Linksys WAG200G authorization issue vulnerability

The Linksys WAG200G versions 1.01.06 and earlier contain an authorization issue vulnerability. This vulnerability stems from a weak password change mechanism, allowing attackers to change administrator passwords without providing the current password. As a result, authenticated administrators may...

Grafana Enterprise authorization issue vulnerability

A authorization issue vulnerability exists in Grafana Enterprise and Grafana OSS versions 12.4.0 through 12.4.13, 13.0.0 through 13.0.11, 13.1.0 through 13.1.8, and 13.2.0 through 13.2.4. This vulnerability stems from improper authorization; users who have edit access to contact points but no...

Juniper Networks Session Smart Router buffer error vulnerability

Versions prior to Juniper Networks Session Smart Router 7.0.5, versions 7.1.0 through 7.1.7, and versions 7.2.0 through 7.2.3 contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in the VRRP implementation, potentially allowing L2 adjacent attackers to read...

Juniper Networks Session Smart Router command injection vulnerability

A command injection vulnerability exists in Juniper Networks Session Smart Router and Juniper Networks Session Smart Conductor versions prior to 7.0.5, versions 7.1.x prior to 7.1.7, and versions 7.2.x prior to 7.2.3. This vulnerability stems from improper handling of special elements within OS...

Juniper Networks Session Smart Router digital error vulnerability

Versions prior to Juniper Networks Session Smart Router 7.0.5, versions 7.1.0 through 7.1.7, and versions 7.2.0 through 7.2.3 contain a numerical error vulnerability. This vulnerability stems from an integer underflow in DhcpMessageDecoder. Attackers can exploit malicious DHCP responses to gain...

Dell PowerProtect Data Domain Management Center authorization issue vulnerability

Versions 7.7.1.0 through 8.8, 7.13.1.0 through 7.13.1.80, 8.3.1.0 through 8.3.1.40, and 8.6.1.0 through 8.6.1.20 of Dell PowerProtect Data Domain Management Center contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, potentially allowi...

Dell PowerProtect Data Domain buffer error vulnerability

Buffer error vulnerabilities exist in Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8, 7.13.1.0 through 7.13.1.80, 8.3.1.0 through 8.3.1.40, and 8.6.1.0 through 8.6.1.20. These vulnerabilities stem from stack buffer overflows and may allow unauthenticated remote attackers to execute...

FasterXML jackson-dataformat-protobuf numeric error vulnerability

A numerical error vulnerability exists in FasterXML Jackson-DataFormat-ProtocolBuffer versions from 2.6.0 up to and including 2.18.12, from 2.19.0 up to and including 2.21.8, from 2.22.0 up to and including 2.22.4, from 3.0.0 up to and including 3.1.8, and from 3.2.0 up to and including 3.2.4. Th...

DALIBO PostgreSQL Anonymizer authorization issue vulnerability

DALIBO PostgreSQL Anonymizer versions 1 through 3.3.0 contain an authorization issue vulnerability. This vulnerability arises because data-modifying CTEs can bypass read-only restrictions imposed by mask roles, potentially leading to privilege escalation...

DALIBO PostgreSQL Anonymizer information disclosure vulnerability

Versions of DALIBO PostgreSQL Anonymizer prior to 3.3.0 contain an information disclosure vulnerability. This vulnerability stems from static masking and statistical persistence issues; original statistical data remains visible in pgstats until manually or via autovacuum, ANALYZE operations on th...

MongoDB Java Driver input validation error vulnerability

A vulnerability related to input validation exists in MongoDB Java Driver versions 5.8.0 through 5.14.0. This vulnerability stems from the BSON encoding component failing to verify whether the declared length of externally supplied raw documents matches their byte range. As a result, when the...

Alpine iLX-F511 buffer error vulnerability

The Alpine iLX-F511 version 7.0.000 contains a buffer error vulnerability. This vulnerability arises because the framework service fails to properly validate the length of user-provided data before copying it into a fixed-size stack buffer. As a result, attackers who can physically access the...

Ultralytics deserialization injection vulnerability

Version 8.4.65 of Ultralytics contains a deserialization injection vulnerability. This flaw arises because the loaddatasetcachefile function fails to validate user-supplied data, allowing untrusted data to be deserialized. As a result, remote attackers may execute arbitrary code within the contex...

Ultralytics code injection vulnerability

Version 8.4.65 of Ultralytics contains a code injection vulnerability. This flaw arises because the checkdetdataset function fails to perform adequate validation on user-supplied strings prior to executing Python code; as a result, remote attackers may execute arbitrary code within the context of...

n8n authorization issue vulnerability

Versions prior to n8n 1.123.85, 2.43.5, and 2.44.1 contain an authorization issue vulnerability stemming from a bypass of credential protection. This allows shared workflow editors to use restricted credentials by loading sub-workflows via URLs or local files. Attackers can configure the source u...

