CVE Vulnerability Catalog

In NocoDB up to 2026.07.0, the AuthService.validateUser function in the Sign-in Endpoint component, when the salt argument is manipulated, leads to information disclosure. The attack can be performed remotely, is rated high complexity, and is considered difficult to exploit. The vendor deleted the GitHub issue without explanation and did not respond to email contact.

In NocoDB up to 2026.08.0, unspecified processing in users.service.ts within the Registration component leads to a race condition. The attack can be performed remotely, requires a high level of complexity, and is assessed as difficult to exploit. The vendor deleted the GitHub issue without explanation and did not respond to email contact.

In NocoDB up to 2026.07.0, the UserRefreshToken.deleteAllUserToken function in /auth/user/signup, part of the PublicApiLimiterGuard component, allows uncontrolled resource allocation. The absence of in-app rate limiting on unauthenticated signup and password-forgot endpoints enables a remote attack of high complexity. The vendor considers the limiter pass-through intentional design and deleted the issue without explanation.

A vulnerability was found in NocoDB up to version 2026.08.0 in an unknown part of the users.service.ts file within the Password-Reset Flow component. The manipulation results in a race condition that can be exploited remotely. The vendor deleted the GitHub issue without explanation and did not respond to disclosure contact.

A vulnerability was found in Z.ai Zcode up to versions 3.14.3/3.15.1 in an unknown functionality of the Sed Command Filter component. The manipulation leads to OS command injection, and remote exploitation is possible. The exploit has been publicly disclosed and may be used.

A flaw was found in halo-dev halo up to version 2.27.0-beta.1 in the resolveViewNameOrDefault function of the DefaultViewNameResolver class, which handles view name resolution. Manipulating the template argument leads to path traversal, allowing access to files outside the intended directory. The vulnerability can be exploited remotely and a public exploit is already available.

The Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the application's installation folder may be tampered with, resulting in arbitrary code execution.

A vulnerability was detected in the Yoosee GM8135S Camera version 21.00.01.36 within the Secure Boot component. Improper verification of cryptographic signatures allows bypassing secure boot. The attack requires local access, and a public exploit is available.

A security vulnerability was detected in the Yoosee GM8135S Camera version 21.00.01.36 in the wpa_supplicantX.conf file of the WiFi Configuration component. Improper initialization can be exploited by an attacker on the local network. The exploit is publicly disclosed and the attack is highly complex.

A weakness was identified in the Yoosee GM8135S Camera version 21.00.01.36 in the /npc/npc file of the Live UDP H.264 Video Stream Handler component. The manipulation causes cleartext transmission of sensitive information. The attack can be initiated remotely, though it is highly complex.

A security flaw was discovered in GouGuOA up to version 6.1.2 in the chunkUpload function of app/disk/controller/Api.php. Manipulating the file_extension argument results in unrestricted file upload. A public exploit is available and can be used for remote attacks.

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system in the file admin/add-new.php, where manipulation of the 'spec' argument leads to SQL injection. The attack can be performed remotely, and a publicly available exploit may be used. The product uses a rolling release model, so no version details are available.

A vulnerability was determined in 2K Games Civilization V 1.0.3.144 in the loadstring function of the Lua Sandbox component, leading to type confusion. The attack may be performed remotely, and the exploit has been publicly disclosed. The vendor did not respond to the disclosure.

A vulnerability was found in GiantappMan LiveWallPaper 2.6.8.0 on Windows in the SignalR Hub component, file /LiveWallpaper/UploadFile, resulting in missing authentication. The attack can be carried out remotely, and the exploit has been made public. A patch named b62f878899adbfc2968e3345442f3a3df91b774d is available.

A vulnerability has been found in continuedev Continue 2.0.0 in the MCPManagerSingleton.setConnections function of file core/config/ConfigHandler.ts of the MCP Server Transport component, leading to OS command injection. The attack can be executed remotely, and the exploit has been disclosed to the public. The vendor did not respond to the disclosure.

A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0, affecting an unknown part of the file openbb_platform/core/openbb_core/app/model/api_settings.py of the Local API Server component. This manipulation causes improper access controls, remote exploitation is possible, and the exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was detected in the Datafeedr Product Sets Plugin up to 1.3.24 on WordPress, affecting the function dfrps_ajax_delete_saved_search in the file functions/ajax.php of the AJAX Handlers component. The manipulation results in missing authorization, the attack may be launched remotely, and the exploit is now public and may be used. Upgrading to version 1.3.25 can resolve this issue.

A security vulnerability has been detected in HeyCyan App 1.0.103 on Android, affecting an unknown functionality of the FileProvider component. The manipulation leads to improper access controls and the attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

A weakness has been identified in HeyCyan App 1.0.103 on Android, affecting an unknown function of the AndroidManifest.xml file of the Network Security Configuration component. Executing a manipulation can lead to cleartext transmission of sensitive information; the attack can be launched remotely but requires a high level of complexity and exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

A flaw was found in Sony Neural Network Libraries up to 1.39.0 affecting the func_set_nnabla_version_decorate function in python/src/nnabla/utils/converter/utils.py (NNP Converter component). Manipulating the function.type argument leads to code injection, and the attack can be launched remotely. The exploit has been publicly released and the vendor did not respond to the disclosure.