Discourse cross-site scripting vulnerability

Versions 1.9.0.beta2 through 1.9.0.beta13 of Discourse contain a cross-site scripting vulnerability. This arises from the lack of validation on the /email/unsubscribed email parameter; the unsubscribed.html.erb file uses htmlsafe without proper escaping. As a result, it may be exploited for...

Vulnerability related to trust management issues in HCL AppScan integration with Azure Boards for ASoC & A360

The HCL AppScan integration with Azure Boards for ASoC and A360 version 1.0.0 contains a trust management vulnerability. This vulnerability arises because sensitive information can be accessed in plaintext during pipeline execution. Even though it is masked in the user interface, it may still be...

GitLab information disclosure vulnerability

GitLab CE/EE versions prior to 15.0 through 19.3.6, 19.4 through 19.4.3, and 19.5 through 19.5.1 contain an information disclosure vulnerability. This vulnerability arises from an error in caching fragment keys that are unrelated to viewers; it results in user-anonymized rendered content being...

Marcos Penelas Cámara Next.js Ecommerce Template authorization issue vulnerability

The Marcos Penelas Cámara Next.js Ecommerce Template contains an authorization bypass vulnerability. This vulnerability arises from unauthorized access to user-controlled keys; shopping cart and wishlist operations rely solely on primary key matching without verifying the associated user...

Devolutions Server authorization issue vulnerability

Versions Devolutions Server from 2026.3.5.0 through 2026.3.10.0 and versions 2026.2.20.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization on PAM AD computer import endpoints, allowing authenticated non-administrative users possessing...

GitLab authorization issue vulnerability

GitLab EE versions prior to 12.0 through 19.3.6, 19.4 through 19.4.3, and 19.5 through 19.5.1 contain an authorization issue vulnerability. This vulnerability arises because, after enabling instance-level SAML or LDAP member locking, the system fails to fully enforce the member locking restrictio...

Lotus SQL injection vulnerability

Lotus 0.10.2 and earlier versions contain an SQL injection vulnerability. This vulnerability arises from the addition of stacked statements to custom metric queries. Attackers can submit SQL statements separated by semicolons via POST /app/metrics/, bypassing only the first statement validation...

Lexi Wilson exposed a resource management error vulnerability

Lexi Wilson has identified a resource management error vulnerability in versions 0.1.0 and later of esaml. This vulnerability arises because when esamlbinding:decoderesponse/2 uses xmerlscan:string/2 to parse SAML Responses, it registers element names, attribute names, and namespace prefixes as...

WordPress SureDash authorization issue vulnerability

WordPress SureDash versions 1.12.2 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may allow attackers to exploit improperly configured access control levels...

Better-Auth authorization issue vulnerability

Versions 1.4.0-beta.18 through 1.7.7 of better-auth contain an authorization vulnerability. This vulnerability arises when Magic Link is enabled and storeToken is set to plain, or when storeToken is set to hashed while global verification.storeIdentifier is also set to hashed; additionally, if th...

Drupal Webform resource management error vulnerability

Drupal Webform versions 0.0.0 through 6.2.12 and 6.3.0 through 6.3.1 contain a resource management error vulnerability stemming from improper interaction frequency control, which may lead to functional abuse...

Drupal Monobank payment API encryption issue vulnerability

The Drupal Monobank payment API versions prior to 0.0.0 and 1.0.3 contain an encryption-related vulnerability. This vulnerability stems from improper validation of encrypted signatures, potentially allowing signature forgery...

Drupal Webform authorization issue vulnerability

Drupal Webform versions prior to 0.0.0 and from 6.2.12 up to 6.3.0, as well as versions from 6.3.0 up to 6.3.1, contain an authorization issue vulnerability stemming from improper authorization checks, which may lead to forced browsing...

Drupal amazee.ai Private AI Provider SQL injection vulnerability

Drupal amazee.ai Private AI Provider versions prior to 0.0.0 and 1.3.7, as well as versions prior to 1.4.0 and 1.4.3, contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially leading to SQL injection attacks...

CrawlSEO encryption issue vulnerability

Versions of crawlseo prior to 0.2.5 contain an encryption vulnerability. This vulnerability arises because Google OAuth access tokens and refresh tokens are stored unencrypted in the User.googleTokens column. Attackers with database read permissions can read these plaintext long-lived refresh...

liukuo362573 YiShaAdmin path traversal vulnerability

Liukuo362573 YiShaAdmin Versions 2.2 through 3.1 contain a path traversal vulnerability. This vulnerability stems from an unauthenticated path traversal flaw in the /admin/File/DownloadFile endpoint. Attackers can exploit this by using directory traversal sequences in the filePath parameter and...

WordPress Paid Member Subscriptions authorization issue vulnerability

WordPress Paid Member Subscriptions versions 3.1.2 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may allow attackers to exploit improperly configured access control security levels...

Retool cross-site scripting vulnerability

Versions prior to Retool 3.88.0 contain a cross-site scripting vulnerability. This vulnerability arises when malicious SVG files are passed via the /api/imageProxy endpoint; the URL parameter allows attackers to upload such SVGs, which then execute JavaScript within the victim’s session,...

Lotus SQL injection vulnerability

Lotus 0.10.2 and earlier versions contain an SQL injection vulnerability. This vulnerability arises because the billable metric propertyname and category filter values are rendered directly into Jinja-generated queries for counting, dashboards, and rate metrics without proper escaping. As a resul...

Drupal Webform authorization issue vulnerability

Versions prior to Drupal Webform 6.2.12 and 6.3.1 contain an authorization issue vulnerability stemming from improper authorization checks, which may lead to server-side request forgery...

Silicon Labs EmberZNet resource management error vulnerability

Silicon Labs EmberZNet versions 9.1.1 and earlier contain a resource management error vulnerability. This vulnerability arises because malformed Discover Attributes commands can lead to loops with an unreachable exit condition; such commands must originate from devices on the network, and they...

Drupal Webform cross-site scripting vulnerability

Drupal Webform versions prior to 6.2.12 and prior to 6.3.1 contain a cross-site scripting vulnerability. This vulnerability stems from improper handling of input during web page generation, potentially enabling cross-site scripting attacks...

TOTOLINK a950rg firmware input validation error vulnerability

The TOTOLINK a950rg firmware version 4.1.2cu.5268B20221104 contains a security vulnerability. This vulnerability stems from improper handling of the FileMd5 parameter in the UploadCustomModule function within the file lib/cstemodules/product.so. It may lead to command injection, allowing attacker...

Drupal CSS Usage Analyzer authorization issue vulnerability

Drupal CSS Usage Analyzer versions 1.0.0 through 1.0.2 contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks and may lead to forced browsing...

Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because rcubewashtml fails to validate the by attribute in SVG SMIL animations; as a result, tags within HTML emails can load remote...

WordPress SureCart authorization issue vulnerability

WordPress SureCart versions 4.9.5 and earlier contain an authorization issue vulnerability. This vulnerability stems from susceptibility to deception attacks, leading to authentication bypass and potential for unauthorized use of authentication mechanisms...

webpack-dev-server input validation error vulnerability

A security vulnerability exists in webpack-dev-server versions 5.1.0 through 5.2.7 and 6.0.0. It arises because the unauthenticated open-editor endpoint uses regular expression validation of Host headers against the browser’s Origin scheme. As a result, Host values starting with “file:” or other...

Drupal AI CKEditor code injection vulnerability

Drupal AI CKEditor versions prior to 0.0.0 and 1.4.3 contain a code injection vulnerability. This vulnerability stems from improper handling of special elements within the template engine, potentially leading to code injection...

Drupal Key auth information disclosure vulnerability

Drupal Key auth versions 0.0.0 through 2.2.4 contain an information disclosure vulnerability. This vulnerability stems from using a web browser cache that contains sensitive information, potentially allowing attackers to exploit improperly configured access control security levels...

KNIME Business Hub information disclosure vulnerability

Versions of KNIME Business Hub prior to 1.18.5 contain an information disclosure vulnerability. This vulnerability stems from excessive error message content within the catalog functionality, which may allow authenticated remote attackers to view workflow names even when they know the workflow ID...

OpenCATS cross-site scripting vulnerability

Versions prior to OpenCATS 0.12.0 contain a cross-site scripting vulnerability stemming from a stored XSS issue: low-privilege authenticated users can inject HTML/JavaScript payloads by setting the name/title fields of Candidate, Company, Contact, Job Order, or List. These payloads are not...

Drupal Email Verification / SMS Verification / OTP Verification authorization issue vulnerability

Drupal Email Verification / SMS Verification / OTP Verification versions prior to 2.4.0 contain an authorization issue vulnerability. This vulnerability arises from the use of alternative paths or channels, potentially leading to authentication bypass...

Drupal Islandora authorization issue vulnerability

Drupal Islandora versions 0.0.0 through 2.19.0 contain an authorization issue vulnerability stemming from missing authorization checks, which may lead to forced browsing...

PHPOffice PhpSpreadsheet input validation error vulnerability

PHPOffice PhpSpreadsheet versions 1.30.7, 2.1.19, 2.4.8, 3.10.8, and earlier versions prior to 5.10.0 contain a security vulnerability. This vulnerability arises because the DOCTYPE detection mechanism in XmlScanner::scan fails to account for ISO-2022 escaped sequences within XLSX XML sections. A...

Agent Zero cross-site scripting vulnerability

Versions of Agent Zero Web UI prior to 1.15 contain a cross-site scripting vulnerability. This vulnerability arises from improper sanitization of user inputs in chat messages or file uploads, allowing injected JavaScript to execute within the context of an authenticated Agent Zero Web UI session...

Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because rcmailsendmail only strips line breaks from the Subject and Organization headers, failing to sanitize other header values receiv...

Drupal CookieCuttr cross-site scripting vulnerability

Drupal CookieCuttr versions 2.0.0 through 2.0.3 contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and may lead to stored cross-site scripting attacks...

Roundcube Webmail Project Roundcube Webmail Cross-site Request Forgery vulnerability

The Roundcube Webmail project contains a cross-site request forgery vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises from CSRF validation bypass in the markasjunk plugin’s mark-as-junk functionality. The plugin reads the UID parameter from POST data...

Drupal Webform cross-site scripting vulnerability

Drupal Webform versions prior to 6.2.12 and from 6.3.0 up to but including 6.3.1 contain a cross-site scripting vulnerability. This vulnerability stems from improper handling of input during web form generation, potentially enabling stored cross-site scripting attacks...

WordPress Sunshine Photo Cart authorization issue vulnerability

WordPress Sunshine Photo Cart versions 3.7.5 and earlier contain an authorization issue vulnerability. This vulnerability stems from insufficient authorization checks, which may allow attackers to exploit improperly configured access control levels...

Roundcube Webmail Project Roundcube Webmail authorization issue vulnerability

The Roundcube Webmail project contains an authorization issue vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability stems from improper authorization in the Modoboa driver used by the password plugin; it fails to match authenticated users and instead retrieves t...

Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability stems from an email header injection issue during Bounce operations. The function rcubemime::decodeaddresslist fails to remove control characte...

Drupal SAML SSO – Service Provider Authorization issue vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain an authorization issue vulnerability. This vulnerability stems from improper storage of sensitive information, potentially allowing retrieval of embedded sensitive data...

Rsyslog path traversal vulnerability

A security vulnerability exists in Rsyslog versions 1.15.0 through 8.2610.0. This vulnerability arises because the omfile dynaFile template uses values affected by untrusted input as path components without performing explicit safe path handling. As a result, rendered paths may exceed expected lo...

Drupal Jsonapi Role Access authorization issue vulnerability

In Drupal Jsonapi Role Access versions 0.0.0 through 2.0.2, there is an authorization issue vulnerability stemming from improper authorization, which may lead to forced browsing...

Drupal Commerce Decoupled Checkout input validation error vulnerability

Drupal Commerce Decoupled Checkout versions 1.0.0 through 1.8.0 contain an input validation error vulnerability. This vulnerability stems from improper control over modifications to dynamic object properties, potentially leading to object injection...

GitLab authorization issue vulnerability

A security vulnerability exists in GitLab CE/EE versions from 18.2 up to and including 19.3.6, from 19.4 up to and including 19.4.3, and from 19.5 up to and including 19.5.1. This vulnerability stems from insufficient execution of GraphQL field scopes, allowing authenticated users with a readapi...

GitLab input validation error vulnerability

GitLab CE/EE versions prior to 10.1 through 19.3.6, 19.4 through 19.4.3, and 19.5 through 19.5.1 contain an input validation error vulnerability. This vulnerability stems from improper input sanitization during LDAP email lookup in the OmniAuth identity link process. When both OmniAuth SAML and...

Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 within the 1.7.x series. This vulnerability arises because the flag parameter in the mail/mark action fails to filter CRLF sequences, potentially allowing remote authenticated...

LocalStack security vulnerability

A security vulnerability exists in LocalStack version 4.9.2; it stems from reflected XSS. Attackers can exploit this flaw by using specially crafted URLs to execute arbitrary JavaScript within a user’s browser environment...