CVE Vulnerability Catalog

The iccDEV library versions 2.3.1.1 and below have undefined behavior in the icSigCalcOp() function. This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and code execution. This issue has been fixed in version 2.3.1.2.

The iccDEV library versions 2.3.1.1 and below have a heap buffer overflow vulnerability in the CIccTagNamedColor2::SetSize() function. This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and code execution. This issue has been fixed in version 2.3.1.2.

The iccDEV library versions 2.3.1.1 and below have a heap buffer overflow vulnerability in the CIccMpeCalculator::Read() function. This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and code execution. This issue has been fixed in version 2.3.1.2.

The iccDEV library versions 2.3.1.1 and below have a null pointer dereference and undefined behavior vulnerability in CIccXmlArrayType(). This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary blobs. Successful exploitation may allow an attacker to perform DoS, manipulate data, bypass application logic and code execution. This issue has been fixed in version 2.3.1.2.

The iccDEV library versions 2.3.1.1 and below have an integer overflow vulnerability in icValidateStatus CIccProfile::CheckHeader() when user-controllable input is incorporated into profile data unsafely. Tampering with tag tables, offsets, or size fields can trigger parsing errors, memory corruption, or DoS, potentially enabling arbitrary code execution or bypassing application logic. This issue has been fixed in version 2.3.1.2.

ChatterMate to framework agenta czatu AI bez kodu. W wersjach 1.0.8 i poniżej, chatbot akceptuje i wykonuje złośliwe ładunki HTML/JavaScript dostarczane jako wejście czatu, co pozwala na dostęp do wrażliwych danych po stronie klienta.

A hard-coded cryptographic key vulnerability in Salesforce Marketing Cloud Engagement allows for web services protocol manipulation. This issue affects modules such as CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, and View As Webpage.

Podatność związana z użyciem uszkodzonego lub ryzykownego algorytmu kryptograficznego w Salesforce Marketing Cloud Engagement umożliwia manipulację protokołem usług internetowych. Problem ten dotyczy modułów takich jak CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center oraz View As Webpage i występuje przed 21 stycznia 2026 roku.

Podatność CVE-2026-22583 dotyczy niewłaściwej neutralizacji ograniczników argumentów w komendzie, co prowadzi do możliwości manipulacji protokołem usług internetowych w module CloudPagesUrl Salesforce Marketing Cloud Engagement. Problem ten dotyczy wersji przed 21 stycznia 2026 roku.

Podatność CVE-2026-22582 dotyczy niewłaściwej neutralizacji ograniczników argumentów w module MicrositeUrl Salesforce Marketing Cloud Engagement, co umożliwia manipulację protokołem usług internetowych. Problem ten dotyczy wersji Marketing Cloud Engagement przed 21 stycznia 2026 roku.

Saleor to platforma e-commerce, która w wersjach od 3.2.0 do 3.20.109, 3.21.0-a.0 do 3.21.44 oraz 3.22.0-a.0 do 3.22.28 ma podatność typu Insecure Direct Object Reference (IDOR). Umożliwia ona nieautoryzowanym użytkownikom wyciąganie wrażliwych informacji w postaci niezaszyfrowanej.

A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 in gallery/upload.php. The application fails to validate file contents and preserves user-supplied extensions, allowing unauthenticated attackers to upload arbitrary PHP code by spoofing MIME type, leading to full system compromise.

An information disclosure vulnerability in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform (through 2025-05-28) allows an unauthenticated attacker to retrieve a list of cashier accounts, including names, email addresses, usernames, and passwords hashed with MD5. Since MD5 is a broken cryptographic function, the hashes can be easily reversed using public tools, exposing plaintext credentials.

An SQL Injection vulnerability in the GetServiceByRestaurantID endpoint of the Aptsys gemscms POS Platform (up to 2025-05-28) allows an attacker to inject and execute arbitrary SQL code via the id parameter due to lack of input sanitization and parameterization.

A vulnerability in the Aptsys POS Platform Web Services module through 2025-05-28 exposes internal API testing tools to unauthenticated users. By accessing specific URLs, an attacker sees a directory index listing all backend and POS web services, each with an HTML form for test input. These developer panels are accessible in production without authentication.

A vulnerability in the PHP backend of gemscms.aptsys.com.sg (through May 28, 2025) allows unauthenticated remote attackers to trigger detailed error messages that disclose internal file paths, code snippets, and stack traces. This is achieved by sending specially crafted HTTP GET/POST requests to public API endpoints.

A vulnerability in the PHP backend of gemsloyalty.aptsys.com.sg (up to 2025-05-28) allows unauthenticated remote attackers to trigger detailed error messages that disclose internal file paths, code snippets, and stack traces. This is achieved by sending specially crafted HTTP GET/POST requests to public API endpoints.

An OS command injection vulnerability in the com.sprd.engineermode component on Doogee Note59, Note59 Pro, and Note59 Pro+ smartphones. A local attacker can execute arbitrary code and escalate privileges via the EngineerMode ADB shell, due to incomplete patching of CVE-2025-31710.

Incorrect access control in the selectDept function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily access sensitive department data.

Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside their scope.