CVE Vulnerability Catalog

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by a Path Traversal vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended restrictions. Exploitation requires user interaction in that a victim must extract a maliciously crafted file.

Reflected XSS vulnerability in OSCAL-GUI allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious content through the project request parameter in oscal-forms.php. The parameter value is URL-decoded and assigned to project_id without sanitization, then reflected in an error message without encoding.

OpenClinic GA 5.351.19 contains a reflected cross-site scripting vulnerability in the DICOM image upload handler that allows attackers to execute arbitrary JavaScript in a victim's browser by embedding malicious payloads in DICOM file metadata fields.

Out-of-bounds read vulnerability in Acrobat Reader (versions 24.001.30365, 26.001.21651 and earlier). An attacker can leverage this to disclose sensitive memory contents. User interaction is required – the victim must open a malicious file.

ColdFusion versions 2023.19, 2025.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. The vulnerable component is restricted to an administrative network zone by default. Scope is changed.

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation requires user interaction – the victim must open a malicious file.

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. Exploitation requires user interaction – opening a malicious file.

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could disclose sensitive memory. Exploitation requires user interaction to open a malicious file.

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

OSCAL-GUI contains a reflected XSS vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious input through the project request parameter. Attackers can craft a malicious URL that breaks out of the JavaScript string and HTML attribute context in the onload event handler, leading to script execution when the link is clicked.

Evoluted PHP Directory Listing Script up to 4.0.5 has a reflected XSS vulnerability in index.php. The dir parameter is reflected without HTML encoding in the title element and breadcrumb href attributes. Attackers can inject arbitrary JavaScript.

Dreamweaver Desktop versions 21.7 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. Exploitation requires user interaction – opening a malicious file. Scope is changed.

Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation requires user interaction – the victim must open a malicious file. Scope is changed.

Ellucian Banner Self-Service before the April 2025 release (2025-04-23) contains a stored XSS vulnerability in the course search functionality that allows authenticated Banner ERP users to inject malicious payloads into faculty and course fields by exploiting missing HTML encoding during DOM insertion. An attacker with write access can store malicious JavaScript in fields like displayName, emailAddress, subjectDescription, or courseTitle; these values are then served unsanitized by the unauthenticated getFacultyMeetingTimes API endpoint, causing script execution in any user's browser who views the affected course's meeting times.

Ellucian Banner Self-Service before the April T2 release (2025-04-23) contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting unsanitized input through the toDateFormat request parameter in the dateConverter endpoint. Attackers can craft a malicious URL targeting the unauthenticated dateConverter endpoint to steal session cookies or perform other malicious actions in the context of the victim's browser session.

Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this to achieve Elevation of Privileges.

SemCms 5.0 is vulnerable to Cross-Site Request Forgery (CSRF) via a crafted POST request to /admin/semcms_user.php.

Tenda G0 router version 15.11.0.5 contains multiple stack overflows in the formSetDebugCfgr function via the enable, level, and module parameters. Attackers can exploit these to cause a Denial of Service (DoS) via a crafted HTTP request.

Tenda O3 router firmware v1.0.0.5(4180) has a stack overflow in the username parameter of the R7WebsSecurityHandler function. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.

A stack overflow vulnerability was discovered in the param_1 parameter of the formSetCfm function in Tenda W3 Wireless Router firmware version 1.0.0.3(2204). This flaw allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.