CVE Vulnerability Catalog

Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation requires user interaction – a victim must open a malicious file.

Adobe Framemaker versions 2022.8 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to access sensitive files or data on the system. Exploitation requires user interaction – a victim must open a malicious file.

Chamilo LMS versions prior to 2.0.0-RC.3 have an IDOR vulnerability in the notebook module. An authenticated student can read private notes of any other user by manipulating the notebook_id parameter in the editnote action. The application fetches note content without ownership verification.

Docmost is open-source collaborative wiki and documentation software. In versions from 0.3.0 to 0.71.0, improper authorization allows a low-privileged authenticated user to overwrite another page's attachment within the same workspace by supplying a victim attachmentId to POST /api/files/upload. This is a remote integrity issue requiring no victim interaction. Version 0.71.0 contains a patch.

In Docmost prior to 0.71.0, improper neutralization of attachment URLs allows a low-privileged authenticated user to store a malicious `javascript:` URL inside an attachment node. When another user views the page and activates the link, attacker-controlled JavaScript executes in the Docmost context.

Docmost prior to 0.70.0 is vulnerable to XSS via MIME type spoofing. An attacker can inject malicious script that executes in the victim's browser.

Docmost open-source collaborative wiki software, versions 0.70.0 through 0.70.2, has an authorization bypass vulnerability in the public search endpoint, allowing unauthenticated users to enumerate and retrieve hidden child page titles and text snippets.

The Nexi XPay plugin for WordPress versions up to 8.3.0 contains an unauthorized data modification vulnerability due to missing authorization checks on the redirect function. This allows unauthenticated attackers to mark pending WooCommerce orders as paid/completed.

Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, a Stored Cross-Site Scripting (XSS) vulnerability exists in the social post attachment upload functionality. An authenticated user can upload a malicious HTML file containing JavaScript via the /api/social_post_attachments endpoint. The file is served without sanitization, content type restrictions, or Content-Disposition header, causing JavaScript execution in the application context. This can lead to session hijacking, account takeover, privilege escalation, and other actions. This issue has been fixed in version 2.0.0-RC.3.

October CMS versions prior to 3.7.14 and 4.1.10 contain a stored cross-site scripting vulnerability in the SVG sanitization logic. The regex pattern used to strip event handler attributes could be bypassed using a crafted payload, allowing malicious SVG files to be uploaded through the Media Manager with embedded JavaScript. Exploitation could lead to privilege escalation if a superuser views or embeds the malicious SVG, and requires authenticated backend access with media upload permissions.

October CMS before versions 3.7.14 and 4.1.10 contains a server-side information disclosure vulnerability in the INI settings parser. PHP's parse_ini_string() supports ${} syntax for environment variable interpolation, allowing attackers with Editor access to inject patterns like ${APP_KEY}, leading to exposure of sensitive environment variables.

Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Divide By Zero vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application or render it unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction – the victim must visit a crafted webpage.

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are vulnerable to DOM-based XSS. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. User interaction is required – the victim must visit a crafted page.

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are vulnerable to DOM-based XSS. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. User interaction is required – the victim must visit a specially crafted page.

A reflected Cross-Site Scripting (XSS) vulnerability in Radware Alteon 34.5.4.0 vADC load-balancer allows an attacker to inject malicious scripts into the website.

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker can trick a victim into visiting a crafted URL, leading to execution of malicious JavaScript in the victim's browser. Scope is changed.

A vulnerability in Windows Snipping Tool exposes sensitive information to an unauthorized actor, allowing an attacker to perform network spoofing.

Microsoft Office Word has an out-of-bounds read vulnerability that allows an unauthorized attacker to disclose information locally.

Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.