Cisco Unified Communications Manager Improper Access Control Vulnerability

A vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulnerability is due to improp...

CrawlSEO encryption issue vulnerability

Versions of crawlseo prior to 0.2.5 contain an encryption vulnerability. This vulnerability arises because Google OAuth access tokens and refresh tokens are stored unencrypted in the User.googleTokens column. Attackers with database read permissions can read these plaintext long-lived refresh...

KNIME Business Hub authorization issue vulnerability

Versions of KNIME Business Hub prior to 1.19.0 contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks; attackers with access to the DataApp “no-login link” may list and access other user jobs created via that link...

WordPress Page and Post Restriction authorization issue vulnerability

WordPress Page and Post Restriction versions 1.6.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may allow attackers to exploit improperly configured access control levels...

Zenorzz Goploy authorization issue vulnerability

Zenorzz Goploy versions 4.0.0-beta.1 and earlier contain an authorization issue vulnerability. This vulnerability arises from authorization bypass via user-controlled keys, which can be exploited due to improperly configured access control security levels...

Grav permission and access control issues vulnerability

Versions prior to Grav 1.4.17, specifically 1.4.0, contain a permission and access control vulnerability. This issue arises because the generic /api/v1/flex-objects/pages API route only checks for directory-level permissions on admin.pages; it fails to enforce the api.pages.read/write permissions...

Knime Business Hub permission and access control issue vulnerability

Versions of KNIME Business Hub prior to 1.19.0 contain a permission and access control vulnerability. This vulnerability arises because network access between execution contexts is unrestricted. Authenticated remote users can access open network ports on executors within different execution...

Berri AI LiteLLM permission and access control vulnerability

A security vulnerability exists in Berri AI LiteLLM versions from 1.87.0 up to and including 1.100.4, from 1.101.0 up to and including 1.101.3, from 1.102.0 up to and including 1.102.2, from 1.103.0 up to and including 1.103.1, and from 1.104.0-rc.1 up to and including 1.104.0-rc.2. This...

WordPress eRoom authorization issue vulnerability

WordPress eRoom versions 1.7.1 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may lead to exploitation of improperly configured access control levels...

Cisco Expressway Series Information Disclosure Vulnerability

A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to insufficient authorization checks of HTTP requests during Mobile and Remote Access MRA provisioning. An attacker could...

Drupal Webform Submissions Delete authorization issue vulnerability

Drupal Webform Submissions Delete: Versions 0.0.0 through 1.2.0 contain an authorization issue vulnerability. This flaw stems from a lack of authorization validation, potentially allowing attackers to access unauthorized resources via forced browsing...

WordPress PowerPack Addons for Elementor authorization issue vulnerability

WordPress PowerPack Addons for Elementor versions 3.1.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may lead to exploitation of improperly configured access control levels...

Grav permission and access control issues vulnerability

Versions of Grav from 3.6.0 up to and including 3.9.13 contain a permission and access control vulnerability. This flaw arises because the login.invite task lacks proper authorization checks. As a result, page authors can define invitation forms granting superuser privileges within the frontmatte...

Lotus SQL injection vulnerability

Lotus 0.10.2 and earlier versions contain an SQL injection vulnerability. This vulnerability arises because the billable metric propertyname and category filter values are rendered directly into Jinja-generated queries for counting, dashboards, and rate metrics without proper escaping. As a resul...

PHPOffice PhpSpreadsheet input validation error vulnerability

PHPOffice PhpSpreadsheet versions 1.30.7, 2.1.19, 2.4.8, 3.10.8, and earlier versions prior to 5.10.0 contain a security vulnerability. This vulnerability arises because the DOCTYPE detection mechanism in XmlScanner::scan fails to account for ISO-2022 escaped sequences within XLSX XML sections. A...

Drupal Webform permission and access control issues vulnerability

Versions prior to Drupal Webform 6.2.12 and versions 6.3.0 through 6.3.1 contain a vulnerability related to permission and access control issues. This vulnerability stems from unsafe operations in permission definitions, potentially leading to stored cross-site scripting attacks...

USN-8930-2 u-boot vulnerabilities

USN-8930-1 fixed some vulnerabilities in U-Boot. This update provides the corresponding fix for U-Boot on Ubuntu 26.10. Original advisory details: Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An attacker could...

php: php: Access control bypass via partial IPv6 address comparison

A flaw was found in PHP. The access control check for Internet Protocol version 6 IPv6 addresses in the FastCGI implementation compares only the first 12 bytes of a 16-byte address instead of the complete address. An attacker on an adjacent network with an address sharing the first 96 bits with a...

Trigger.dev: Unauthenticated Realtime Stream Data Injection Via Run FriendlyId

Summary The POST handler for "/realtime/v1/streams/:runId/:streamId" has no authentication. Any entity that knows or guesses a run friendlyId can inject arbitrary data into its realtime stream. Vulnerability Details File: "apps/webapp/app/routes/realtime.v1.streams.$runId.$streamId.ts" The "actio...

CVE-2026-91487

A flaw was found in the OpenJDK Compiler component. An unauthenticated remote attacker could exploit this vulnerability by supplying crafted data to exposed application programming interfaces APIs, such as through a web service. Successful exploitation could allow the attacker to read, update, or...