CVE Vulnerability Catalog

A vulnerability in Vega library before versions 6.1.2 and 5.6.3 allows arbitrary JavaScript execution (DOM XSS) in applications that expose Vega and View objects globally and allow user-defined Vega specifications. The attack requires user interaction, such as opening a malicious specification.

Spinnaker, jako platforma do ciągłego dostarczania, jest podatny na atak typu server-side request forgery w wersjach przed 2025.1.6, 2025.2.3 i 2025.3.0. Atak ten umożliwia użytkownikom pobieranie danych z zdalnych adresów URL, które mogą być następnie wstrzykiwane do potoków Spinnakera.

A ReDoS vulnerability in Anthropic's MCP TypeScript SDK up to version 1.25.1 exists in the UriTemplate class when processing RFC 6570 exploded array patterns. The dynamically generated regular expression contains nested quantifiers that can cause catastrophic backtracking on specially crafted inputs, leading to excessive CPU consumption.

Wykryto podatność bezpieczeństwa w projekcie Online Music Site w wersji 1.0. Problem dotyczy pliku /login.php, gdzie manipulacja argumentami username/password prowadzi do wstrzykiwania SQL.

Coolify is an open-source tool for managing servers, applications, and databases. In versions up to and including v4.0.0-beta.434, an attacker can initiate a password reset for a victim and modify the Host header to a malicious value. The victim receives a password reset email with a link to the malicious host, and if clicked, the reset token is sent to the attacker's server, allowing account takeover.

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, a command injection vulnerability exists in the git source input fields of a resource, allowing a low privileged user (member) to execute system commands as root on the Coolify instance. As of time of publication, it is unclear if a patch is available.

Coolify is an open-source tool for managing servers, applications, and databases. In versions up to and including v4.0.0-beta.434, a low-privileged user (member) can view and use invitation links sent to an administrator. If they use the link before the legitimate recipient, they can log in as an administrator, resulting in privilege escalation.

A DoS vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to exhaust application server resources via the "GET /images" API. The application fails to limit the height of the use-element shadow tree or the dimensions of pattern tiles during SVG processing, resulting in unbounded resource consumption and system-wide denial of service.

Coolify up to version v4.0.0-beta.434 contains a vulnerability that allows a low-privileged user (member) to invite a high-privileged user (administrator). Although the first invitation attempt fails with an error, clicking the invite button a second time succeeds. This enables an attacker to invite themselves as an administrator, then reset the password and log in with admin privileges.

In Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580, a vulnerability was found related to incorrect handling of NL80211 vendor commands, leading to a buffer overflow during IOCTL message processing.

A vulnerability in the WiFi driver of Samsung Mobile Processors Exynos 1380, 1480, 2400, and 1580 is caused by improper handling of an NL80211 vendor command, leading to a buffer overflow.

A vulnerability was discovered in the L2 layer of Samsung Mobile Processor, Wearable Processor, and Modem Exynos models 980, 990, 850, 1080, 2400, 1580, 9110, W920, W930, Modem 5123, and Modem 5400. Incorrect handling of RRC packets leads to a Denial of Service.

OpenCTI before version 6.8.1 contains a vulnerability in the GraphQL mutation WorkspacePopoverDeletionMutation that allows deletion of workspace-related objects (e.g., dashboards, investigation cases) without proper authorization. An attacker can supply another user's active UUID and delete the entire workspace because the API does not validate ownership.

Coolify versions up to and including v4.0.0-beta.420.6 are vulnerable to a stored XSS attack in the project creation workflow. An authenticated low-privileged user can create a project with a malicious name containing JavaScript, which executes in the admin's browser when the project or resource is deleted. Version 4.0.0-beta.420.7 contains a patch.

Coolify before version 4.0.0-beta.420.7 contains a Remote Code Execution (RCE) vulnerability in the application deployment workflow. A low-privileged member can inject arbitrary Docker Compose directives during project creation or updates, allowing to mount the host filesystem and execute commands with root privileges, bypassing container isolation.

Muffon is a cross-platform music streaming client for desktop. Versions prior to 2.3.0 have a one-click Remote Code Execution (RCE) vulnerability. An attacker can exploit this by embedding a crafted `muffon://` link on a website they control, and when a victim visits the site or clicks the link, the browser triggers Muffon's custom URL handler, leading to RCE without further interaction.

A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerability in the Unifi Protect Application (Version 6.1.79 and earlier).

Wtyczka UCRM Argentina AFIP invoices (w wersji 1.2.0 i wcześniejszych) zawiera podatność typu Cross-Site Scripting (XSS), która może umożliwić eskalację uprawnień, jeśli administrator zostanie nakłoniony do odwiedzenia spreparowanej złośliwej strony.

In Samsung Magician versions 6.3.0 through 8.3.2 on Windows, the installer creates a temporary folder with weak permissions during installation. This allows a non-admin user to perform DLL hijacking and escalate privileges.

A vulnerability was discovered in the Camera of Samsung Mobile and Wearable Processors Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Improper validation of user-space input in the issimian device driver leads to information disclosure and denial of service.