Samsung rlottie security vulnerabilities

Samsung Lottie versions 6.7.1 and earlier have security vulnerabilities. These vulnerabilities stem from specially crafted Lottie animation JSON files that contain recursive pre-combined references, triggering uncontrolled recursion in BaseLayer.forModel and CompositionLayer. This could allow...

Slican IPx encryption vulnerability

Versions of Slican prior to 6.62.0100, Slican CCT-1668 6.56.0430 and earlier versions, Slican MAC-6400 6.56.0430 and earlier versions, and Slican CXS-0424 6.30.0510 and earlier versions have a security vulnerability related to encryption. This vulnerability stems from the use of symmetric...

Mitsubishi Electric GENESIS64: Permissions, access control, and vulnerabilities

Mitsubishi Electric GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI 10.97.3 and earlier versions, as well as all versions of MC Works64, have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper permission allocation—the...

SimplePie input validation vulnerability

SimplePie versions 1.9.0 and earlier have a vulnerability related to input validation errors. This vulnerability arises from improper handling of file:// URLs in redirection or auto-discovery links, allowing filegetcontents to read files accessible to the web server process, potentially leading t...

SUSE Linux Enterprise Server Permission Licensing and Access Control Vulnerabilities

SUSE Linux Enterprise Server 16.1, SUSE Linux Enterprise Server for NVIDIA 16.1, and openSUSE Leap 16.1 have vulnerabilities related to permission permissions and access control. These vulnerabilities stem from the debug logs created by the sdbootutil script, which are globally readable. This cou...

Perforce P4 permission licensing and access control issues

Perforce P4 versions 2026.4.2 and earlier have vulnerabilities related to permission management and access control. These vulnerabilities arise from the configuration API returning stored credentials in plain text to users with administrative privileges on the connected P4 Server, potentially...

Kedacore KEDA: Permissions management and access control vulnerabilities

KEDACORE KEDA 2.20.2 and earlier versions have security vulnerabilities. This vulnerability arises from the ability of the namespace administrator to create TriggerAuthentication and ScaledObject resources, thereby setting hashiCorpVault.address as a tenant-controlled endpoint. By selecting...

WordPress Tutor LMS Cross-site Scripting Vulnerability

WordPress Tutor LMS versions 4.1.0 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the 'tab' parameter. Additionally, when the nav-items array of the target course page is empty, the inarray validation can be...

LatePoint – Calendar Booking Plugin for Appointments and Events: Authorization Issues Vulnerability

LatePoint – Calendar Booking Plugin for Appointments and Events. Versions 5.7.3 and earlier have an authorization issue vulnerability. This vulnerability stems from a lack of ownership checks on the bookingid and cartid parameters. Unauthorized attackers can enumerate booking or cart identifiers...

WordPress GeoDirectory cross-site scripting vulnerability

WordPress GeoDirectory 2.8.190 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping. Certified attackers with subscription-level or higher permissions can inject any web script into pages through the...

WordPress Post Export Import with Media: Deserialization Injection Vulnerability

WordPress Post Export Import with Media has a deserialization injection vulnerability in versions 1.17.1 and earlier. This vulnerability stems from the deserialization processing of untrusted inputs, leading to PHP object injection. Certified attackers with administrator or higher privileges may ...

Yiyi Wang Crossnote Code Injection Vulnerability

Yiyi Wang’s Crossnote versions prior to 0.8.29 have a code injection vulnerability. This vulnerability stems from the use of vm.runInNewContext in the .crossnote/config.js and .crossnote/parser.js files, which lack a secure boundary with the Node.js host domain. Opening Markdown files from...

Hippoo Mobile App for WooCommerce: Cross-site Scripting Vulnerability

The Hippoo Mobile App for WooCommerce version 1.12.0 and earlier has a cross-site scripting vulnerability. This vulnerability stems from improper input during web page generation, making it susceptible to reflection-based cross-site scripting attacks...

Jordan Harband: Improper exception handling leads to vulnerabilities

Jordan Harband versions from 6.7.0 to 6.16.1 have security vulnerabilities. This vulnerability arises from improper string coercion of array elements when using arrayFormat with a comma. When elements cannot be converted to strings, a type error will occur, potentially allowing unverified attacke...

curl resource management error vulnerability

There is a vulnerability in curl’s resource management. This vulnerability arises from incorrect handling of HTTP/2 RSTSTREAM responses by curl during the upload process. The reason for this is that HTTP11REQUIRED or REFUSEDSTREAM conditions were encountered, leading to the reutilization of the...

OpenClaw ClawScan processing logic error vulnerability

OpenClaw ClawScan versions 0.1.6 and earlier have a processing logic vulnerability. This vulnerability stems from improper operation of the shouldSkipTargetPath function in the internal/runner/runner.go file of the Static Scanner component, which may lead to the failure of the protection mechanis...

