CVE Vulnerability Catalog

In SQLBot prior to 1.9.0, an authenticated user can supply a crafted sheet["tableName"] value in the Excel datasource configuration, which is stored without safe identifier handling. When the datasource is deleted, the value is interpolated into SQL and executed by PostgreSQL, enabling second-order SQL injection.

In SQLBot prior to 1.9.0, the POST /api/v1/datasource/parseExcel endpoint uses attacker-controlled multipart filename data to select where uploaded content is stored, writes content before validation completes, and can transform a double-extension filename into a Python source file. The file lands in alembic/versions/ and is imported on SQLBot startup.

JabRef, a desktop application for managing BibTeX/BibLaTeX libraries, prior to 6.0-alpha.6 is vulnerable to shell command injection. When the built-in HTTP server (jabsrv) is enabled, the GET /better-bibtex/cayw endpoint accepts an external command query parameter, which on Unix-like systems is combined with citation keys and executed through sh -c without shell escaping.

yutu, an AI-powered toolkit for managing YouTube channels, prior to 0.10.9 allows writing files outside the permitted directory. The caption-download MCP tool accepts a caller-controlled file parameter that is passed to os.Create() without using the pkg.Root confinement boundary backed by YUTU_ROOT, enabling overwrite of any file writable by the process.

A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to can cause the driver to write uncontrolled data outside the bounds of a heap allocation while processing incoming encrypted traffic after the TLS handshake completes. No authentication or user interaction is required, because the affected processing occurs before any application-level authentication completes. Triggering this issue may lead to memory corruption in the client process, disclosure of adjacent heap memory, or termination of the process.

Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The vulnerability was rated High severity by Chromium.

Buffer overflow in PDFium in Google Chrome on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. The vulnerability was rated High severity by Chromium.

Type confusion in V8 in Google Chrome prior to 153.0.8010.52. A remote attacker using social engineering could execute arbitrary code inside the sandbox via a crafted HTML page. (Severity: High)

Incorrect reference resolution in Tracing in Google Chrome on Windows prior to 153.0.8010.52. A local attacker could potentially execute arbitrary code outside the sandbox via a local program. (Severity: High)

Jupyter Server, the backend for Jupyter web applications, prior to version 2.21.0 copies the Referer header into a JSON header block in the 5xx request logging path without applying the token scrubbing used for the request URI. A request returning HTTP 500 whose Referer contains a token-bearing URL can write that token to server logs in plaintext.

Paella Player is a set of libraries to create a multi stream video player. Prior to Paella Player 2.12.11 (as used in Opencast prior to 19.7 and 20.2), there is a potential XSS attack through closed captions cue text. This vulnerability is fixed in 2.12.11.

A stored cross-site scripting vulnerability exists in the Geomap panel's MapLibre base layer. A user with the Editor role can execute arbitrary JavaScript in another user's session by hosting a malicious style configuration, enabling escalation to Org Admin.

fulgur, a tool converting untrusted HTML/CSS to PDF, prior to version 0.19.0 sliced a body-direct child whose CSS-resolved height greatly exceeds the page height into one fragment per page with no upper bound. This can lead to excessive resource consumption or process hang.

fulgur, a tool converting untrusted HTML/CSS to PDF, prior to version 0.19.0 sliced a body-direct child whose CSS-resolved height greatly exceeds the page height into one fragment per page with no upper bound. This can lead to excessive resource consumption or process hang.

NetBox Device Type Library, a collection of community-sourced device type definitions for import into NetBox, is vulnerable due to the absence of tests/init.py and the lack of --import-mode=importlib, causing pytest prepend import mode to place the tests directory at the front of sys.path during collection. An unauthenticated contributor can add a module such as tests/git.py that shadows GitPython or tests/conftest.py, leading to arbitrary code execution on the GitHub Actions runner.

ITFlow, an IT documentation, ticketing and accounting system for small MSPs, prior to version 26.07 allows an authenticated user with module_support write permission and access to a credential record to perform time-based blind SQL injection through the expires parameter of the share_generate_link handler in agent/ajax.php. The expires parameter is inserted unquoted into the MySQL INTERVAL expression, allowing conditional database queries.

In ITFlow prior to version 26.07, an authenticated Technician or higher with access to at least one client invoice can inject SQL through the frequency parameter handled by agent/post/recurring_invoice.php. The parameter is sanitized but interpolated unquoted into DATE_ADD, allowing SQL syntax to escape the interval expression and expose database data.

In Speakr prior to 0.8.21-alpha, the csrf_exempt_for_api_tokens() hook permanently exempts a view from CSRF protection, and is_token_authenticated() treats any present token (including from URL query) as authenticated without validation. A network attacker can disable CSRF protection and perform cross-origin attacks.

In MapServer prior to 8.6.4, PostGIS filter translation in msPostGISLayerTranslateFilter() treats a filteritem as numeric when CONNECTIONTYPE POSTGIS and Integer metadata are configured, but does not verify that attacker-controlled CGI or OGC API Features input is a numeric literal. The unquoted input is concatenated into the SQL predicate, enabling SQL injection.

In Glean prior to 0.2.6, POST /api/feeds/discover passes an attacker-supplied feed_url to fetch and parse without network-level validation. A malicious feed can make the server request private, loopback, link-local, or cloud-metadata resources, with the response stored and retrievable via API.