CVE Vulnerability Catalog

In imvks786 student_management_system up to commit 9599b560ad3c3b83e75d328b76bedcd489ef1f46, a vulnerability exists in the Student Deletion Endpoint (/see.php) due to improper authorization. Manipulation of the del argument leads to unauthorized access. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The product uses rolling release, so no version details are available. The project was informed but has not responded.

A weakness has been identified in imvks786 student_management_system up to commit 9599b560ad3c3b83e75d328b76bedcd489ef1f46. An unknown function in the file /add.php of the Student Record Handler component is affected. Executing a manipulation can lead to improper access controls. The attack may be performed remotely. The exploit has been made public and could be used for attacks. The project uses a rolling release system, so version information is not disclosed. The project was informed but has not responded.

Flowise prior to version 3.1.2 does not strip the encryptedData field from API responses when fetching credentials with a credentialName filter. Without the filter the field is omitted, but with the filter it is not, leading to leakage of encrypted data.

Apache HTTP Server 2.4.67 and earlier has an Improper Privilege Management vulnerability that allows local .htaccess authors to read files with the privileges of the httpd user.

Apache HTTP Server versions 2.4.0 through 2.4.67 contain an out-of-bounds read vulnerability in mod_headers and mod_mime when handling multiple response languages. The vulnerability can be exploited remotely.

A mass assignment vulnerability in the tool update endpoint of Flowise allows authenticated users to modify server-controlled properties such as workspaceId, breaking tenant isolation in multi-workspace environments.

In Apache HTTP Server 2.4.67 and earlier, a cross-site scripting (XSS) vulnerability exists in mod_proxy_ftp's HTML directory list generation when listing FTP directory contents via forward or reverse proxy configuration.

A SQL injection vulnerability was detected in designcomputer mysql-mcp-server up to version 0.2.2 in the read_resource function of src/mysql_mcp_server/server.py in the mysql URI Handler component via manipulation of the uri_str argument. The attack can be carried out remotely, and the exploit has been publicly disclosed. The issue is fixed in version 0.3.0.

In the Linux kernel, the custom vblank timer in the DRM vkms driver was replaced with the DRM implementation. The corresponding hrtimer in struct vkms_output was removed, and timeout code is now called via DRM.

OfflineIMAP before version 8.0.3 trusts the server's STARTTLS capability prior to authentication, allowing STRIPTLS/man-in-the-middle attacks. An attacker can hijack the connection and extract account credentials in cleartext.

QloApps through version 1.7.0 contains a stored cross-site scripting vulnerability in the admin file manager. Authenticated administrators can inject malicious JavaScript by uploading crafted SVG files with embedded event handlers such as onload.

In bank-management-system-springboot up to commit 7b9bcc65ad7df3db29af71aed9bb500e5f24d948, a vulnerability exists in TransactionController.java at the Transaction endpoint. Manipulation leads to improper authorization, allowing remote attack. Exploit is publicly available.

A vulnerability in SourceCodester Inventory System 1.0 in the file /Product_Inventory/api/users_handler.php of the Account Creation Handler component allows manipulation of the ROLE argument, leading to improper authorization and remote attack.

SourceCodester Inventory System 1.0 has a cross-site scripting (XSS) vulnerability in /users.php (User Management Page) via the fullname and username parameters. The attack is remotely exploitable and the exploit is publicly available.

UTT HiPER 2610G router up to version 3.0.0-171107 has a buffer overflow in the strcpy function of the file /goform/formNatStaticMap when manipulating the NatBinds argument. The exploit has been made public and could be used.

Stored XSS in service discovery active check output in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 allows an admin to inject malicious HTML/JavaScript into check output.

Improper neutralization of HTML-encoded characters in URL validation in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 allows an authenticated user to bypass URL validation and inject malicious URLs like javascript: URIs, leading to XSS.

Stored XSS in global settings change log in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 allows an admin to store malicious HTML/JavaScript in changelog messages.

Checkmk before version 2.5.0p5 has an incorrect authorization vulnerability in the User Messages dashboard widget. Message-fetching endpoints return the dashboard creator's messages instead of the viewer's, allowing an attacker with a valid public dashboard share token to read the issuer's personal messages.

Stored XSS in URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 allows a user with dashboard editing permissions to store a URL with a dangerous URI scheme like javascript:.