an XSS payload in ITIL costs. This issue has been fixed in version 11.0.7.

A sandbox escape vulnerability in alf.io, an open source ticket reservation system, allows an authenticated administrator to execute arbitrary OS commands on the server via the extension mechanism.

LibreChat is a ChatGPT clone supporting multiple AI providers. In versions up to 0.7.6, an IDOR vulnerability exists in the API keys management endpoint (PUT /api/keys). Due to the use of the spread operator after setting the authenticated user's ID, any authenticated user can inject a userId parameter to overwrite another user's API keys (e.g., OpenAI, Anthropic, Azure). An attacker can route victim's conversations through attacker-controlled keys or deny service.

Docker Desktop 4.76.0 fixes a VM panic caused by unbounded recursion in the grpcfuse kernel module when deeply nested directories are created on a bind-mounted host folder and a dentry invalidation event is triggered.

Denial of service vulnerability in Dräger Core 1.0.5 and Dräger M540 Converter Service 1.0.9. Attackers on the hospital network can send specially crafted, unencrypted SDC messages during discovery, causing high CPU load and blocking further SDC message processing.

Dräger Infinity Acute Care System and Infinity M540 patient monitors versions VG4.1.1, VG4.0.3, and lower (VG4.2 partially affected) have a network message handling vulnerability. Remote attackers can inject spoofed data, modify device settings (e.g., alarm states), or overwhelm the system with traffic, causing reboot and loss of network functionality.

Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions, allowing local attackers to execute arbitrary code with elevated privileges.

Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions, allowing local attackers to execute arbitrary code with elevated privileges.