CVE Vulnerability Catalog

Joplin prior to version 3.5.7 contains a path traversal vulnerability in the importer, allowing arbitrary file overwrite. The OneNote converter does not sanitize embedded file names, enabling ../.. sequences.

Claude HUD through version 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the COMSPEC environment variable. Attackers can set COMSPEC to an arbitrary binary path before claude-hud performs its version check, causing execFile() to execute the attacker-supplied executable with cmd.exe arguments, resulting in arbitrary code execution on Windows systems.

A vulnerability in the Summarize extension prior to version 0.15.1 allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links, causing the extension to make authenticated daemon requests using stored tokens without verifying event trustworthiness.

A path traversal vulnerability in Summarize prior to 0.15.1 allows authenticated attackers to write files to arbitrary directories via the slidesDir parameter in the /v1/summarize endpoint. Attackers can exploit this to write slide_*.png and slides.json files and subsequently delete matching files through repeated extraction.

A vulnerability in Microsoft Edge (Chromium-based) allows for remote code execution. An attacker can exploit this flaw to gain control over the user's system.

HSC MailInspector version 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint. The text parameter is used to construct file paths without adequate normalization or restriction to a safe base directory.

HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths. The endpoint /vendor/phpunit/phpunit.php processes user-controlled parameters, allowing unauthorized access to system files.

Thermo Fisher Scientific Torrent Suite Dx versions up to 5.14.2 has a privilege escalation vulnerability that may allow an authenticated user with limited access privileges to gain unauthorized administrator-level privileges through exploitation of specific system interfaces.

ngrok versions 4.3.3 and 5.0.0-beta.2 are vulnerable to Command Injection, which may allow an attacker to execute arbitrary system commands.

In tinyMQTT, due to a bug in handling CONNECT packets, the broker fails to close the TCP connection after receiving a packet with a zero-length Client ID when CleanSession is set to 0. This leads to server resource exhaustion with repeated connection attempts.

An issue in PrestaShop in the upsshipping module in all versions through at least 2.4.0 allows a remote attacker to obtain sensitive information via the /modules/upsshipping/logs/ and /modules/upsshipping/lib/UPSBaseApi.php components.

Offline Hospital Management System version 5.3.0 allows remote code execution due to improper Electron renderer configuration. The application enables Node.js integration while disabling context isolation, allowing JavaScript executed in the renderer process to access Node.js APIs and execute arbitrary operating system commands.

A flaw was found in GnuTLS in the DTLS packet reordering logic. The comparator function does not correctly handle packets with duplicate sequence numbers, leading to unstable ordering or undefined behavior, resulting in a denial of service.

In M-Files Server versions before 26.5.16015.0, before 26.2 LTS, and before 25.8 LTS SR3, a denial-of-service vulnerability exists. This allows an authenticated user to cause the MFserver process to crash.

There is a Stored XSS vulnerability in Basamak Information Technology Consulting and Organization Trade Ltd. Co.'s DernekWeb due to improper neutralization of input during web page generation.

A Remote Code Execution vulnerability in P4 (Helix Core) Server's Command-Line Client, prior to the 2025.2 Patch 2, has been fixed to address potential security risks.

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, and 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields in the Mattermost Calls plugin. This allows an attacker with access to a support packet to obtain TURN server credentials via the plaintext values present in the exported plugin configuration.

Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The set_add method did not check values for newlines, colons, or pipes, allowing additional metrics to be injected from untrusted sources.

The Ajax Load More WordPress plugin before version 7.8.4 does not sanitize and escape a parameter before outputting it back on the page, leading to a Reflected Cross-Site Scripting vulnerability.

The WP Maps plugin for WordPress before version 4.9.3 does not properly sanitize a parameter before using it in a file path, allowing authenticated users to perform Local File Inclusion attacks.