CVE Vulnerability Catalog

Student-Management-System up to commit f0c5f6842c5e8c431ff02b5260a565ca844df3a0 has a vulnerability in admin/deleteform.php where the sid argument leads to improper authorization.

Vulnerability in Student-Management-System (a4m4) up to commit f0c5f6842c5e8c431ff02b5260a565ca844df3a0. An unknown function in admin/ allows execution after redirect (open redirect). Remote attack possible.

A security vulnerability has been detected in decolua 9router up to version 0.4.0. The function isAuthenticated in src/dashboardGuard.js has improper authorization due to manipulation of the Host argument. The attack can be carried out remotely.

Lightweight Music Server (LMS) through 3.76.0 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by embedding malicious HTML in media file metadata tags such as GENRE, ARTIST, or ALBUM. Attackers can introduce a crafted media file into the victim's library, causing the payload to be saved during library scanning and executed automatically in the web interface due to tag content being rendered using Wt::TextFormat::UnsafeXHTML without sanitization.

A flaw was found in OpenShift Container Platform where completed pods with restartPolicy: Never do not count toward ResourceQuota pod limits, and Kubernetes events are not quota-scoped. A non-privileged user who can create pods in a namespace can exploit this to generate a large volume of events that accumulate in etcd, causing API server performance degradation across the cluster.

A SQL injection vulnerability was found in itsourcecode Content Management System 1.0 in the file /admin/edit_topic.php via the topic_id argument. The attack can be performed remotely, and the exploit is publicly available.

A segmentation violation in the gf_media_get_color_info function in GPAC/MP4Box before version 26.02.0 allows attackers to cause a Denial of Service (DoS) by supplying a crafted data file.

A heap use-after-free in the dasher_process function in GPAC/MP4Box before version 26.02.0 allows attackers to cause a Denial of Service (DoS) by supplying a crafted MPEG-2 file.

A segmentation violation in GPAC Project/MP4Box before 26.02.0 in the gf_isom_apple_set_tag_ex function allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.

A NULL pointer dereference in GPAC Project/MP4Box before 26.02.0 in the gf_ac4_pres_b_4_back_channels_present function allows attackers to cause a Denial of Service (DoS) via a crafted AC4 file.

A NULL pointer dereference in GPAC Project/MP4Box before 26.02.0 in the gf_odf_ac4_cfg_dsi_v1 function allows attackers to cause a Denial of Service (DoS) via a crafted AC4 file.

A heap buffer overflow in the m2tsdmx_send_packet function of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.

Firefox for iOS Reader View did not properly escape HTML tags in JSON-LD metadata, allowing a malicious page to inject markup that changed Reader View behavior and leaked sensitive URL parameters, potentially leading to arbitrary JavaScript execution in an internal origin. Fixed in version 151.2.

Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders, allowing a malicious page to include a placeholder string later substituted with JSON-LD data, potentially resulting in arbitrary JavaScript execution. Fixed in version 151.2.

Kernel software in a Guest/Host VM may send improper commands to GPU firmware, causing out-of-bounds writes. A logic error in address translation allows a compromised Host (Kernel) to perform arbitrary writes to firmware memory.

A SQL injection vulnerability was found in itsourcecode Content Management System 1.0 in the file /admin/add_sub_topic.php via the topic_id argument. The attack can be performed remotely, and the exploit is publicly available.

A SQL injection vulnerability was found in itsourcecode Content Management System 1.0 in the file /admin/update_ss_img.php via the topic_id argument. The attack can be performed remotely, and the exploit is publicly available.

A SQL injection vulnerability was found in itsourcecode Content Management System 1.0 in the file /save_comment.php via the Name argument. The attack can be performed remotely, and the exploit is publicly available.

Pharmacy Sales and Inventory System 1.0 has a vulnerability in the sell_statement function of application/controllers/ShowForm.php, leading to improper access controls.

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/. This manipulation causes file and directory information exposure. The attack can be initiated remotely. The exploit has been published and may be used.