CVE Vulnerability Catalog

The Crypt::ScryptKDF library for Perl up to version 0.010 uses an insecure random number source (rand()) when no CSPRNG modules are available. The random_bytes function falls back to the built-in rand(), weakening cryptography.

Vulnerability in Mojolicious::Plugin::Statsd for Perl up to version 0.04 allowed metric injections. Metric names and set values were not checked for newlines, colons or pipes. Metrics from untrusted sources could inject additional statsd metrics.

A vulnerability was found in SourceCodester eDoc Doctor Appointment System 1.0 in the file /admin/delete-session.php. Manipulation of the ID argument leads to missing authorization. Remote attack is possible and the exploit has been publicly disclosed.

Prometheus from version 2.49.0 to before 3.5.3 and 3.11.3 contains an XSS vulnerability in the legacy web UI (enabled via --enable-feature=old-ui). In the histogram heatmap chart view, 'le' label values are not properly escaped, allowing an attacker to inject JavaScript via crafted metrics.

SharpCompress 0.47.4 and earlier has a path traversal vulnerability in IArchive.WriteToDirectory(). A malicious archive can create directories outside the extraction root. For TAR archives, this can be escalated to arbitrary file writes via symlinks.

The OpenTelemetry.Exporter.Instana NuGet package prior to version 1.1.0 does not validate HTTPS/TLS certificates when sending telemetry to a configured Instana backend via a proxy defined by the INSTANA_ENDPOINT_PROXY environment variable. A network attacker capable of Man-in-the-Middle (MitM) attacks on the proxy connection can intercept all OpenTelemetry telemetry data and the Instana API key.

An off-by-one error in gnutls in PKCS#12 bag element bounds check. A remote attacker can write past the internal array when the bag already contains 32 elements, causing memory corruption and potential DoS.

A logic issue was addressed with improved restrictions in macOS Tahoe 26. This issue allowed an app to access sensitive user data.

macOS Tahoe 26 addresses an out-of-bounds read issue with improved bounds checking. An app may cause unexpected system termination.

In macOS Tahoe 26, vulnerable code was removed to address a permissions issue that could allow an app to access sensitive user data.

A permissions issue in macOS Sequoia 15.7, Sonoma 14.8, and Tahoe 26. An app may be able to modify protected parts of the file system.

macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26 fix a logic issue that could allow a malicious app to access sensitive user data.

A weakness in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0 was found in the /index.php file of the SQL Handler component. Manipulation can lead to information exposure through error messages.

A Cross-Site Request Forgery (CSRF) vulnerability has been discovered in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The attack can be performed remotely, and the exploit has been publicly released.

In JeecgBoot up to version 3.9.1, a vulnerability was identified in an unknown function of the file /sys/comment/add, leading to improper access controls. The attack can be executed remotely. The exploit is publicly available and might be used. Upgrading to version 3.9.2 resolves the issue.

In JeecgBoot up to version 3.9.1, a vulnerability was found in the function user.getUsername of the file /sys/user/login/setting/userEdit of the SysUser component. Manipulation of the argument userIdentity results in improper access controls. The attack may be launched remotely. The exploit has been made public. Upgrading to version 3.9.2 is recommended.

Oban Web versions 2.12.0 before 2.12.5 have an uncontrolled resource consumption vulnerability in the Elixir.Oban.Web.CronExpr module. An attacker with cron job scheduling access can submit a malicious cron expression that, when viewed on the dashboard, allocates about 2.4 GB of memory, stalling or crashing the BEAM node.

In oban_web (Elixir.Oban.Web.Jobs.DetailComponent), the handle_event("save-job", ...) handler lacks authorization, allowing an authenticated user with read-only access to overwrite a job's worker field with any other Oban.Worker module. Other handlers (cancel, delete, retry) check permissions, but save-job does not.

epa4all-client version 1.2.4 and earlier allows any network-reachable caller to write arbitrary documents to any patient's electronic health record using the institution's SMC-B card. In a misconfigured deployment (e.g., following the Docker example in the README), this is exploitable from the local network without credentials.