CVE Vulnerability Catalog

A SQL injection vulnerability was found in Maccms10 version 2025.1000.4050, specifically in the rep function of application/admin/controller/Database.php. Manipulation of the where argument leads to SQL injection. The attack can be initiated remotely, and the exploit has been made public.

A stored cross-site scripting vulnerability in Liferay Portal and Liferay DXP allows a remote authenticated attacker to inject JavaScript through the name of a fieldset in Kaleo Forms Admin. The malicious payload is stored and executed without proper sanitization or escaping.

Due to a Cross-Site Scripting (XSS) vulnerability in the SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user clicks on this link, the injected input is processed during the website's page generation, resulting in the creation of malicious content. When executed, this content allows the attacker to access or modify information within the victim's browser scope, impacting the confidentiality and integrity while availability remains unaffected.

uverif through version 3.2 contains an SQL injection vulnerability in the addbatch function in /admin/kami_list via manipulation of the note argument. The attack can be launched remotely and the exploit has been published.

A server-side request forgery (SSRF) vulnerability exists in Liferay Portal 7.4.0 through 7.4.3.131 and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, and 2024.Q1.1 through 2024.Q1.20 affecting custom object attachment fields. This flaw allows an attacker to manipulate the application into making unauthorized requests to other instances, creating new object entries that link to external resources.

Vite before versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20 serves any HTML files on the machine regardless of server.fs settings. Affects apps that expose the dev server to the network and use appType 'spa' or 'mpa'. The preview server is also vulnerable.

IBM Concert Software versions 1.0.0 through 1.1.0 may allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.

A vulnerability was identified in ChanCMS up to 3.3.1. Impacted is an unknown function of the file /search/. Manipulation with the input '%20or%201=1%20%23/words.html' leads to SQL injection, and remote exploitation is possible.

A vulnerability was identified in SimStudioAI sim up to 1.0.0. This impacts an unknown function of the file apps/sim/app/api/function/execute/route.ts. The manipulation of the argument code leads to code injection. The attack is possible to be carried out remotely.

A Use After Free vulnerability in Arm Ltd Bifrost, Valhall, and Arm 5th Gen GPU Architecture Kernel Drivers allows a local non-privileged user process to perform valid GPU memory processing operations to gain access to already freed memory. Affects versions r41p0 through r49p4 and r50p0 through r51p0 (Bifrost) and through r54p0 (Valhall, 5th Gen).

Reflected Cross-Site Scripting (XSS) vulnerability in WebWork allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.

A stored Cross-site Scripting (XSS) vulnerability exists in Multi-Purpose Inventory Management System due to lack of proper validation of user input. By sending a POST request with the product_name parameter in /Controller_Products/update, an attacker can store a malicious script that executes in an authenticated user's browser.

Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons (versions 1.0.0 through 2.22.1). Deployments that accept JNDI URIs for JCR lookup from untrusted users allow them to inject malicious JNDI references, potentially leading to arbitrary code execution.

A vulnerability in Portabilis i-Educar up to 2.10 affects an unknown function in /module/Api/turma. Manipulation leads to improper authorization. Remote attack possible, exploit publicly disclosed.

A vulnerability was found in Portabilis i-Educar up to 2.10, involving improper access controls in the file /matricula/[ID_STUDENT]/enturmar/. The attack can be initiated remotely, and the exploit has been made public.

A vulnerability has been found in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /cancelar-enturmacao-em-lote/. Such manipulation leads to improper access controls. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

A flaw has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /enturmacao-em-lote/. This manipulation causes improper access controls. The attack is possible to be carried out remotely. The exploit has been published and may be used.

In the Linux kernel NTFS3 filesystem, conditional lock acquisition (inode_trylock) was reintroduced instead of inode_lock, resolving a deadlock reported by syzbot. The earlier change removing conditional acquisition was reverted because the xfstest bug no longer occurs on kernel 6.16-rc1.

In the Linux kernel, a locking ordering issue in the team driver was resolved. The team lock is replaced with the rtnl lock to protect the team device, similar to bonding.

In the Linux kernel, the F2FS filesystem's f2fs_release_decomp_mem() may call vm_unmap_ram() from an invalid context (e.g., an interrupt handler), triggering a "sleeping function called from invalid context" bug. The fix extends the in_task() check in f2fs_read_end_io() to also verify that interrupts are disabled, ensuring pages are unmapped asynchronously.