CVE Vulnerability Catalog

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown opcodes bypass the normal maximum frame size handling and payload allocation occurs before the opcode is validated.

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0 in an unknown function of the file saveuser.php in the User Creation component. Manipulation of the argument position results in missing authentication. The attack may be initiated remotely and the exploit is now public.

In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incorrectly evaluates multi-segment allow rules whose first path segment is a wildcard. An authenticated workload with restricted access can submit a CompleteStateRequest or UpdateStateRequest with an empty field mask, which may be incorrectly authorized, allowing read of the complete cluster state or modification outside its authorized subtree.

A weakness has been identified in SourceCodester Online Voting System 1.0 affecting an unknown function of the file /voting/ajax.php?action=save_category. Manipulation of the argument Category causes SQL injection. The attack can be initiated remotely and the exploit has been made public.

In OpenVPN through 2.6.22 and 2.7.6, retransmissions of ACK packet ID allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow.

A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access Control Point (RACP) write handler allows an authenticated BLE peer to overflow a 20-byte static buffer into adjacent BSS memory. The exploitable impact cannot be predetermined and depends on the linker-assigned BSS layout of the specific firmware build.

A weakness has been identified in jaychouchannel Tourism-Management-System up to commit 8122bf020d91199eddfff3ee02d1632a70a9a132. An unknown function in file travel/src/main/java/com/controller/CommonController.java of component CommonDao is affected. Manipulating arguments table/column/xColumn/yColumn can lead to SQL injection. The attack can be launched remotely and the exploit has been made public. The product does not use versioning, but a patch d44ec3aa0bd2a72c8800e3befb0a9a96a6491b86 is available.

An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject. The vulnerability affects the Windows platform.

OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps.

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the user running Ant in versions prior to Ant 1.10.18.

When using the Direct XIP update strategy, the main application image starts other cores (e.g., radio core) based on the currently active slot without additional verification. MCUboot in the bare (upstream) configuration assumes that if there is at least a single slot for each image available, the system is bootable and continues the boot process. This may lead to a situation where MCUboot picks different slots for different images, resulting in booting the main application from one slot and starting the radio image from an unauthenticated slot.

A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. An unknown function in the file delete_exam.php is affected. Manipulation of the argument ID leads to authorization bypass. The attack can be carried out remotely and the exploit has been disclosed publicly.

A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing in the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely and the exploit has been published.

A weakness has been identified in projeto-siga siga up to 11.1.1. The function DownloadExterno.getUrl in the HTML-to-PDF Endpoint component is affected. Manipulation of the html argument causes server-side request forgery, which can be initiated remotely. The exploit has been made public.

An unrestricted upload vulnerability in U+Smart Enjoyment WebSite 18.6001.1096.1000, affecting an unknown function in /Report/Upload/UploadFormImg.ashx. Manipulating the File argument allows remote arbitrary file upload. The exploit is public.

SQL injection vulnerability in itsourcecode School Management System 1.0, affecting an unknown function in User_Login.php. Manipulating the email argument leads to SQL injection. The attack can be executed remotely, and the exploit is public.

Out-of-bounds write vulnerability in Samsung Opensource Walrus, allowing buffer overflows. Affects version af80e665ea49d9003695a66502f841ed1d8397e7.

Authorization bypass vulnerability in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8, affecting the orderRecordsService.cancelOrder function in OrderController.java. Manipulating the ID argument allows remote authorization bypass. The exploit is public.

Authorization bypass vulnerability in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8, affecting the updateOrderSta1/updateOrderdiseaseInfo functions in OrderController.java. Manipulating userID/id arguments leads to remote authorization bypass. The exploit is public.

Authorization bypass vulnerability in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8, affecting an unknown function in OrderController.java. Manipulating the userIdenf argument leads to remote authorization bypass. The exploit is public.