CVE Vulnerability Catalog

A potential JDBC source configuration validation vulnerability in Apache Kylin. It affects versions 4.0.0 through 5.0.4 and has minor impact unless Kylin backend services are open to the public network.

An SQL Injection vulnerability in Apache Kylin due to improper neutralization of special elements used in SQL commands. It affects versions 4.0.0 through 5.0.4 and has moderate impact in the default query-only mode.

A vulnerability in Apache Kylin involving missing authorization on JDBC source configuration updates. It affects versions 4.0.0 through 5.0.4 and impacts mainly services directly exposed to the public network.

A Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. It affects versions 4.0.0 through 5.0.4 and impacts mainly the Kylin job service directly exposed to the public network.

MISP versions below 2.5.48 contain a data integrity flaw in event deletion logic where associated records (report tags, graph entries, proposal correlations, ssdeep chunks, attachment scan results) are not removed and remain orphaned. These records may contain sensitive threat intelligence data and could be exposed through other access paths.

In MISP versions below 2.5.48, the event synchronization process contains a logic error in preparing event reports for remote push — filtering of non-exportable tags is applied only once after iterating over all reports rather than to each report. As a result, all reports except the last are pushed with non-exportable tags intact, disclosing restricted information, and when the last report is empty, a null report is pushed causing the remote instance to fail saving the event.

A security flaw was discovered in DeepPavlov up to 1.7.0 affecting the resolve function in deeppavlov/core/common/params.py within the Config Reference Resolver component. Manipulation leads to code injection, and the attack can be launched remotely. The exploit has been released publicly and the project has not yet responded to the issue report.

In openGauss-server, src/common/backend/libpq/hba.cpp contains an access control bypass in replication connection authentication. hba_getauthmethod() for HADR/SW replication senders does not require is_node_internal_connection() and calls check_hba_replication(), which only performs weak matching on the replication flag, skipping full pg_hba checks (including the remote trust prohibition). This allows external replication connections to bypass internal connection restrictions and full pg_hba policy, enabling reading of backup and log data via the replication protocol.

A security vulnerability was detected in mxml 4.0.5/4.0.6 affecting the mxml_load_data function in mxml-file.c. The manipulation leads to use after free, and the attack can be carried out remotely. The exploit has been disclosed publicly and the project has not yet responded to the issue report.

A cross-site scripting (XSS) vulnerability has been found in the online-clinic-management-system (subhajitkhan) in feedback.php. Manipulation of the msg argument allows remote injection of malicious script. The exploit has been publicly disclosed and may be used.

A cross-site scripting (XSS) vulnerability has been found in the Doctor Registration component of online-clinic-management-system (subhajitkhan) in doctorregistration.php. Manipulation of the doc_name argument in the echo function allows remote execution of malicious script. The exploit has been published and may be used.

An information disclosure vulnerability has been found in dairy-management-system (Dav-ee) in delivery/checkfarmer.json.php, within the AJAX Endpoint component. Manipulation of the fname argument allows remote disclosure of information. The exploit has been published and may be used.

A SQL injection vulnerability has been found in dairy-management-system (Dav-ee) in payment/pay.php. Manipulation of the f_no/farmer arguments in the mysqli_real_escape_string function allows remote execution of SQL queries. The exploit is public and may be used.

In openGauss-server, the built-in function pg_read_binary_file_blocks() in src/common/backend/utils/adt/genfile.cpp has a permission check flaw. The function only validates the range of startBlockNum and blockCount, then calls ReadBinaryFileBlocksFirstCall(), which does not verify the caller's SELECT privileges. Any user with ordinary database connection access can read binary blocks of table data without SELECT permission if they know the relation file path.

The App Builder WordPress plugin before 5.7.1 does not require authentication or authorization before writing attacker-supplied data to one of its options, and on a separate unauthenticated request redirects the visitor's browser to a URI built from that stored data. This can lead to open redirect or other attacks.

The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status comes from an authorized source, allowing unauthenticated attackers to move any order into a paid state or force it to fail.

The TrueBooker WordPress plugin before 1.3.0 does not have authorization checks in place in some of its functionality, allowing unauthenticated users to create and modify booking services and categories, including their prices.

The TrueBooker WordPress plugin before 1.3.0 does not have authorization checks in some of its AJAX actions and does not validate the submitted service price server-side, allowing unauthenticated users to create bookings at a price of their choosing and to attach them to arbitrary customer accounts.

The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its confirmation summary, allowing unauthenticated attackers to enumerate booking identifiers and retrieve the personal information of customers who booked an appointment, as well as invalidate the customer's own confirmation link.

The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it checks is issued to unauthenticated visitors. This allows anyone to overwrite the plugin's entire configuration and discard any settings they do not supply.