Go Chi Chi authorization issue vulnerability

Versions prior to go-chi chi 5.5.0 contain an authorization issue vulnerability. This vulnerability stems from authentication bypass in middleware.SupressNotFound; it involves calling Match using a real-time routing context while retaining parameters and sub-tags associated with the mounted route...

Futurum Software User Authentication Module SQL injection vulnerability

Versions of the Futurum Software User Authentication Module prior to May 2026 contain an SQL injection vulnerability. This vulnerability stems from insufficient validation and sanitization of user-supplied input, as well as improper WAF configuration. It may allow unauthenticated attackers to...

King-Themed Product Designer for WooCommerce WordPress | Lumise path traversal vulnerability

King-Themed Product Designer for WooCommerce WordPress | Lumise versions 2.1.2 and earlier contain a path traversal vulnerability. This vulnerability stems from directory traversal in the processcheckout function. Unauthenticated attackers can exploit this flaw by using the /?lumise=ajax...

Klei Entertainment Don’t Starve Together buffer error vulnerability

Klei Entertainment’s Don’t Starve Together versions 747465 and earlier contain a buffer error vulnerability. This vulnerability stems from the native persistent string decoder failing to properly validate specially crafted worldgendata entries with an invalid length for Klei’s persistent blob...

Roman Bataev Joker software supply chain issue vulnerability

Versions of Roman Bataev Joker prior to 1.8.2 contain a software supply chain vulnerability. This vulnerability arises when executing the joker --lint command; it searches upward through the .jokerd/ directory for matching linter. files. As a result, code provided by the repository may be execute...

WordPress Ninja Forms input validation error vulnerability

Versions of WordPress Ninja Forms prior to 3.15.4 contain an input validation error vulnerability. This flaw stems from incomplete server-side validation; unauthenticated attackers can submit arbitrary values via the nfajaxsubmit endpoint to Checkbox List, Multi-Select List, Image List, Country,...

WordPress Post Snippets cross-site scripting vulnerability

WordPress Post Snippets versions 4.2.4 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and output escaping. Authenticated attackers with contributor or higher privileges can exploit this by injecting arbitrary web scripts via shortcod...

Acronis Cyber Protect 17 processing logic error vulnerability

Versions of Acronis Cyber Protect 17 Linux prior to build 42587 contain a logic error vulnerability. This vulnerability arises because Linux binaries enable the executable stack attribute, which may increase the risk of arbitrary code execution...

Grafana Enterprise authorization issue vulnerability

Versions 13.2.0 through 13.2.4 of Grafana Enterprise and Grafana OSS contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks; authenticated users can read SSO client keys and modify instance-level SSO settings without having the required...

EagleCloud Aquila code injection vulnerability

EagleCloud Aquila versions 2.6.7.2 and earlier contain a code injection vulnerability. This vulnerability stems from improper control over code generation in the Pigeon MFA service, potentially allowing authenticated remote attackers to execute arbitrary code via code injection...

GROWI Labs GROWI authorization issue vulnerability

Growi Labs versions from GROWI v3.2.10 through v8.0.6 contain an authorization issue vulnerability. This vulnerability arises from improper usage of user-controlled keys in page viewing and commenting functionalities, resulting in authorization bypass. As a result, authenticated attackers can...

FasterXML Jackson-DataFormat-Smile resource management error vulnerability

A resource management error vulnerability exists in FasterXML Jackson-DataFormat-Smile versions from 2.9.0 up to 2.18.12, from 2.19.0 up to 2.21.8, from 2.22.0 up to 2.22.4, from 3.0.0 up to 3.1.8, and from 3.2.0 up to 3.2.4. This vulnerability stems from the NonBlockingByteArrayParser asynchrono...

DALIBO PostgreSQL Anonymizer authorization issue vulnerability

DALIBO PostgreSQL Anonymizer versions 1 through 3.3.0 contain an authorization issue vulnerability. This vulnerability arises because data is masked when accessing partitions or inherited tables directly; however, the same masking rule is not applied when accessing via parent tables. As a result,...

WordPress Hustle cross-site scripting vulnerability

WordPress Hustle versions 7.8.14.3 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and inadequate output escaping for the contenttitle parameter. As a result, attackers who have been authenticated and possess custom-level or higher...

WordPress Event Booking Manager for WooCommerce permission and access control issue vulnerability

WordPress Event Booking Manager for WooCommerce versions 5.7.8 and earlier contain a vulnerability related to permission escalation and access control. This issue arises because the userhascap hook in the mepgrantshopmanageraccess function grants manageoptions privileges unconditionally whenever...

