CVE Vulnerability Catalog

W systemie integracji Gallagher Morpho występuje podatność, która umożliwia uwierzytelnionemu operatorowi z ograniczonymi uprawnieniami do wprowadzenia krytycznych zmian w lokalnych urządzeniach Morpho. Problem dotyczy serwera Command Centre w wersjach 9.30 przed vEL9.30.2482 (MR2), 9.20 przed vEL9.20.2819 (MR4), 9.10 przed vEL9.10.3672 (MR7), 9.00 przed vEL9.00.3831 (MR8) oraz wszystkich wersji 8.90 i wcześniejszych.

Client-Side Enforcement of Server-Side Security (CWE-602) in the Command Centre Server allows a privileged operator to enter invalid competency data, bypassing expiry checks. This issue affects Command Centre Server: 9.30 prior to vEL9.30.2482 (MR2), 9.20 prior to vEL9.20.2819 (MR4), 9.10 prior to vEL9.10.3672 (MR7), all versions of 9.00 and prior.

Exposure of Private Personal Information to an Unauthorized Actor (CWE-359) in the Command Centre Server allows a privileged Operator to view limited personal data about a Cardholder they would not normally have permissions to view. This issue affects Command Centre Server: 9.30.1874 (MR1), 9.20.2337 (MR3), 9.10.3194 (MR6).

W podatności CVE-2025-11575 występuje nieprawidłowa domyślna konfiguracja uprawnień w sterowniku ODBC dla MongoDB Atlas SQL na systemie Windows, co umożliwia eskalację uprawnień. Problem dotyczy wersji sterownika od 1.0.0 do 2.0.0.

Sakai, a Collaboration and Learning Environment, prior to versions 23.5 and 25.0, initialized an AES256TextEncryptor password (serverSecretKey) using RandomStringUtils with the default java.util.Random. java.util.Random is a non-cryptographic PRNG and can be predicted from limited state/seed information (e.g., start time window), substantially reducing the effective search space of the generated key. An attacker who can obtain ciphertexts (e.g., exported or at-rest strings protected by this service) and approximate the PRNG seed can feasibly reconstruct the serverSecretKey and decrypt affected data. SAK-49866 is patched in Sakai 23.5, 25.0, and trunk.

The pypdf library before version 6.1.3 is vulnerable to an attack causing large memory usage. An attacker can craft a PDF that, when parsing the content stream of a page using the LZWDecode filter, leads to excessive memory consumption. This has been fixed in version 6.1.3.

The pypdf library before version 6.1.3 is vulnerable to an attack causing an infinite loop. An attacker can craft a PDF that, when parsing the content stream of a page with an inline image using the DCTDecode filter, leads to an infinite loop. This has been fixed in version 6.1.3.

VDO.Ninja is a tool that brings remote video feeds into OBS or other studio software via WebRTC. From versions 28.0 to before 28.4, a reflected XSS vulnerability exists on examples/control.html through the room parameter, which is improperly sanitized before being rendered in the DOM. The application fails to validate and encode user input, allowing malicious scripts to be injected and executed. This issue has been patched in version 28.4.

FastGPT prior to version 4.11.1 has security-unsafe network link verification in the workflow file reading node, posing a risk of SSRF attacks. This issue has been patched in version 4.11.1.

aiomysql before version 0.3.0 does not check client-side settings before sending local files to a MySQL server. A rogue MySQL server can emulate authorization, ignore client flags, and request arbitrary files from the client via a LOAD_LOCAL packet. This issue has been patched in version 0.3.0.

Hono to framework aplikacji webowych, który wspiera dowolne środowisko JavaScript. W wersjach od 1.1.0 do przed 4.10.2, middleware JWT Auth w Hono nie zapewnia wbudowanej opcji weryfikacji aud (audience), co może prowadzić do problemów z mieszaniem tokenów i niezamierzonego dostępu między usługami.

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view items on the 'Why' page.

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view other team overviews.

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view audit log items.

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to modify the steps of another user's private checklist.

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view portfolio rooms without the required permission.

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission.

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read external reports without the required permission.

Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users.

Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with sufficient privileges to perform the action.