CVE-2026-45054

CubeCart is an ecommerce software solution. Prior to 6.7.0, the admin orders-transactions listing page admin.php?g=orders&node=transactions builds a raw ORDER BY SQL fragment from the attacker-controlled $GET'sort' array without column or direction validation. Both the column key and the directio...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists because node transactions are not properly handled which allows an attacker to cause an application crash by creating arbitrary number of nodes...