https://vulnogram.org/ Most recent CVEs assigned by STAR Labs SG Pte. Ltd. (star_labs). https://vulnogram.org/seaview/icons/star_labs.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-9539 https://vulnogram.org/CVE-2026-9539 An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a privileged guest VM attacker (root or CAP_NET_RAW) to… Medium Wed, 24 Jun 2026 04:37:01 GMT https://vulnogram.org/CVE-2024-7009 https://vulnogram.org/CVE-2024-7009 Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database. Medium Tue, 06 Aug 2024 03:40:33 GMT https://vulnogram.org/CVE-2024-7008 https://vulnogram.org/CVE-2024-7008 Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting. Medium Network Exploitable Tue, 06 Aug 2024 03:40:01 GMT https://vulnogram.org/CVE-2024-6782 https://vulnogram.org/CVE-2024-6782 Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution. Critical Network Exploitable Tue, 06 Aug 2024 03:39:20 GMT https://vulnogram.org/CVE-2024-6781 https://vulnogram.org/CVE-2024-6781 Path traversal in Calibre <= 7.14.0 allow unauthenticated attackers to achieve arbitrary file read. High Network Exploitable Tue, 06 Aug 2024 03:38:45 GMT https://vulnogram.org/CVE-2023-4225 https://vulnogram.org/CVE-2023-4225 Unrestricted file upload in `/main/inc/ajax/exercise.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files. High Tue, 28 Nov 2023 07:22:04 GMT https://vulnogram.org/CVE-2023-4226 https://vulnogram.org/CVE-2023-4226 Unrestricted file upload in `/main/inc/ajax/work.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files. High Tue, 28 Nov 2023 07:21:40 GMT https://vulnogram.org/CVE-2023-4224 https://vulnogram.org/CVE-2023-4224 Unrestricted file upload in `/main/inc/ajax/dropbox.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files. High Tue, 28 Nov 2023 07:19:31 GMT https://vulnogram.org/CVE-2023-4223 https://vulnogram.org/CVE-2023-4223 Unrestricted file upload in `/main/inc/ajax/document.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files. High Tue, 28 Nov 2023 07:18:16 GMT https://vulnogram.org/CVE-2023-4222 https://vulnogram.org/CVE-2023-4222 Command injection in `main/lp/openoffice_text_document.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters. High Tue, 28 Nov 2023 07:15:36 GMT https://vulnogram.org/CVE-2023-4221 https://vulnogram.org/CVE-2023-4221 Command injection in `main/lp/openoffice_presentation.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters. High Tue, 28 Nov 2023 07:13:51 GMT https://vulnogram.org/CVE-2023-4220 https://vulnogram.org/CVE-2023-4220 Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code exec… High Network Exploitable Tue, 28 Nov 2023 07:11:47 GMT https://vulnogram.org/CVE-2023-3545 https://vulnogram.org/CVE-2023-3545 Improper sanitisation in `main/inc/lib/fileUpload.lib.php` in Chamilo LMS <= v1.11.20 on Windows and Apache installations allows unauthenticated attackers to bypass file upload security protections and obtain remote code execution via uploading of `.… Critical Network Exploitable Tue, 28 Nov 2023 07:07:27 GMT https://vulnogram.org/CVE-2023-3533 https://vulnogram.org/CVE-2023-3533 Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via arbitrary fi… Critical Network Exploitable Tue, 28 Nov 2023 07:06:43 GMT https://vulnogram.org/CVE-2023-3368 https://vulnogram.org/CVE-2023-3368 Command injection in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. This is a bypass of CVE-2023-34960. Critical Network Exploitable Tue, 28 Nov 2023 07:05:26 GMT https://vulnogram.org/CVE-2023-1720 https://vulnogram.org/CVE-2023-1720 Lack of mime type response header in Bitrix24 22.0.300 allows authenticated remote attackers to execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege… Critical Network Exploitable Wed, 01 Nov 2023 09:04:46 GMT https://vulnogram.org/CVE-2023-1719 https://vulnogram.org/CVE-2023-1719 Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to (1) enumerate attachments on the server and (2) execute arbitrary JavaScript code in the victim's browser, and possibly execut… High Network Exploitable Wed, 01 Nov 2023 09:04:19 GMT https://vulnogram.org/CVE-2023-1718 https://vulnogram.org/CVE-2023-1718 Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted "tmp_url". High Network Exploitable Wed, 01 Nov 2023 09:04:03 GMT https://vulnogram.org/CVE-2023-1717 https://vulnogram.org/CVE-2023-1717 Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js in Bitrix24 22.0.300 allows remote attackers to execute