CVE Vulnerability Catalog

Missing authorization check in STACKIT IaaS API allows authenticated low-privileged attackers to escalate privileges by attaching service accounts to VMs, leading to full organization compromise.

Vulnerability in OpenBullet2 up to version 0.3.2: authenticated remote code execution via creating or modifying job configurations. The plain C# execution mode lacks reference filtering, allowing access to the file system, process spawning, and arbitrary .NET API calls.

A vulnerability in OpenBullet2 through version 0.3.2 allows authenticated users to execute arbitrary commands by uploading script files (.bat, .ps1, .sh) through the FileProxySource proxy loading feature. Attackers can upload malicious script files as proxy sources, causing the server to execute the scripts and return output as proxy lines, resulting in arbitrary command execution on the host as the process user.

OpenBullet2 through version 0.3.2 contains a path traversal vulnerability in the wordlist endpoint, allowing authenticated attackers to read, write, and delete arbitrary files by supplying unsanitized absolute paths. Attackers can chain these operations to achieve remote code execution by manipulating critical system files such as /etc/passwd, as the application runs as root by default.

SQL injection vulnerability in imvks786 student_management_system (up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46) in admin/admin_login.php via a_usr/a_pwd arguments. Remote attack possible, exploit public.

SQL injection vulnerability in imvks786 student_management_system (up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46) in /index.ph via usr/pwd arguments. Remote attack, exploit public.

A memory allocation with excessive size vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. Affects versions 2.4.17 through 2.4.67.

In the Req library for Elixir, a vulnerability allows an attacker-controlled HTTP server to exhaust memory in a Req client via decompression-bomb response bodies, crashing the BEAM process.

Use After Free vulnerability in Apache HTTP Server mod_http2 in versions 2.4.55-2.4.67. Occurs when file handles are exhausted.

Bludit prior to version 3.22.0 has a vulnerability in the user management logic that allows deactivated accounts to maintain access via persistent authentication tokens. When an administrator disables a user account, the application fails to invalidate or clear the associated tokenAuth and tokenRemember fields in the JSON database. Consequently, any user with a pre-existing "Remember Me" cookie can bypass the account disablement and maintain a valid authenticated state.

Bludit prior to version 3.22.0 has a Broken Access Control flaw where active sessions remain valid even after the user account is deleted from the database. This allows revoked users to maintain unauthorized access.

Flowise prior to version 3.1.2 has a mass-assignment vulnerability in evaluator create and update that allows cross-workspace evaluator takeover.

Flowise prior to version 3.1.2 has a mass-assignment vulnerability in evaluation create and update that allows cross-workspace evaluation takeover.

Flowise prior to version 3.1.2 has a mass-assignment vulnerability in DatasetRow create and update that allows cross-workspace row takeover.

Flowise prior to version 3.1.2 allows cross-workspace dataset takeover via mass-assignment during dataset creation and update. This issue has been patched in version 3.1.2.

Flowise prior to version 3.1.2 allows cross-workspace template takeover via mass-assignment during CustomTemplate creation and update. This issue has been patched in version 3.1.2.

Flowise prior to version 3.1.2 allows cross-workspace assistant takeover via mass-assignment during assistant creation and update. This issue has been patched in version 3.1.2.

Flowise before version 3.1.2 lacks authentication and access control for OpenAI Assistants Vector Store CRUD endpoints. No authorization when using API key.

In the Linux kernel, Bluetooth HCI UART driver vulnerabilities lead to Use-After-Free (UAF) and data races. The issue stems from improper workqueue and synchronization management during close and init paths, potentially causing system crashes.

In the Linux kernel, a use-after-free (UAF) bug was found in io-wq in the io_wq_remove_pending() function. When cancelling hashed work in bucket 0, if the predecessor on the list is not hashed, a pointer to it is stored in wq->hash_tail[0], leading to write through freed memory after deallocation.