CVE Vulnerability Catalog

A security flaw was discovered in JeecgBoot up to version 3.8.2 in the tenant log export functionality at /sys/tenant/exportLog. Manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been publicly disclosed and may be exploited. The vendor did not respond.

A vulnerability was identified in JeecgBoot up to 3.8.2 in an unknown function of the /api/system/sendWebSocketMsg file within the WebSocket Message Handler component. Manipulation of the userIds argument leads to improper authorization, and the attack can be initiated remotely. The exploit is publicly available and might be used.

The Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. This can be used to leak the NTLMv2 hash from a Windows system.

The Contact Form 7 reCAPTCHA plugin for WordPress up to version 1.2.0 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers.

GitLab CE/EE affecting all versions from 7.8 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 could have allowed an authenticated user with Developer-level access to cause a persistent denial of service affecting all users on a GitLab instance by uploading large files.

An issue was discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2. Authenticated users could view administrator-only maintenance notes by accessing runner details through specific interfaces.

The WTW-EAGLE App does not properly validate server certificates, which may allow a man-in-the-middle attacker to monitor encrypted traffic.

An issue has been discovered in GitLab CE/EE that could have allowed an authenticated user to stall background job processing by sending specially crafted commit messages, merge request descriptions, or notes.

curl's WebSocket code did not update the 32-bit mask pattern for each new outgoing frame as the specification requires. Instead it used a fixed mask that persisted throughout the entire connection. A predictable mask pattern allows a malicious server to induce traffic that an involved proxy may interpret as genuine HTTP traffic and poison its cache.

An issue has been discovered in GitLab CE/EE that could have allowed authenticated users to disrupt access to token listings and related administrative operations by creating tokens with excessively large names.

The Spotify Embed Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spotify' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

A flaw was found in YunaiV ruoyi-vue-pro up to 2025.09 affecting the file /crm/contact/transfer, where manipulation of the ids/newOwnerUserId arguments causes improper authorization. The attack can be carried out remotely and the exploit has been published.

JSON Web Services in Liferay Portal and Liferay DXP published to OSGi are registered and invoked directly as classes, allowing Service Access Policies to be executed.

The organization selector in Liferay Portal and Liferay DXP does not check user permission. Remote authenticated users can obtain a list of all organizations.

A vulnerability was detected in YunaiV yudao-cloud up to 2025.09 affecting the file /crm/receivable/submit, where manipulation of the ID argument results in improper authorization. The attack can be executed remotely and the exploit is public. The patch is identified as 0f573e1d8e1a895e1bcbb7740ef75306412c3f9d.

A security vulnerability was detected in YunaiV ruoyi-vue-pro up to 2025.09 affecting the file /crm/contract/transfer, where manipulation of the id/newOwnerUserId arguments leads to improper authorization. Remote exploitation is possible and the exploit has been publicly disclosed.

A weakness was identified in YunaiV yudao-cloud up to 2025.09 affecting the file /crm/business/transfer, where manipulation of the ids/newOwnerUserId arguments leads to improper authorization. The attack may be launched remotely and the exploit has been made public.

A missing authentication vulnerability was reported in some Lenovo printers that could allow a user to view limited device information or modify network settings via the CUPS service.

An Insecure Direct Object Reference (IDOR) vulnerability exists in Liferay Portal 7.4.0 through 7.4.3.124 and Liferay DXP (2024.Q2.0–2024.Q2.7, 2024.Q1.1–2024.Q1.12, 7.4 GA through update 92). A remote authenticated user can access a workflow definition by name via the API.

In the Linux kernel, a conditional IBPB mitigation was added for the VMSCAPE vulnerability, which exploits weak branch predictor isolation between a guest and userspace hypervisor (e.g., QEMU). The patch issues an IBPB after VMexit before returning to userspace, improving security but potentially impacting performance in workloads with frequent hypervisor-userspace switches.