CVE Vulnerability Catalog

Volto is a ReactJS-based frontend for the Plone Content Management System. In versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a specific URL. This issue is fixed in versions 16.34.1, 17.22.2, 18.27.2 and 19.0.0-alpha.6.

Stalwart to serwer pocztowy i współpracy. W wersjach 0.13.3 i poniżej występuje podatność na nieograniczone przydzielanie pamięci w analizatorze protokołu IMAP, co pozwala zdalnym atakującym na wyczerpanie pamięci serwera, co może prowadzić do odmowy usługi.

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Broken Access Control vulnerability, identified in the get_relatorios_socios.php endpoint. This vulnerability allows unauthenticated attackers to directly access sensitive personal and financial information of members without requiring authentication or authorization. This issue is fixed in version 3.5.0.

WeGIA, an open-source web manager for charitable institutions, versions 3.4.12 and below contain an Open Redirect vulnerability in the control.php endpoint, specifically in the nextPage parameter (metodo=listarUmnomeClasse=FuncionarioControle). This allows attackers to redirect users to arbitrary external domains, enabling phishing campaigns, malicious payload distribution, or credential theft. The issue is fixed in version 3.5.0.

WeGIA versions 3.4.12 and below contain an SQL Injection vulnerability in the /pet/profile_pet.php endpoint, specifically in the id_pet parameter, allowing attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This issue is fixed in version 3.5.0.

Cross-site scripting (XSS) vulnerability in Secure Access versions prior to 14.10. Attackers with administrative access to the console can interfere with another administrator's access. Low attack complexity, no attack requirements, high privileges required, victim must participate. No impact to confidentiality or availability, low impact to integrity.

CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10. Attackers with access to the console can redirect victims to an arbitrary URL. The attack complexity is low, attack requirements are present, no privileges are required, and users must actively participate in the attack. Impact to confidentiality is low and there is no impact to integrity or availability. There are high severity impacts to confidentiality, integrity, availability in subsequent systems.

WeGIA, an open-source web manager for charitable institutions, versions 3.4.12 and below have a CSRF vulnerability. The delete operation for the Almoxarifado entity is exposed via HTTP GET without CSRF protection, allowing a third-party site to trigger the action using the victim's authenticated session. Fixed in version 3.5.0.

WeGIA versions 3.4.12 and below include an SQL Injection vulnerability in the /controle/control.php endpoint, specifically in the descricao parameter, allowing attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This issue is fixed in version 3.5.0.

MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements. Versions 4.0.1 and below do not enforce the tx gas limit in its send hooks. Send hooks can spend more gas than what remains in tx, combined with recursive calls in the wasm contract, potentially amplifying the gas consumption exponentially. This is fixed in version 4.0.2.

Server-side request forgery (SSRF) vulnerability in Secure Access prior to version 14.10. Attackers with administrative privileges can publish a crafted test HTTP request originating from the Secure Access server. High attack complexity, no attack requirements, user interaction required. No direct impact to confidentiality, integrity, or availability, low subsequent system impact to integrity.

Excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to version 14.10. Attackers with access to the local file system can read the Java keystore file. Low attack complexity, no attack requirements, low privileges required, no user interaction. Low impact to confidentiality, no impact to integrity or availability.

Nieautoryzowany port debugowania może umożliwić dostęp do systemu plików urządzenia.

Specyfikacja Matrix przed wersją 1.16 (tj. z wersją pokoju przed 12) nie zapewnia unikalności zdarzeń tworzenia. Może to prowadzić do problemów z identyfikacją i zarządzaniem zdarzeniami w systemie.

Specyfikacja Matrix przed wersją 1.16 (tj. z wersją pokoju przed 12 i rozwiązywaniem stanu przed 2.1) ma niedobory w rozwiązywaniu stanu.

SSH Tectia Server przed wersją 6.6.6 czasami pozwala atakującym na odczyt i modyfikację ruchu sesji użytkownika.

A Server-Side Request Forgery (SSRF) vulnerability in VitaraCharts 5.3.5 in fileLoader.jsp allows an attacker to send requests from the server to internal network resources.

AndSoft e-TMS v25.03 contains a reflected Cross-Site Scripting (XSS) vulnerability. An attacker can execute JavaScript code in the victim's browser by sending a malicious URL with parameters 'l, demo, demo2, TNTLOGIN, UO and SuppConn' in the path '/clt/LOGINFRM_VON.ASP'.

Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_TP.ASP'.

Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in '/clt/LOGINFRM_SIL.ASP'.