CVE Vulnerability Catalog

gpp-burgerportaal is a Dutch government citizen portal application. In versions before 2.0.3, 3.0.2, and 4.0.1, the name and email address of employees who publish content are exposed in network responses and can be discovered via browser developer tools. This issue has been patched in versions 2.0.3, 3.0.2, and 4.0.1; no known workarounds exist.

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, an Open Redirect vulnerability was identified in the control.php endpoint, specifically in the nextPage parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle). This vulnerability allows attackers to redirect users to arbitrary external domains, enabling phishing campaigns, malicious payload distribution, or user credential theft.

WeGIA, an open-source web manager for institutions, prior to version 3.5.1 contains a SQL Injection vulnerability in the /html/funcionario/dependente_documento.php endpoint, specifically in the id_dependente parameter. This allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. The vulnerability is fixed in 3.5.1.

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, a Reflected Cross-Site Scripting (XSS) vulnerability was identified in the /pet/profile_pet.php?id_pet= endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the id_pet parameter. This vulnerability is fixed in 3.5.0.

WeGIA, an open source web manager for institutions, prior to version 3.5.1 has a Reflected Cross-Site Scripting (XSS) vulnerability in the log parameter in configuracao_geral.php. An attacker can inject arbitrary JavaScript, which executes in the victim's browser. This vulnerability is fixed in 3.5.1.

WeGIA prior to 3.5.1 has a SQL Injection vulnerability in the /html/funcionario/cadastro_funcionario_pessoa_existente.php endpoint, specifically in the cpf parameter. Attackers can execute arbitrary SQL commands, compromising confidentiality, integrity, and availability of the database.

WeGIA prior to version 3.5.1 has a Reflected Cross-Site Scripting (XSS) vulnerability in the /html/atendido/cadastro_atendido_parentesco_pessoa_nova.php endpoint, allowing attackers to inject malicious scripts in the idatendido parameter. This vulnerability is fixed in 3.5.1.

WeGIA prior to 3.5.1 has a SQL Injection vulnerability in the /html/funcionario/dependente_listar.php endpoint, specifically in the id_funcionario parameter. Attackers can execute arbitrary SQL commands, compromising confidentiality, integrity, and availability of the database.

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database.

Path traversal vulnerability in Ivanti Endpoint Manager before version 2024 SU4. A remote unauthenticated attacker can achieve remote code execution, though user interaction is required.

In text-generation-webui versions through 3.13, a Local File Inclusion vulnerability exists in the character picture upload feature. An attacker can upload a text file containing a symbolic link to an arbitrary file path, allowing an unauthenticated attacker to read sensitive files on the server.

Omni before versions 1.1.5 and 1.0.2 may leak sensitive information via an API. The vulnerability affects Kubernetes management on bare metal, virtual machines, or in the cloud.

Prior to 1.1.5 and 1.0.2, a nil pointer dereference vulnerability in the Omni Resource Service allows unauthenticated users to cause a server panic and denial of service by sending empty create/update resource requests through the API endpoints.

Insecure deserialization in Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to escalate their privileges.

Insecure Direct Object Reference (IDOR) vulnerability with shipment addresses in Liferay DXP 2023.Q4.1 through 2023.Q4.5 allows remote authenticated users from one virtual instance to view the shipment addresses of a different virtual instance via the _com_liferay_commerce_order_web_internal_portlet_CommerceOrderPortlet_commerceOrderId parameter.

Vickey, a Misskey-based microblogging platform, has a vulnerability in versions prior to 2025.10.0 where unexpired email confirmation links can be reused multiple times to send repeated confirmation emails to a verified email address. This may result in unintended email traffic but does not expose user data. The issue was addressed in version 2025.10.0.

The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, data tampering, or privilege escalation. The vulnerability arises from using a shared cache directory instead of a user-specific one.

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5.

In the Linux kernel xfrm subsystem, xfrm_alloc_spi can assign SPI value 0, which is invalid (meaning no SPI). This adds the state to the byspi list, but __xfrm_state_delete does not remove it, leading to use-after-free on subsequent list traversal.