WordPress S2Member cross-site scripting vulnerability

WordPress S2Member versions 261011 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and inadequate output escaping for the dateformat parameter, potentially enabling stored cross-site scripting attacks. Authenticated attackers with...

DALIBO PostgreSQL Anonymizer processing logic error vulnerability

Versions prior to DALIBO PostgreSQL Anonymizer 3.3.0 contain a logic error vulnerability. This vulnerability arises because the Anonymizer only checks for anonymization functions defined using SQL standard function bodies during execution; PostgreSQL performs such checks at declaration time. As a...

DALIBO PostgreSQL Anonymizer processing logic error vulnerability

Versions 1 through 3.3.0 of the DALIBO PostgreSQL Anonymizer contain a logic error vulnerability. This vulnerability arises because the anon.partial and anon.partialemail functions may leak full data when the input size is too small...

Dmitro Baryshev Squirrel Abstract Imaging Library Digital error vulnerability

Versions prior to 1.0.2 of Dmitro Baryshev’s Squirrel Abstract Imaging Library contain a numeric error vulnerability. This vulnerability arises when the built-in WebP decoder processes malformed WebP files containing inconsistent container or ANMF frame metadata; in such cases, WebPDemuxGetI...

WordPress Cozy Blocks cross-site scripting vulnerability

WordPress Cozy Blocks versions 2.2.27 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and inadequate output escaping for the productRating.iconColor parameter, potentially enabling stored cross-site scripting attacks. Attackers who ar...

WordPress Cozy Blocks cross-site scripting vulnerability

WordPress Cozy Blocks versions 2.2.27 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and output escaping for the content parameter icon.view/icon.layout/icon.gap, allowing authenticated attackers with contributor or higher privileges...

WordPress Travelly cross-site scripting vulnerability

WordPress Travelly versions 2.3.6 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping of width, height, and zoom attributes in the ttbm-hotel-map shortcode. The ttbmhotelmapshortcode function concatenates thes...

WordPress easy.jobs cross-site scripting vulnerability

WordPress easy.jobs versions 2.8.2 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and output escaping for user-supplied attributes. As a result, authenticated attackers with contributor or higher privileges can inject stored cross-si...

DALIBO PostgreSQL Anonymizer information disclosure vulnerability

Versions 1 through 3.3.0 of DALIBO PostgreSQL Anonymizer contain an information disclosure vulnerability. This vulnerability arises because, when SELECT privileges are granted, optimized statistical information on tables becomes visible; mask roles can then read a limited subset of data via...

Juniper Networks Session Smart Router buffer error vulnerability

Versions prior to Juniper Networks Session Smart Router 7.0.5, versions 7.1.x prior to 7.1.7, and versions 7.2.x prior to 7.2.3 contain a buffer error vulnerability. This vulnerability stems from a stack buffer overflow in the DHCP client, potentially allowing unauthenticated local network...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.8. It arises because the xeevictflags function dereferences a NULL resource when evicting a BO without a resource, potentially leading to a null pointer dereference in the kernel...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.2. It arises because au1000probe connects to the PHY before allocating dev-netdevops; as a result, phyattachdirect reads dev-netdevops via netdevneedopslock. When CONFIGNETSHAPER is enabled, this leads to a null pointer dereference and a...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.6. It stems from a race condition between the installation and probe of the chained IRQ handler within the gpio mxc driver. This race may lead to an interrupt occurring when this window is reached, resulting in null pointer dereferencing o...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.18. It stems from rocketremove decrementing numcores, while findcorefordev only searches for indices ranging from 0 to numcores - 1. When unbinding cores in order of binding, the last core is omitted, preventing numcores from reaching zero...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.18. It stems from schedtocore failing to search for all allocated core slots; after unbinding a non-last core, it returns NULL without checking the return value, which may lead to null pointer dereferencing...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.1. This vulnerability arises from delayed reentrancy, which may allow reading a user DSQ that has been freed, leading to use-after-free conditions...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.11. It stems from s390/pai failing to handle situations where the PMU stop callback is invoked repeatedly, potentially leading to improper handling of sampling events...

Xerte Project Xerte Online Toolkits arbitrary file upload vulnerability

Xerte Project Xerte Online Toolkits versions 3.15.5 and earlier contain an arbitrary file upload vulnerability. This vulnerability arises when a specially crafted language package ZIP containing the include.inc file is imported via importlanguage.php; subsequent requests using the language...

WordPress Dokan deserialization injection vulnerability

WordPress Dokan versions 5.3.1 and earlier contain a deserialization injection vulnerability. This vulnerability stems from the deserialization of untrusted data, potentially leading to object injection...

WordPress Unlimited Elements For Elementor cross-site scripting vulnerability

WordPress Unlimited Elements For Elementor versions 2.0.24 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and may lead to reflected cross-site scripting attacks...