WordPress Jeg Kit for Elementor Authorization Issue Vulnerability

The WordPress JEG Kit for Elementor 3.2.19 and earlier versions has an authorization issue vulnerability. This vulnerability stems from the lack of permission checks for the two AJAX operations called ‘jkitpostblock’ and ‘jegfindauthor’. This could allow authenticated attackers with...

Parse Platform Parse Server Improper Exception Handling Vulnerability

The Parse Platform and Parse Server versions prior to 8.6.97, as well as versions from 9.0.0 to 9.10.2-alpha.6, have a vulnerability related to improper exception handling. This vulnerability arises from errors that occur when sending verification emails or password reset emails. Attackers only...

SonicWALL Network Security Manager (NSM) authorization issue vulnerability

SonicWALL Network Security Manager NSM versions 4.3.1 and earlier have an authorization issue vulnerability. This vulnerability stems from improper access control in the export settings. It may allow remote, authenticated attackers to obtain sensitive information, potentially gain administrator...

WordPress Directorist Cross-Site Script Vulnerability

WordPress Directorist versions 8.10.2.1 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the 'phone' list field, resulting in a stored-cross-site scripting attack. Additionally, the plugin grants the...

M A Vinoth Kumar Frontend Dashboard: Permissions, Licenses, and Access Control Vulnerabilities

The M A Vinoth Kumar Frontend Dashboard 3.0.7 and earlier versions have vulnerabilities related to permission authorization and access control. These vulnerabilities stem from improper permission allocation, which may lead to unauthorized privilege escalation...

SonicWALL Network Security Manager (NSM) command injection vulnerability

SonicWALL Network Security Manager NSM versions 4.3.1 and earlier have a command injection vulnerability. This vulnerability stems from OS command injections, which may allow remote authentication attackers to execute arbitrary OS commands, resulting in remote code execution...

Ravi Teja Online-Examination-System Information Leak Vulnerability

Ravi Teja Online-Examination-System e6208e630b14657999bbfe4c9912302d2a1e2449 and previous versions have a security vulnerability. This vulnerability stems from operations on an unknown function in the dbtables.sql file, which can be exploited remotely, leading to information leakage...

Mogh.tech Komodo configuration error vulnerability

Mogh.tech Komodo 2.3.3 and earlier versions have a configuration error vulnerability. This vulnerability stems from an authentication bypass in the Periphery agent. Due to empty corepublickeys and passkeys lists by default, unauthenticated attackers can act as trusted Core connections and send...

WordPress Calendar SQL Injection Vulnerability

Versions of WordPress Calendar prior to 7.37.0 have a SQL injection vulnerability. This vulnerability arises due to improper handling of special elements in SQL commands, which may lead to SQL injections...

WordPress Push Notification for Posts and BuddyPress: Authorization Issues Vulnerability

WordPress push notification for posts and BuddyPress versions 3.23 and earlier have a permission-related vulnerability. This vulnerability stems from the absence of proper permissions, which may allow attackers to exploit incorrectly configured access control levels...

WordPress GeoDirectory cross-site scripting vulnerability

WordPress GeoDirectory versions 2.8.190 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the 'postimages fileinfo2 = title' parameter. It may lead to storage-based cross-site scripting attacks. Certified...

LatePoint – Calendar Booking Plugin for Appointments and Events: Authorization Issues Vulnerability

LatePoint – a calendar booking plugin for appointments and events. Versions 5.7.2 and earlier have an authorization issue vulnerability. This vulnerability arises from calling the OsCustomerHelper::createwpuserforcustomer helper function from the publicly exposed processstepcustomer step. When th...

Hitachi Vantara Remote Operations Agent Authorization Issue Vulnerability

The Hitachi Vantara Remot Ops Agent versions 1.6.0 to 2.0 have an authorization issue vulnerability. This vulnerability stems from the API output containing a password reset code, which could allow attackers with administrator privileges to retrieve the password reset code of any user and take...

WordPress Social Share Buttons & Analytics Plugin – GetSocial.io Cross-site Script Vulnerability

WordPress Social Share Buttons & Analytics Plugin – GetSocial.io versions 4.5 and earlier have a cross-site scripting vulnerability. This vulnerability stems from improper cleaning of response parameter inputs and improper output escaping, allowing authenticated attackers to inject arbitrary web...

OpenAEV Platform: OpenAEV Authorization Issues Vulnerability

The OpenAEV Platform versions prior to 2.260622.0 have an authorization issue vulnerability. This vulnerability stems from the /api/player/ lessons endpoint, which can be called without authentication, and the userId parameter provided by the client is not verified. This allows unauthorized...

Hitachi Vantara Remote Operations Agent encryption vulnerability

The Hitachi Vantara Remot Ops Agent versions 1.60 to 2.0 have encryption-related vulnerabilities. These vulnerabilities stem from the use of the default self-signed SSL certificate for signing JWT access tokens for the web interface. Attackers can exploit this default certificate to issue JWT...

Yiyi Wang Markdown Preview Enhanced Permission Licensing and Access Control Vulnerabilities

Yiyi Wang’s Markdown Preview Enhanced version prior to 0.8.30 contained vulnerabilities related to permission management and access control. These vulnerabilities stemmed from the webview message handler in src/preview-provider.ts, which failed to validate command values and parameters against a...

