CVE Vulnerability Catalog

Offline Hospital Management System version 5.3.0 allows remote code execution due to improper Electron renderer configuration. The application enables Node.js integration while disabling context isolation, allowing JavaScript executed in the renderer process to access Node.js APIs and execute arbitrary operating system commands.

A flaw was found in GnuTLS in the DTLS packet reordering logic. The comparator function does not correctly handle packets with duplicate sequence numbers, leading to unstable ordering or undefined behavior, resulting in a denial of service.

In M-Files Server versions before 26.5.16015.0, before 26.2 LTS, and before 25.8 LTS SR3, a denial-of-service vulnerability exists. This allows an authenticated user to cause the MFserver process to crash.

There is a Stored XSS vulnerability in Basamak Information Technology Consulting and Organization Trade Ltd. Co.'s DernekWeb due to improper neutralization of input during web page generation.

A Remote Code Execution vulnerability in P4 (Helix Core) Server's Command-Line Client, prior to the 2025.2 Patch 2, has been fixed to address potential security risks.

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, and 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields in the Mattermost Calls plugin. This allows an attacker with access to a support packet to obtain TURN server credentials via the plaintext values present in the exported plugin configuration.

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields before including them in support packet generation, which allows a Mattermost System Admin or any party with access to a support packet to obtain sensitive credentials in plaintext via downloading a support packet from the System Console. Mattermost Advisory ID: MMSA-2026-00607.

Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The set_add method did not check values for newlines, colons, or pipes, allowing additional metrics to be injected from untrusted sources.

The Ajax Load More WordPress plugin before version 7.8.4 does not sanitize and escape a parameter before outputting it back on the page, leading to a Reflected Cross-Site Scripting vulnerability.

The WP Maps plugin for WordPress before version 4.9.3 does not properly sanitize a parameter before using it in a file path, allowing authenticated users to perform Local File Inclusion attacks.

The WP Photo Album Plus WordPress plugin before version 9.1.11.001 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.

The Autoptimize plugin before version 3.1.15, Clearfy Cache plugin before version 2.4.2, and Speed Optimizer plugin before version 7.7.9 are vulnerable to unauthenticated Stored Cross-Site Scripting (XSS). They exploit a predictable replacement hash during the HTML minification process, allowing arbitrary HTML attributes to be injected.

A flaw has been found in project hospital-management-system-in-php 1.0 in the function getAllPatientDetail of the file update_info.php, related to GET Parameter Handler. Manipulating the argument appointment_no can lead to SQL injection.

A vulnerability has been found in Edimax BR-6428NS 1.10 affecting the function formPPTPSetup of the file /goform/formPPTPSetup. Manipulation of the argument pptpUserName leads to buffer overflow, allowing for remote attack.

A flaw has been found in Edimax BR-6428NS version 1.10 affecting the function formL2TPSetup in the file /goform/formL2TPSetup. Manipulation of the argument L2TPUserName causes buffer overflow, allowing for remote attack initiation.

A security flaw has been discovered in linlinjava litemall up to version 1.8.0, affecting the list function in the WxGoodsController.java file. Manipulating this function leads to SQL injection vulnerabilities.

A vulnerability was found in vercel ai up to version 3.0.97, concerning the function validateDownloadUrl in the file packages/provider-utils/src/download-blob.ts of the component provider-utils. This manipulation leads to server-side request forgery.

A security vulnerability has been detected in H3C Magic B3 up to version 100R002, affecting the UpdateWanParams function in the /goform/aspForm file. Manipulation of the param argument leads to buffer overflow.

Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes.

A vulnerability was identified in xiandafu beetl up to version 3.20.2, concerning a function in the SpELFunction.java file. Manipulation leads to improper neutralization of special elements used in expression language.