CVE Vulnerability Catalog

A cross-site scripting vulnerability was found in the Attendance-Management-System by Akpali9 in the absent.php file. Manipulation of the export_date argument allows remote injection of malicious scripts. The product uses a rolling release model, so no specific version details are available.

ImageMagick before version 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.

In ImageMagick before version 7.1.2-26, there is a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures, causing a dangling pointer to reference freed memory, potentially leading to denial of service or code execution.

A vulnerability in ImageMagick before version 7.1.2-26 allows policy bypass in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by exploiting the APNG encoding process.

In ImageMagick before version 7.1.2-26, there is a heap use-after-free vulnerability caused by a missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.

ImageMagick before versions 7.1.2-26 and 6.9.13-51 lacks a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supply a crafted image that causes ImageMagick to allocate more memory than permitted by the configured policy, resulting in a denial of service.

Parse Server versions >= 9.0.0, < 9.10.0-alpha.2 and <= 8.6.83 are affected by a stored XSS vulnerability. A malformed Content-Type (e.g., 'image//svg+xml') bypasses the file extension blocklist and is stored unchanged; on storage adapters like S3, GCS, or Azure, browsers fall back to MIME-sniffing and render HTML content, executing embedded scripts.

A heap buffer overflow vulnerability in ImageMagick before 7.1.2-19 in the magnify operation allows out-of-bounds memory read. An unrecognized magnify:method value triggers the issue, potentially exposing sensitive information or causing denial of service.

SSRF vulnerability in Drupal core allows an attacker to send requests from the server to internal network resources. The issue affects multiple Drupal versions including 10.5.x, 10.6.x, 11.2.x, 11.3.x, and older branches 11.0.x and 11.1.x.

Frappe framework prior to versions 16.18.3 and 15.108.0 had a vulnerability in the check_safe_sql_query function that allowed SELECT INTO OUTFILE queries. This could be exploited on self-hosted sites if database permissions are misconfigured and MySQL FILE privileges are available.

The AI (Artificial Intelligence) module for Drupal contains a missing authorization vulnerability that allows forceful browsing, enabling attackers to access unauthorized resources. Affected versions are from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, and from 1.4.0 to 1.4.3.

Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows an attacker to send requests from the server to internal network resources. The issue affects versions from 0.0.0 to 1.1.1 and from 1.2.0 to 1.2.2.

An incorrect authorization vulnerability in the Drupal Advanced Content Feedback (admin_feedback) module allows forceful browsing, enabling unauthorized access to resources. Affected versions range from 0.0.0 to 2.8.0.

The Examples for Developers module for Drupal has a missing authorization vulnerability, allowing forceful browsing and unauthorized access to resources. This affects versions from 0.0.0 to 4.0.6.

A vulnerability in ZITADEL from version 4.0.0-rc.1 to 4.15.1 allows SSRF attacks due to inconsistent URL validation in HTTP notification channels, OIDC BackChannel logout, and SAML metadata URL fetches. Attackers can use DNS rebinding, redirects, or protocol downgrades to send requests to loopback, internal IP, or link-local endpoints.

In ZITADEL prior to version 4.15.1, the event store validation can retain the original resource owner for a deleted user identifier, causing a later user recreated with the same identifier in another organization to be provisioned under the original organization and exposed to that organization's administrator. This issue is fixed in version 4.15.2.

A vulnerability in Apprise library before version 1.11.0 causes HTTP-based notification plugins and HTTP attachment/config loaders to follow HTTP redirects by default and resend user-configured auth headers and query parameters. This allows a compromised trusted destination or on-path attacker to capture secrets like Authorization headers, bearer tokens, custom headers, and service keys.

A vulnerability in NanaZip (a 7-Zip fork for Windows) prior to version 6.5.1749.0 causes a process crash when testing or extracting WebAssembly, ElectronAsar, Zealfs, Romfs, Ufs, Littlefs, and DotNetSingleFile archives. The issue stems from unconditionally dereferencing the caller-supplied Indices pointer, which can be NULL when the archive engine signals extraction of all items.

NanaZip prior to version 6.5.1749.0 has a vulnerability in its WebAssembly archive handler where an attacker can control buffer allocation sizes. By crafting a file with manipulated NameSize and Information.Size fields, multi-gigabyte memory allocations can be forced, leading to memory exhaustion or process termination.

A vulnerability in NanaZip (a 7-Zip fork for Windows) prior to version 6.5.1749.0 allows an attacker to cause memory exhaustion via a crafted UFS/FFS image. Missing validation of the fragment size (fs_fsize) lets a tiny image force multi-gigabyte allocations during open or extraction.