CVE Vulnerability Catalog

Vulnerability in Spring Cloud Function allows an OOM (Out of Memory) error through infinite recursion in the routing layer during request handling. It affects multiple versions of the library.

Kiteworks prior to version 9.3.0 has an IDOR vulnerability in Secure Data Forms. An authenticated attacker can modify approval flow configurations of other users' forms due to insufficient authorization checks on resource ownership.

Vulnerability in Bottelet DaybydayCRM up to 2.2.1. An unknown function in the Setting Handler component allows missing authentication. Remote exploitation is possible.

In Bottelet DaybydayCRM up to 2.2.1, an improper authorization vulnerability was found in the view function in app/Http/Controllers/DocumentsController.php. The attack can be performed remotely. A patch is recommended.

An OS command injection vulnerability was found in wezterm-mcp version 0.1.0 in the file src/wezterm_executor.ts. The attack can be performed remotely via the request.params.arguments.pane_id argument.

In ishayoyo excel-mcp up to version 1.0.2, the read_file/write_file functions in src/index.ts are vulnerable to path traversal via manipulation of the filePath/outputPath arguments. The attack can be launched remotely and the exploit has been publicly disclosed.

A vulnerability was found in j3k0 mcp-google-workspace up to commit 831790e7d5c2663325733d9f5579cc339a267c4c. The function saveToDisk in src/tools/gmail.ts has improper access controls. The attack can be initiated remotely and the exploit is public.

In hekmon8 Jenkins-server-mcp version 0.1.0, a server-side request forgery vulnerability exists in the jobPath function of src/index.ts. The attack can be performed remotely and the exploit has been disclosed.

In pip, console_scripts and gui_scripts were treated as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.

Sulu, an open-source PHP CMS based on Symfony, before versions 2.6.23 and 3.0.6 uses a weak cryptographic hash algorithm for password reset token and API key generation.

In Nextcloud prior to version 5.2.6, a missing permissions check allowed users to request reading form submissions of other users. This issue has been patched in version 5.2.6.

In Nextcloud, an open source content collaboration platform, versions 17.0.0 to before 17.0.15, 18.0.0 to before 18.1.12, 19.0.0 to before 19.1.16, 20.0.0 to before 20.1.11, and 21.0.0 to before 21.0.4, a user with READ and CREATE permission but no UPDATE permission can rename files in a team folder. This has been patched in versions 17.0.15, 18.1.12, 19.1.16, 20.1.11, and 21.0.4.

Nextcloud Server contains a vulnerability that allows a malicious user with access to a shared file to use the share token to directly access chunking uploads and view temporary part files during ongoing uploads. The issue affects versions from 32.0.0 to 32.0.8 and from 33.0.0 to 33.0.2.

Nextcloud versions 33.0.0 through before 33.1.0 contain a vulnerability in the Android app. After unlocking a locked Android phone, the back-button could bypass the Nextcloud Files app PIN.

Vulnerability in the Billy library (Go) before versions 5.9.0 and 6.0.0-alpha.1. Multiple components improperly handle crafted input, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.

Path Traversal vulnerability in the Classified Listing plugin (WordPress) through version 5.3.8. Allows an attacker to access files outside the restricted directory.

The myCred plugin is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.0.4. Improper neutralization of input during web page generation allows attackers to inject malicious scripts that are then executed in other users' browsers.

The GeoDirectory plugin for WordPress has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This issue affects versions from n/a through 2.8.157.

Buffer overflow vulnerability in OpenSC up to 0.26.1. The test_kpgen_certwrite function in pkcs11-tool.c can be exploited remotely, though exploitation is difficult.

Vulnerability in aem-mcp-server (indrasishbanerjee) allows SSRF (Server-Side Request Forgery) by manipulating the assetPath argument in the getAssetMetadata function. Affects versions up to b5f833aef9b5dfd17a5991b3b18a8a11edbdc583.