CVE Vulnerability Catalog

The Prague theme by Fox-themes versions up to 2.2.8 has a Reflected XSS vulnerability due to improper input neutralization during page generation. An attacker can inject malicious script via a crafted URL, which executes in the victim's browser.

In FreeIPMI before version 1.6.18, a vulnerability was found in the ipmi-oem tool where response messages for the 'dell get-active-directory-config' and 'fujitsu get-sel-entry-long-text' subcommands cause buffer overflows.

SQL Injection vulnerability in the administrative panel of SourceCodester Pizzafy E-Commerce System 1.0. The Login function in /admin/admin_class_novo.php allows manipulation of the Username argument, enabling remote SQL injection. The exploit is publicly available.

Denial of service vulnerability in Cpanel::JSON::XS for Perl before version 4.41. Specially crafted input with a UTF-8 BOM prefix can cause the Perl interpreter to crash when a decode filter callback throws an exception.

Type confusion in Cpanel::JSON::XS before 4.41 for Perl with dupkeys_as_arrayref enabled. decode_hv() dereferences a non-reference scalar as a reference, causing crashes.

A vulnerability in SourceCodester Online Food Ordering System 2.0. The include function in /index.php allows remote file inclusion via manipulation of the page argument. The attack can be launched remotely and the exploit is public.

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete file records through `DELETE /api/files` that the owner has reused across multiple agents. The deletion removes the file globally — not just from the shared agent — breaking the owner's other private agents that reference the same `file_id`. The private agent retains a stale `file_id` reference that no longer resolves. A shared-agent editor can destroy files that the owner uses across multiple agents. The owner's private agents — which the attacker has no access to — break silently with stale `file_id` references. This is a cross-agent integrity violation: editing access to one agent should not affect another. Version 0.8.4 contains a patch.

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU resources.

GLPI versions 11.0.0 through 11.0.6 allow a technician to store an XSS payload in ITIL costs. This issue has been fixed in version 11.0.7.

A sandbox escape vulnerability in alf.io, an open source ticket reservation system, allows an authenticated administrator to execute arbitrary OS commands on the server via the extension mechanism.

LibreChat is a ChatGPT clone supporting multiple AI providers. In versions up to 0.7.6, an IDOR vulnerability exists in the API keys management endpoint (PUT /api/keys). Due to the use of the spread operator after setting the authenticated user's ID, any authenticated user can inject a userId parameter to overwrite another user's API keys (e.g., OpenAI, Anthropic, Azure). An attacker can route victim's conversations through attacker-controlled keys or deny service.

Docker Desktop 4.76.0 fixes a VM panic caused by unbounded recursion in the grpcfuse kernel module when deeply nested directories are created on a bind-mounted host folder and a dentry invalidation event is triggered.

Denial of service vulnerability in Dräger Core 1.0.5 and Dräger M540 Converter Service 1.0.9. Attackers on the hospital network can send specially crafted, unencrypted SDC messages during discovery, causing high CPU load and blocking further SDC message processing.

Dräger Infinity Acute Care System and Infinity M540 patient monitors versions VG4.1.1, VG4.0.3, and lower (VG4.2 partially affected) have a network message handling vulnerability. Remote attackers can inject spoofed data, modify device settings (e.g., alarm states), or overwhelm the system with traffic, causing reboot and loss of network functionality.

Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions, allowing local attackers to execute arbitrary code with elevated privileges.

Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions, allowing local attackers to execute arbitrary code with elevated privileges.

authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a source connection and an account in one of the configured sources can log into any account.

BrowserStack Runner through version 0.9.5 has a remote code execution vulnerability in the /_log HTTP handler. An unauthenticated network-adjacent attacker can submit crafted JSON requests that are passed to vm.runInNewContext() with eval(), allowing escape from the Node.js sandbox and full remote code execution.

authentik, an open-source identity provider, prior to versions 2025.12.5, 2026.2.3, and 2026.5.1, is vulnerable to XML Signature Wrapping in the SAML Source ACS endpoint when validating upstream SAML responses. An attacker with any account at the upstream IdP can reuse a valid signed assertion to authenticate as another federated user.

Student Admission System 1.0 by code-projects contains an SQL injection vulnerability in the /index.php file via manipulation of the eid/did arguments. The attack can be carried out remotely, and the exploit has been published.