CVE Vulnerability Catalog

An Insecure Direct Object Reference vulnerability in Medtronic CareLink Network allows an authenticated attacker with access to specific device and user information to submit web requests to an API endpoint that would expose sensitive user information. This issue affects CareLink Network before December 4, 2025.

A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of /index.php/admins/Comment/addcomment.html of the Comment Handler component. Manipulating the body argument leads to cross site scripting, the attack may be initiated remotely, and the exploit is publicly available. The vendor was contacted but did not respond.

A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1 in an unknown part of the file /admin79f2ec220c7e.php?c=api&m=demo&name=mobile in the Domain Name Binding Page component. The manipulation results in cross site scripting. The attack may be performed remotely and has a high complexity level.

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1 in some unknown functionality of the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 in the Add Data Validation Page component. Manipulation of the data[name] argument leads to cross site scripting. The attack is possible remotely.

The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify that a user has access to a specific event when duplicating it, leading to arbitrary event disclosure to users with a role as low as Contributor.

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker with root access to modify the Recovery Partition (because of a lack of integrity protection).

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker to modify or erase tamper events via the Chassis management board.

Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. Allows an authenticated user with administrator privileges to list directories outside the authorized area using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.

Mattermost versions 10.11.x <= 10.11.4 and 10.5.x <= 10.5.12 fail to validate user permissions when accessing files and subscribing to blocks in Boards. An authenticated user can access files from other boards and subscribe to blocks from boards they do not have access to.

Vulnerability in nutzam NutzBoot up to 2.6.0-SNAPSHOT, affecting the getInputStream function in nutzcloud/nutzcloud-literpc/src/main/java/org/nutz/boot/starter/literpc/impl/endpoint/http/HttpServletRpcEndpoint.java of the LiteRpc-Serializer component, leading to deserialization. The attack can be launched remotely but is difficult to exploit.

An XSS vulnerability in School Management System (rolling release) exists in /student-view.php in the Edit Student Info Page component. Manipulation of the First Name argument causes XSS. Remote attack is possible, exploit is public.

An XSS vulnerability in Skuul School Management System up to version 2.6.5 exists in the SVG File Handler component in /dashboard/schools/1/edit. The attack can be performed remotely, and the exploit is publicly available.

A vulnerability was determined in motogadget mo.lock Ignition Lock up to 20251125. This affects an unknown functionality of the NFC Handler component. Manipulation can lead to the use of a hard-coded cryptographic key. The attack requires physical access to the device and is difficult to exploit.

W bibliotece libexpat do wersji 2.7.3, specjalnie przygotowany plik o przybliżonym rozmiarze 2 MiB może powodować znaczne opóźnienia w czasie przetwarzania, trwające nawet kilkanaście sekund.

Mustang before 2.16.3 allows exfiltrating files via XXE attacks.

Devolutions Server exposes credentials in unintended requests. The issue affects Server through 2025.2.20 and through 2025.3.8.

Spotipy, a Python library for the Spotify Web API, prior to version 2.25.2 contains a cross-site scripting (XSS) vulnerability in the OAuth callback server. The unsanitized error parameter allows JavaScript injection, enabling attackers to execute arbitrary JavaScript in the user's browser during OAuth authentication.

GitLab CE/EE in all versions from 13.2 before 18.5.5 and 18.6 before 18.6.3 contained an issue that could allow an authenticated user with access to certain logs to obtain sensitive tokens under specific conditions. The vendor fixed the issue in versions 18.5.5 and 18.6.3.

In Splunk Add-on for Palo Alto Networks versions below 2.0.2, the add-on exposes client secrets in plain text in the _internal index during the addition of new “Data Security Accounts”. The vulnerability requires either local access to log files or administrative access to internal indexes, which by default only the admin role receives.

In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the old file at the end, because of use of QIODevice::ReadWrite instead of QIODevice::WriteOnly.