CVE Vulnerability Catalog

A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unknown code of the file gptqmodel/nn_modules/qlinear/tritonv2.py of the component Triton dequantization kernel. Such manipulation of the argument g_idx leads to out-of-bounds read. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.3.0 is able to resolve this issue.

A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Controllers/AttachmentController.php of the component Attachment Edit Endpoint. The manipulation of the argument ID results in improper access controls. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as 4e406c41c4c8060a5795e74c66fb96362e54f400.

Vulnerability involving incorrect access control in the Tools::getRemoteAddr() function in PrestaShop, which allows the client’s IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processes the IP address string and uses the address controlled by the visitor rather than the one provided by the trusted infrastructure, allowing an unauthenticated remote attacker to cause the application to interpret their connection as originating from an arbitrary IP address.

Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-fly decryption scheme.

A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the function getOption of the file travel/src/main/java/com/controller/CommonController.java. The manipulation of the argument tableName/columnName leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is d44ec3aa0bd2a72c8800e3befb0a9a96a6491b86.

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 involving an unknown function of the file cict_portal.sql. Manipulation leads to cleartext storage of sensitive information. The attack can be launched remotely and the exploit is publicly available.

The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation.

An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs.

The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths.

A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 involving an unknown function of the file auth_process.php in the Login component. This manipulation causes session fixation. The attack can be initiated remotely and the exploit is publicly disclosed.

A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 involving an unknown function of the file manage_subjects.php. Manipulation of the arguments msg/title/content results in cross site scripting. The attack may be performed remotely and the exploit is public.

A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 affecting the register function of the file auth.php. Manipulation of the argument role results in improper privilege management. Remote exploitation is possible and the exploit is public.

A security vulnerability has been detected in projeto-siga siga up to 11.0.2.10/11.0.2.13/11.1.1 affecting the function ExAutenticacaoController.autenticar of the file sigaex/src/main/java/br/gov/jfrj/siga/vraptor/ExAutenticacaoController.java in the Authentication Flow component. Manipulation of the arguments cod/jwt leads to missing authorization. The attack may be launched remotely and the exploit is public. The project was informed but has not responded.

Missing authorization vulnerability in FluentCMS up to 0.0.5, affecting the GetAccessible function in PermissionManager.cs. Manipulation results in missing authorization. The attack can be initiated remotely, and the exploit is public.

SQL injection vulnerability in itsourcecode Sales and Inventory System 1.0, affecting an unknown function in /pages/settings_edit.php. Manipulating the ID argument leads to SQL injection. The attack may be performed remotely, and the exploit is public.

An out-of-bounds write caused by numeric truncation in Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16_MAX. Affects version 5dc93606abd42b859045add05d704a038e197359.

A vulnerability was found in itsourcecode Sales and Inventory System 1.0, specifically in the file /pages/emp_edit1.php. Manipulation of the ID argument leads to SQL injection. The attack can be performed remotely, and the exploit has been published.

A vulnerability was detected in itsourcecode Information System Society Membership System 1.0, in the file /society/check_student.php. Manipulation of the student_id argument leads to SQL injection. Remote exploitation is possible, and the exploit has been publicly disclosed.

A vulnerability was found in itsourcecode Sales and Inventory System 1.0, in the file /pages/us_transac.php. Manipulation of the Username argument leads to SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed.