Javo Spot path traversal vulnerability

Versions of Javo Spot prior to 3.0.0 contain a path traversal vulnerability. This vulnerability stems from a path traversal issue in the fn parameter of the jvfrmspotgetjson AJAX operation. Unauthenticated attackers can read arbitrary files, potentially obtaining database credentials and keys...

WordPress ShopMagic information disclosure vulnerability

WordPress ShopMagic versions 4.9.1 and earlier contain an information disclosure vulnerability. This vulnerability arises from the insertion of sensitive information into externally accessible files or directories, potentially allowing attackers to retrieve the embedded data...

midgetspy Sickbeard cross-site scripting vulnerability

The midgetspy Sickbeard vulnerability stems from a cross-site scripting flaw. This arises due to improper handling of the “pattern” parameter in /config/postProcessing/testNaming; the testNaming handler fails to escape returned content. As a result, unauthenticated attackers can craft GET request...

Kavita path traversal vulnerability

Versions Kavita 0.5.2 through 0.5.4.1 contain a path traversal vulnerability. This vulnerability arises because the filename parameter allows path traversal; unauthenticated attackers can send GET requests containing ../ sequences to /api/image/cover-upload to read any file outside the temporary...

WordPress User Profile Builder permission and access control issue vulnerability

WordPress User Profile Builder versions 4.0.4 and earlier contain a privilege escalation vulnerability related to permission handling and access control. This issue stems from improper permission allocation and may lead to privilege escalation...

OpenTelemetry - CNCF OpenTelemetry Python resource management error vulnerability

OpenTelemetry: Versions prior to 1.45.1 of CNCF OpenTelemetry Python contain a resource management error vulnerability. This vulnerability stems from the TraceState.fromheader function in opentelemetry/trace/span.py within the opentelemetry-api. When parsing W3C trace state headers, it uses an...

TMS Amelia SQL injection vulnerability

TMS Amelia versions 2.4.11 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, making them susceptible to SQL injection attacks...

MetInfo path traversal vulnerability

Versions prior to MetInfo 6.1.1, specifically version 6.0.0, contain a path traversal vulnerability. This vulnerability stems from a path traversal issue in the dir parameter within the file /include/thumb.php. Attackers can send specially crafted requests containing backslashes to bypass...

hwk-fr ACF Extended cross-site scripting vulnerability

The hwk-fr ACF Extended versions 0.9.2.7 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

GitLab trust management issue vulnerability

GitLab EE versions prior to 17.8 through 19.3.6, 19.4 through 19.4.3, and 19.5 through 19.5.1 contain a trust management vulnerability. This vulnerability stems from insufficient server-side validation during billing eligibility checks, potentially allowing authenticated users to access paid AI...

i-Netsolution Readymade Unilevel Ecommerce MLM SQL injection vulnerability

The i-netsolution Readymade Unilevel Ecommerce MLM version for 2024-03-15 contains an SQL injection vulnerability. This flaw stems from improper input validation of the id parameter in /product-details.php. Unauthorized attackers can exploit this by sending boolean, stack-based, or time-based SLE...

Vulnerability related to trust management issues in HCL AppScan integration with Azure Boards for ASoC & A360

The HCL AppScan integration with Azure Boards for ASoC and A360 version 1.0.0 contains a trust management vulnerability. This vulnerability arises because sensitive information can be accessed in plaintext during pipeline execution. Even though it is masked in the user interface, it may still be...

GitLab information disclosure vulnerability

GitLab CE/EE versions prior to 15.0 through 19.3.6, 19.4 through 19.4.3, and 19.5 through 19.5.1 contain an information disclosure vulnerability. This vulnerability arises from an error in caching fragment keys that are unrelated to viewers; it results in user-anonymized rendered content being...

Marcos Penelas Cámara Next.js Ecommerce Template authorization issue vulnerability

The Marcos Penelas Cámara Next.js Ecommerce Template contains an authorization bypass vulnerability. This vulnerability arises from unauthorized access to user-controlled keys; shopping cart and wishlist operations rely solely on primary key matching without verifying the associated user...

Devolutions Server authorization issue vulnerability

Versions Devolutions Server from 2026.3.5.0 through 2026.3.10.0 and versions 2026.2.20.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization on PAM AD computer import endpoints, allowing authenticated non-administrative users possessing...

GitLab authorization issue vulnerability

GitLab EE versions prior to 12.0 through 19.3.6, 19.4 through 19.4.3, and 19.5 through 19.5.1 contain an authorization issue vulnerability. This vulnerability arises because, after enabling instance-level SAML or LDAP member locking, the system fails to fully enforce the member locking restrictio...

Lotus SQL injection vulnerability

Lotus 0.10.2 and earlier versions contain an SQL injection vulnerability. This vulnerability arises from the addition of stacked statements to custom metric queries. Attackers can submit SQL statements separated by semicolons via POST /app/metrics/, bypassing only the first statement validation...

Lexi Wilson exposed a resource management error vulnerability

Lexi Wilson has identified a resource management error vulnerability in versions 0.1.0 and later of esaml. This vulnerability arises because when esamlbinding:decoderesponse/2 uses xmerlscan:string/2 to parse SAML Responses, it registers element names, attribute names, and namespace prefixes as...

WordPress SureDash authorization issue vulnerability

WordPress SureDash versions 1.12.2 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may allow attackers to exploit improperly configured access control levels...

Better-Auth authorization issue vulnerability

Versions 1.4.0-beta.18 through 1.7.7 of better-auth contain an authorization vulnerability. This vulnerability arises when Magic Link is enabled and storeToken is set to plain, or when storeToken is set to hashed while global verification.storeIdentifier is also set to hashed; additionally, if th...

Drupal Webform resource management error vulnerability

Drupal Webform versions 0.0.0 through 6.2.12 and 6.3.0 through 6.3.1 contain a resource management error vulnerability stemming from improper interaction frequency control, which may lead to functional abuse...

Drupal Monobank payment API encryption issue vulnerability

The Drupal Monobank payment API versions prior to 0.0.0 and 1.0.3 contain an encryption-related vulnerability. This vulnerability stems from improper validation of encrypted signatures, potentially allowing signature forgery...

Drupal Webform authorization issue vulnerability

Drupal Webform versions prior to 0.0.0 and from 6.2.12 up to 6.3.0, as well as versions from 6.3.0 up to 6.3.1, contain an authorization issue vulnerability stemming from improper authorization checks, which may lead to forced browsing...

Drupal amazee.ai Private AI Provider SQL injection vulnerability

Drupal amazee.ai Private AI Provider versions prior to 0.0.0 and 1.3.7, as well as versions prior to 1.4.0 and 1.4.3, contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially leading to SQL injection attacks...

CrawlSEO encryption issue vulnerability

Versions of crawlseo prior to 0.2.5 contain an encryption vulnerability. This vulnerability arises because Google OAuth access tokens and refresh tokens are stored unencrypted in the User.googleTokens column. Attackers with database read permissions can read these plaintext long-lived refresh...

WordPress Paid Member Subscriptions authorization issue vulnerability

WordPress Paid Member Subscriptions versions 3.1.2 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may allow attackers to exploit improperly configured access control security levels...

Lotus SQL injection vulnerability

Lotus 0.10.2 and earlier versions contain an SQL injection vulnerability. This vulnerability arises because the billable metric propertyname and category filter values are rendered directly into Jinja-generated queries for counting, dashboards, and rate metrics without proper escaping. As a resul...

Drupal Webform authorization issue vulnerability

Versions prior to Drupal Webform 6.2.12 and 6.3.1 contain an authorization issue vulnerability stemming from improper authorization checks, which may lead to server-side request forgery...

Silicon Labs EmberZNet resource management error vulnerability

Silicon Labs EmberZNet versions 9.1.1 and earlier contain a resource management error vulnerability. This vulnerability arises because malformed Discover Attributes commands can lead to loops with an unreachable exit condition; such commands must originate from devices on the network, and they...

Drupal Webform cross-site scripting vulnerability

Drupal Webform versions prior to 6.2.12 and prior to 6.3.1 contain a cross-site scripting vulnerability. This vulnerability stems from improper handling of input during web page generation, potentially enabling cross-site scripting attacks...

TOTOLINK a950rg firmware input validation error vulnerability

The TOTOLINK a950rg firmware version 4.1.2cu.5268B20221104 contains a security vulnerability. This vulnerability stems from improper handling of the FileMd5 parameter in the UploadCustomModule function within the file lib/cstemodules/product.so. It may lead to command injection, allowing attacker...

Drupal CSS Usage Analyzer authorization issue vulnerability

Drupal CSS Usage Analyzer versions 1.0.0 through 1.0.2 contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks and may lead to forced browsing...

