CVE Vulnerability Catalog

Denial of service (DoS) vulnerability in the office service. Successful exploitation may affect availability.

Denial of service (DoS) vulnerability in the office service. Successful exploitation may affect availability.

Denial of service (DoS) vulnerability in the office service. Successful exploitation may affect availability.

A vulnerability was detected in SourceCodester Online Banking System 1.0. Manipulation of the First Name/Last Name arguments in the file /?page=user results in cross site scripting. The attack can be launched remotely and the exploit is now public.

A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0. An unknown function in /membership_profile.php of the Your Info Handler component is affected. Manipulation of the Full Name/Address/City/State arguments results in cross site scripting. The attack can be carried out remotely and the exploit has been made public.

A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f. Affected by this vulnerability is an unknown functionality of the file /dishsub.php. The manipulation of the argument item.name results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used.

A vulnerability has been found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f in an unknown function of the file /usersub.php of the Request Pending Page component. The manipulation leads to cross site scripting. The attack can be initiated remotely, and the exploit has been publicly disclosed.

Employee Profile Management System 1.0 by code-projects has a cross-site scripting (XSS) vulnerability in /view_personnel.php. Manipulation of arguments per_address, dr_school, or other_school leads to XSS. The attack can be performed remotely, and the exploit is publicly available.

A security flaw has been discovered in Grandstream GXP1625 1.0.7.4. It affects an unknown function of the file /cgi-bin/api.values.post in the Network Status Page component. Manipulation of the vpn_ip argument results in basic cross site scripting. Remote exploitation is possible and the exploit has been released publicly. The vendor was contacted but did not respond.

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to 1.10.4, some of HedgeDoc's OAuth2 endpoints for social login providers such as Google, GitHub, GitLab, Facebook or Dropbox lack CSRF protection, since they don't send a state parameter and verify the response using this parameter. This vulnerability is fixed in 1.10.4.

Nextcloud Twofactor WebAuthn is the WebAuthn Two-Factor Provider for Nextcloud. Prior to 1.4.2 and 2.4.1, a missing ownership check allowed an attacker to take away a 2FA WebAuthn device when correctly guessing an 80-128 character long random string of letters, numbers and symbols. The victim would then be prompted to register a new device on the next login; the attacker cannot authenticate as the victim.

In Nextcloud Talk prior to 20.1.8 and 21.1.2, a participant with chat permissions was able to delete poll drafts of other participants within the conversation based on their numeric ID. This vulnerability is fixed in 20.1.8 and 21.1.2.

In the Nextcloud Contacts app prior to 5.5.4, 6.0.6, and 7.2.5, a malicious user was able to modify their organisation and title field to load additional CSS files. JavaScript and other options were correctly blocked by the content security policy of the Nextcloud Server code. This vulnerability is fixed in 5.5.4, 6.0.6, and 7.2.5.

Nextcloud Desktop is the desktop sync client for Nextcloud. Prior to 3.16.5, when trying to manually lock a file inside an end-to-end encrypted directory, the path of the file was sent to the server unencrypted, making it possible for administrators to see it in log files.

In Nextcloud Deck prior to 1.12.7, 1.14.4, and 1.15.1, file extension can be spoofed by using RTLO characters, tricking users into downloading files with a different extension than what is displayed. This vulnerability is fixed in 1.12.7, 1.14.4, and 1.15.1.

Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team. Prior to 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, and 20.1.2, a user with read-only permission can restore a file from the trash bin.

The Nextcloud Approval app allows approval or disapproval of files in the sidebar. Prior to 1.3.1 and 2.5.0, an authenticated user listed as a requester in a workflow can set another user's file into "pending approval" without access to the file by using the numeric file id.

In the Nextcloud Mail app prior to 5.5.3, a stored HTML injection in the Mail app's message list allowed an authenticated user to inject HTML into email subjects. JavaScript was correctly blocked by the content security policy of the Nextcloud Server code.

Nextcloud Calendar is a calendar app for Nextcloud. Prior to 4.7.19, 5.5.6, and 6.0.1, the calendar app allowed blindly booking appointments with a sequential ID without knowing the appointment token. This vulnerability is fixed in 4.7.19, 5.5.6, and 6.0.1.

Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level. Prior to 0.0.16, a bug in the sandboxing logic meant that network sandboxing was not properly enforced if the sandbox policy did not configure any allowed domains, allowing sandboxed code to make network requests outside the sandbox. A patch was released in v0.0.16.