CVE Vulnerability Catalog

W jądrze Linuksa naprawiono podatność, która pozwalała na zapis poza granicami bufora w funkcji smb2_get_ea(). Problem występował z powodu braku sprawdzenia długości bufora przed zastosowaniem wyrównania pamięci, co mogło prowadzić do nadpisania sąsiedniej pamięci jądra.

Apache MINA versions 2.1.0 to 2.1.11 and 2.2.0 to 2.2.6 are vulnerable to arbitrary code execution due to a lack of class verification in the AbstractIoBuffer.resolveClass() method. The fix was introduced in versions 2.1.12 and 2.2.7.

The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete and was not applied to the 2.1.X and 2.2.X branches. The classname allowlist was applied too late, after a static initializer in a class to be read might already have been executed. Affected versions are Apache MINA 2.1.0–2.1.11 and 2.2.0–2.2.6; the issue is resolved in 2.1.12 and 2.2.7.

The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0. This is due to improper input validation in the maybe_login_temporary_user() function, allowing authentication without a valid token.

JS8Call versions 2.3.1 and earlier, as well as JS8Call-improved before version 3.0, have a stack-based buffer overflow vulnerability that occurs during a radio transmission of @APRSIS GRID followed by a long Maidenhead locator. This issue occurs in the grid2deg function in APRSISClient.cpp.

Bitwarden CLI version 2026.4.0, obtained from npm on April 22, 2026, contained embedded malicious code. This incident is related to a Checkmarx supply chain issue.

A security vulnerability has been detected in Totolink NR1800X version 9.1.0u.6279_B20210910 in the function find_host_ip of the lighttpd component. Manipulation of the Host argument leads to stack-based buffer overflow.

A vulnerability was identified in the Totolink A8000RU device version 7.1cu.643_b20200521, affecting the function in the file /cgi-bin/cstecgi.cgi of the CGI Handler component. Manipulation of the argument proto leads to OS command injection.

A high severity authentication bypass vulnerability was found in Traefik's ForwardAuth and snippet-based authentication middleware. The issue stems from improper sanitization of header aliases using underscores instead of dashes, allowing an attacker to inject spoofed trust context and bypass authentication without valid credentials.

An authentication bypass vulnerability was found in Traefik's ForwardAuth middleware when trustForwardHeader=false is set and Traefik runs behind a trusted upstream proxy. The issue is fixed in versions 2.11.43, 3.6.14, and 3.7.0-rc.2.

CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to version 14.50. Attackers controlling a modified server can send a special packet that can overwrite a small portion of memory, potentially leading to memory corruption or denial of service.

CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to version 14.50. Attackers controlling a modified server can send a special packet that can overwrite a small portion of memory, potentially leading to memory corruption or denial of service.

Podatność na przejście ścieżki w punkcie końcowym /content/images/add w shopizer v3.2.5 umożliwia atakującym zapis dowolnych plików w dowolnej ścieżce zapisu za pomocą odpowiednio skonstruowanego żądania POST.

W wersji 5.15.1 JeeSite występuje problem z parametrem fileMd5 w punkcie końcowym /a/file/upload, który pozwala uwierzytelnionym atakującym z uprawnieniami do przesyłania plików na wykonanie ataku typu path traversal. Umożliwia to zapisanie dowolnych plików z dozwolonymi rozszerzeniami w dowolnych lokalizacjach systemu plików, gdy przesyłanie w kawałkach jest włączone.

The Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoint, allowing for remote code execution.

Weaver (Fanwei) E-office w wersjach przed 10.0_20221201 zawiera podatność na nieautoryzowane przesyłanie plików w punkcie końcowym OfficeServer.php. Umożliwia to zdalnym atakującym przesyłanie złośliwych plików poprzez wysyłanie wieloczęściowych żądań POST z dowolnymi nazwami plików i ukrytymi typami zawartości.

CVE-2026-4670 vulnerability in MOVEit Automation allows for authentication bypass. This affects versions from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, and versions prior to 2024.0.0.

An improper restriction of XML external entity reference vulnerability in RTI Connext Professional (Core Libraries) allows serialized data external linking. It affects Connext Professional versions from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.1, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, from 5.2.0 before 5.2.*, and from 4.3x before 5.1.*.

Plack::Middleware::XSendfile versions through 1.0053 for Perl allow client-controlled path rewriting. A client can set the X-Sendfile-Type header to 'X-Accel-Redirect', enabling path mapping to arbitrary files on the server.

Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin cookie to change DNS servers and redirect user traffic to malicious sites.