WordPress SureCart authorization issue vulnerability

WordPress SureCart versions 4.9.5 and earlier contain an authorization issue vulnerability. This vulnerability stems from susceptibility to deception attacks, leading to authentication bypass and potential for unauthorized use of authentication mechanisms...

Drupal AI CKEditor code injection vulnerability

Drupal AI CKEditor versions prior to 0.0.0 and 1.4.3 contain a code injection vulnerability. This vulnerability stems from improper handling of special elements within the template engine, potentially leading to code injection...

Drupal Key auth information disclosure vulnerability

Drupal Key auth versions 0.0.0 through 2.2.4 contain an information disclosure vulnerability. This vulnerability stems from using a web browser cache that contains sensitive information, potentially allowing attackers to exploit improperly configured access control security levels...

KNIME Business Hub information disclosure vulnerability

Versions of KNIME Business Hub prior to 1.18.5 contain an information disclosure vulnerability. This vulnerability stems from excessive error message content within the catalog functionality, which may allow authenticated remote attackers to view workflow names even when they know the workflow ID...

Drupal Email Verification / SMS Verification / OTP Verification authorization issue vulnerability

Drupal Email Verification / SMS Verification / OTP Verification versions prior to 2.4.0 contain an authorization issue vulnerability. This vulnerability arises from the use of alternative paths or channels, potentially leading to authentication bypass...

Drupal Islandora authorization issue vulnerability

Drupal Islandora versions 0.0.0 through 2.19.0 contain an authorization issue vulnerability stemming from missing authorization checks, which may lead to forced browsing...

Agent Zero cross-site scripting vulnerability

Versions of Agent Zero Web UI prior to 1.15 contain a cross-site scripting vulnerability. This vulnerability arises from improper sanitization of user inputs in chat messages or file uploads, allowing injected JavaScript to execute within the context of an authenticated Agent Zero Web UI session...

Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because rcmailsendmail only strips line breaks from the Subject and Organization headers, failing to sanitize other header values receiv...

Drupal CookieCuttr cross-site scripting vulnerability

Drupal CookieCuttr versions 2.0.0 through 2.0.3 contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and may lead to stored cross-site scripting attacks...

Roundcube Webmail Project Roundcube Webmail Cross-site Request Forgery vulnerability

The Roundcube Webmail project contains a cross-site request forgery vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises from CSRF validation bypass in the markasjunk plugin’s mark-as-junk functionality. The plugin reads the UID parameter from POST data...

Drupal Webform cross-site scripting vulnerability

Drupal Webform versions prior to 6.2.12 and from 6.3.0 up to but including 6.3.1 contain a cross-site scripting vulnerability. This vulnerability stems from improper handling of input during web form generation, potentially enabling stored cross-site scripting attacks...

WordPress Sunshine Photo Cart authorization issue vulnerability

WordPress Sunshine Photo Cart versions 3.7.5 and earlier contain an authorization issue vulnerability. This vulnerability stems from insufficient authorization checks, which may allow attackers to exploit improperly configured access control levels...

Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability stems from an email header injection issue during Bounce operations. The function rcubemime::decodeaddresslist fails to remove control characte...

Rsyslog path traversal vulnerability

A security vulnerability exists in Rsyslog versions 1.15.0 through 8.2610.0. This vulnerability arises because the omfile dynaFile template uses values affected by untrusted input as path components without performing explicit safe path handling. As a result, rendered paths may exceed expected lo...

Drupal Jsonapi Role Access authorization issue vulnerability

In Drupal Jsonapi Role Access versions 0.0.0 through 2.0.2, there is an authorization issue vulnerability stemming from improper authorization, which may lead to forced browsing...

Drupal Commerce Decoupled Checkout input validation error vulnerability

Drupal Commerce Decoupled Checkout versions 1.0.0 through 1.8.0 contain an input validation error vulnerability. This vulnerability stems from improper control over modifications to dynamic object properties, potentially leading to object injection...

GitLab input validation error vulnerability

GitLab CE/EE versions prior to 10.1 through 19.3.6, 19.4 through 19.4.3, and 19.5 through 19.5.1 contain an input validation error vulnerability. This vulnerability stems from improper input sanitization during LDAP email lookup in the OmniAuth identity link process. When both OmniAuth SAML and...

LocalStack security vulnerability

A security vulnerability exists in LocalStack version 4.9.2; it stems from reflected XSS. Attackers can exploit this flaw by using specially crafted URLs to execute arbitrary JavaScript within a user’s browser environment...