arbitrary JavaScript code in the victim’s browser, and possibly execute arbitrary PHP code on the… Critical Network Exploitable Wed, 01 Nov 2023 09:03:46 GMT https://vulnogram.org/CVE-2023-1716 https://vulnogram.org/CVE-2023-1716 Cross-site scripting (XSS) vulnerability in Invoice Edit Page in Bitrix24 22.0.300 allows attackers to execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator pr… Critical Wed, 01 Nov 2023 09:03:24 GMT https://vulnogram.org/CVE-2023-1715 https://vulnogram.org/CVE-2023-1715 A logic error when using mb_strpos() to check for potential XSS payload in Bitrix24 22.0.300 allows attackers to bypass XSS sanitisation via placing HTML tags at the begining of the payload. Critical Wed, 01 Nov 2023 09:03:05 GMT https://vulnogram.org/CVE-2023-1714 https://vulnogram.org/CVE-2023-1714 Unsafe variable extraction in bitrix/modules/main/classes/general/user_options.php in Bitrix24 22.0.300 allows remote authenticated attackers to execute arbitrary code via (1) appending arbitrary content to existing PHP files or (2) PHAR deserializat… High Wed, 01 Nov 2023 09:02:47 GMT https://vulnogram.org/CVE-2023-1713 https://vulnogram.org/CVE-2023-1713 Insecure temporary file creation in bitrix/modules/crm/lib/order/import/instagram.php in Bitrix24 22.0.300 hosted on Apache HTTP Server allows remote authenticated attackers to execute arbitrary code via uploading a crafted ".htaccess" file. High Wed, 01 Nov 2023 09:02:18 GMT https://vulnogram.org/CVE-2023-4198 https://vulnogram.org/CVE-2023-4198 Improper Access Control in Dolibarr ERP CRM <= v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data Medium Wed, 01 Nov 2023 08:01:16 GMT https://vulnogram.org/CVE-2023-4197 https://vulnogram.org/CVE-2023-4197 Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code. High Wed, 01 Nov 2023 07:58:56 GMT https://vulnogram.org/CVE-2023-30591 https://vulnogram.org/CVE-2023-30591 Denial-of-service in NodeBB <= v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking `eventName.startsWith()` or `eventName.toString()`, while processing Socket.IO messages via crafted Socket.IO messages containing array or objec… High Network Exploitable Fri, 29 Sep 2023 05:06:43 GMT https://vulnogram.org/CVE-2023-2315 https://vulnogram.org/CVE-2023-2315 Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server High Tue, 26 Sep 2023 04:36:21 GMT https://vulnogram.org/CVE-2023-2971 https://vulnogram.org/CVE-2023-2971 Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malici… Medium Sat, 19 Aug 2023 05:45:35 GMT https://vulnogram.org/CVE-2023-2318 https://vulnogram.org/CVE-2023-2318 DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in the context of MarkText main window. This vulnerability can be exploited if a user copies tex… High Sat, 19 Aug 2023 05:43:56 GMT https://vulnogram.org/CVE-2023-2317 https://vulnogram.org/CVE-2023-2317 DOM-based XSS in updater/update.html in Typora before 1.6.7 on Windows and Linux allows a crafted markdown file to run arbitrary JavaScript code in the context of Typora main window via loading typora://app/typemark/updater/update.html in <embed> tag… High Sat, 19 Aug 2023 05:35:36 GMT https://vulnogram.org/CVE-2023-2316 https://vulnogram.org/CVE-2023-2316 Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/<absolute-path>". This vulnerability can be exploited if a user opens a mali… High Network Exploitable Sat, 19 Aug 2023 05:34:20 GMT https://vulnogram.org/CVE-2023-2110 https://vulnogram.org/CVE-2023-2110 Improper path handling in Obsidian desktop before 1.2.8 on Windows, Linux and macOS allows a crafted webpage to access local files and exfiltrate them to remote web servers via "app://local/<absolute-path>". This vulnerability can be exploited if a u… High Sat, 19 Aug 2023 05:31:48 GMT https://vulnogram.org/CVE-2023-3514 https://vulnogram.org/CVE-2023-3514 Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "… High Fri, 14 Jul 2023 04:53:31 GMT https://vulnogram.org/CVE-2023-3513 https://vulnogram.org/CVE-2023-3513 Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and triggerin… High Fri, 14 Jul 2023 04:49:59 GMT https://vulnogram.org/CVE-2023-2017 https://vulnogram.org/CVE-2023-2017 Server-side Template Injection (SSTI) in Shopware 6 (<= v6.4.20.0, v6.5.0.0-rc1 <= v6.5.0.0-rc4), affecting both shopware/core and shopware/platform GitHub repositories, allows remote attackers with access to a Twig environment without the Sandbox ex… High Mon, 17 Apr 2023 10:18:27 GMT