CVE Vulnerability Catalog

In Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3, unknown functionality in /ExportFiles/ allows access to files or directories. The attack can be launched remotely but has high complexity. The exploit is publicly available.

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

A vulnerability was determined in code-projects Student File Management System 1.0. Manipulation in the file /admin/update_student.php leads to cross site scripting. The attack may be launched remotely and the exploit has been publicly disclosed.

A vulnerability was found in code-projects Student File Management System 1.0. It affects an unknown part of the file /admin/update_user.php in the Update User Page component. Manipulation leads to cross site scripting. The attack may be initiated remotely and the exploit has been made public.

In MartialBE one-hub up to 0.14.27, the SESSION_SECRET argument in docker-compose.yml uses a hard-coded cryptographic key. The attack can be initiated remotely but has high complexity. Changing configuration is recommended.

In Tenda AX9 22.03.01.46, the image_check function of the httpd component uses a weak hash. The attack can be launched remotely but has high complexity. The exploit is publicly available.

The rtMedia for WordPress, BuddyPress and bbPress plugin versions 4.7.0 to 4.7.3 is vulnerable to information disclosure due to missing authorization in the handle_rest_pre_dispatch() function when the Godam plugin is active. This allows unauthenticated attackers to retrieve media items associated with draft or private posts.

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in various Apple operating systems. Processing malicious data may lead to unexpected app termination.

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. The issue is fixed in macOS Sequoia 15.7.3 and macOS Tahoe 26.2. An app may be able to access user-sensitive data.

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, watchOS 26.2. An app may be able to inappropriately access files through the spellcheck API.

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data.

A session management issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. A user with Voice Control enabled may be able to transcribe another user's activity.

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 26.1 and iPadOS 26.1. An app may be able to fingerprint the user.

macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.2 fix an issue with cache handling that allowed an attacker with physical access to view deleted notes.

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.

A cross-site scripting (XSS) vulnerability has been detected in Qualitor up to version 8.24.73. The issue affects an unknown function in the file /Qualitor/html/bc/bcdocumento9/biblioteca/request/viewDocumento.php and is triggered by manipulating the cdscript argument. The attack can be launched remotely and the exploit has been publicly disclosed.

The CleverDisplay BlueOne hardware player has physically enclosed USB interfaces, but after bypassing the enclosure, a USB keyboard can be connected and ESC pressed during boot to access the BIOS setup. BIOS settings can be viewed but not modified. This may expose internal system information.

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information.

The WP Fastest Cache Premium plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to and including 1.7.4 via the 'get_server_time_ajax_request' AJAX action. Authenticated attackers with Subscriber-level access and above can make web requests to arbitrary locations from the web application and query or modify information from internal services. The free version is not affected.

AzuraCast version 0.23.1 mistakenly exposes an API endpoint intended for internal use by the SFTP software sftpgo through the public-facing HTTP API. A user with specific internal knowledge of a station's operations can craft a custom HTTP request that affects the contents of a station's database. This issue is fixed in version 0.23.2.