CVE Vulnerability Catalog

The Accessibility Checker by Equalize Digital plugin (versions up to 1.31.0) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

The BerqWP plugin (versions up to 2.2.53) has a missing authorization vulnerability. This allows exploitation of incorrectly configured access control security levels.

The Accessibility Checker by Equalize Digital plugin through version 1.31.0 contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This may lead to unauthorized access to functions or data.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side requests and bypass security controls allowing unauthorized read access.

Improper input validation in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.

The Majestic Support plugin in versions up to 1.1.0 contains a missing authorization vulnerability that can lead to unauthorized access.

The GoodBarber plugin (versions up to 1.0.26) contains an Open Redirect vulnerability. This can redirect users to untrusted sites.

Missing authorization in Ivanti products (Connect Secure, Policy Secure, ZTA Gateway, Neurons for Secure Access) allows a remote authenticated attacker with read-only admin privileges to configure restricted settings.

A CSRF vulnerability exists in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723, and Ivanti Neurons for Secure Access before 22.8R1.4 (fix deployed 02-Aug-2025). A remote unauthenticated attacker can execute limited actions on behalf of the victim user, requiring user interaction.

An unchecked return value vulnerability exists in Ivanti Connect Secure, Policy Secure, ZTA Gateway, and Neurons for Secure Access. A remote authenticated attacker with admin privileges can trigger a denial of service.

Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723, and Ivanti Neurons for Secure Access before 22.8R1.4 allows a remote authenticated attacker with read-only admin privileges to configure restricted settings.

Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723, and Ivanti Neurons for Secure Access before 22.8R1.4 allows a remote unauthenticated attacker to inject arbitrary text into a crafted HTTP response. User interaction is required.

An SSRF vulnerability in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723, and Ivanti Neurons for Secure Access before 22.8R1.4 (fix deployed on 02-Aug-2025) allows a remote authenticated attacker with admin privileges to enumerate internal services.

A Cross Site Scripting (XSS) vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload in the meta configuration robots field.

A stored cross-site scripting (XSS) vulnerability exists in Liferay Portal and Liferay DXP within the Custom Object field label. A remote authenticated attacker can inject JavaScript that is stored and executed through Process Builder's Configuration tab without proper escaping.

A vulnerability exists in the ConsoleFindCommandMatchList function in libsymproc.so imported by ctpd that may lead to unauthorized execution of an attacker-defined file prioritized by the function. The function enumerates /dev/shm/symproc/c alphabetically and infers permission levels from integer values in filenames. Confirmed affected hardware includes TSW-760 and TSW-1060 with specific firmware.

Network-connected APOGEE PXC Series (BACnet), APOGEE PXC Series (P2 Ethernet), and TALON TC Series (BACnet) devices allow unrestricted access to sensitive files such as databases. An attacker could download an encrypted .db file containing passwords.

SINAMICS G220, S200, and S210 V6.4 (below specified HF versions) have improper privilege management and leaked privileges from previous sessions. This allows an unauthorized attacker to perform a factory reset without required privileges and escalate privileges.

Liferay Portal and Liferay DXP expose an "Internal Server Error" in the response body when a login attempt is made with a deleted Client Secret. This may reveal information about the application's internal behavior.