JetLinks IoT Platform: Authorization Issues Vulnerability

The JetLinks IoT Platform versions 2.10.0 and earlier have an authorization issue vulnerability. This vulnerability stems from the lack of @SaveAction authorization verification in the POST /device/transparent-codec/productId interface. Only users with the permission to query transparent-codecs c...

Xorbits Xoscar deserialization injection vulnerability

Xorbits Xoscar versions 0.11.2 and earlier have a deserialization injection vulnerability. This vulnerability stems from the use of SocketChannel.recv, which passes unvalidated data to cloudpickle.loads. This triggers the pickle reduce utility before message type validation. Unauthorized remote...

Siemens RUGGEDCOM CROSSBOW information leakage vulnerability

Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have a vulnerability related to information leakage. This vulnerability stems from insufficient restrictions on access to various database queries. It may allow authenticated attackers to retrieve system-wide information beyond their authorized...

Ravi Teja Online-Examination-System Input Verification Error Vulnerability

Ravi Teja Online-Examination-System has a security vulnerability. This vulnerability stems from incorrect handling of the branch parameter in the include/database.php file, which may lead to SQL injection attacks...

JupyterLab race condition vulnerability

JupyterLab has a security vulnerability. This vulnerability stems from the markdownviewer:trust and notebook:trust command handlers, which use tracker.currentWidget to parse the current Markdown viewer or notebook. Instead of retaining the document associated with the clicked command button, this...

WordPress Ad Inserter has a vulnerability related to information leakage

WordPress Ad Inserter 2.8.18 and earlier versions have a vulnerability involving information leakage. This vulnerability stems from the aiwpfooterhook, which exposes sensitive information. It is possible for authenticated attackers with privileges at the subscriber level or higher to extract...

upKeeper Solutions upKeeper Instant Privilege Access: Input validation vulnerability

UpKeeper Solutions’ UpKeeper Instant Privilege Access versions 1.7.1 and earlier have a vulnerability in input validation. This vulnerability stems from improper handling of undefined values, which may lead to privilege escalation...

NETGEAR RAX30 Authorization Issue Vulnerability

NETGEAR RAX30, RAX29, and RAX28 v1.0.15.110 and earlier versions have an authorization issue vulnerability. This vulnerability stems from authentication bypass in the management services. Unauthenticated attackers can access the management services of affected devices with adjacent access rights,...

WordPress Link Whisper – Free SQL Injection Vulnerability

WordPress Link Whisper Free 0.9.7 and earlier versions have a SQL injection vulnerability. This vulnerability stems from improper handling of special elements in SQL commands, which may lead to blind SQL injections...

Stone Wu’s authorization issues and vulnerabilities

Stone Wu’s Rongguang versions 1.2.0 and earlier have an authorization issue. This vulnerability stems from a lack of authorization checks. Unauthorized users, who are authenticated but not administrators, can access confidential information stored through the unprotected ApiConfigController and...

Adobe Commerce code injection vulnerability

Adobe Commerce has a code injection vulnerability, which stems from improper handling of special elements used in the template engine. This vulnerability may allow arbitrary code to execute, enabling attackers to gain elevated access or control over the victim’s account or session without requiri...

Kavita: Server-side Request Forgery Vulnerability

In versions Kavita 0.9.0 to 0.9.1.4, there is a vulnerability related to server-side request forgery. This vulnerability arises from server-side request forgery attacks. Authorized attackers can bypass the SSRF blacklist by using DNS rebind or HTTPS redirection. They can submit malicious URLs via...

Microsoft SQL Server resource management error vulnerabilities

Microsoft SQL Server has a resource management vulnerability that arises from insufficient or ineffective restrictions on resource allocation. This vulnerability could allow authorized attackers to cause denial-of-service attacks through the network...

Stone Wu’s authorization issues and vulnerabilities

Stone Wu’s Rongguang versions 1.2.0 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references. Attackers can obtain the generated results of other users by providing arbitrary task IDs. They can also enumerate the auto-incrementing task...

Siemens RUGGEDCOM CROSSBOW SQL injection vulnerability

Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have a SQL injection vulnerability. This vulnerability arises from improper validation or cleaning of inputs when processing facility names in batch import/export workflows. It may allow authenticated attackers with specific privileges to execute...

Siemens RUGGEDCOM CROSSBOW authorization issue vulnerability

Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have an authorization issue vulnerability. This vulnerability stems from the failure to properly restrict access to sensitive configuration items through specific database queries. As a result, authenticated attackers may obtain administrative...

TechSmith MP4V2 has vulnerabilities related to improper exception handling.

The Techsmith MP4V2 2.0.0 version has a vulnerability in exception handling. This vulnerability stems from a null pointer dereferencing in the src/mp4file.cpp function, MP4File::GenerateTracks. This could allow a remote attacker to cause a denial-of-service attack...