CVE Vulnerability Catalog

Wtyczka Order Notification dla WooCommerce w WordPressie przed wersją 3.6.3 narusza kontrole uprawnień WooCommerce, co pozwala na pełny dostęp do wszystkich nieautoryzowanych żądań. Umożliwia to całkowity dostęp do zasobów sklepu, takich jak produkty, kupony i klienci.

Wykorzystanie po zwolnieniu pamięci w procesie kompozycji w Google Chrome przed wersją 146.0.7680.178 umożliwia zdalnemu atakującemu, który przejął proces renderowania, potencjalne wykonanie ucieczki z piaskownicy za pomocą spreparowanej strony HTML.

W Google Chrome przed wersją 146.0.7680.178 występowała podatność typu use after free w nawigacji, która mogła pozwolić zdalnemu atakującemu, mającemu kontrolę nad procesem renderowania, na potencjalne wykonanie ucieczki z piaskownicy za pomocą spreparowanej strony HTML.

Wykorzystanie po zwolnieniu pamięci w WebView w Google Chrome na Androidzie przed wersją 146.0.7680.178 umożliwia zdalnemu atakującemu, który przejął proces renderowania, potencjalne wykonanie ucieczki z piaskownicy za pomocą spreparowanej strony HTML.

An improper restriction of XML external entity reference vulnerability in RTI Connext Professional (Recording Service, Routing Service, Queueing Service, Cloud Discovery Service, Observability Collector) allows serialized data external linking and data serialization external entities blowup. It affects Connext Professional versions from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.1, from 6.1.0 before 6.1.2.34, from 6.0.0 before 6.0.*, and from 5.3.0 before 5.3.*.

XenForo w wersjach przed 2.3.7 zawiera problem bezpieczeństwa dotyczący kluczy dostępu (Passkeys) dodanych do kont użytkowników. Atakujący może być w stanie naruszyć bezpieczeństwo uwierzytelniania opartego na kluczach dostępu.

SiYuan, a personal knowledge management system, prior to version 3.6.2 allows a malicious website to achieve Remote Code Execution (RCE) on any desktop running SiYuan. This is due to an overly permissive CORS policy (Access-Control-Allow-Origin: * + Access-Control-Allow-Private-Network: true) that enables injecting JavaScript via the API. The injected code executes in Electron's Node.js context with full OS access the next time the user opens SiYuan's UI. No user interaction is required beyond visiting the malicious website while SiYuan is running.

SiYuan prior to version 3.6.2 allows stored XSS via a malicious URL in the Asset View field. In the Electron client, the XSS escalates to arbitrary OS command execution due to enabled nodeIntegration and disabled contextIsolation.

Alerta versions prior to 9.1.0 contain a SQL injection vulnerability in the Query string search API (q=). The query is built by directly interpolating user-supplied search terms into SQL strings via f-strings, allowing manipulation of the query.

The MAVLink communication protocol does not require cryptographic authentication by default. When MAVLink 2.0 message signing is not enabled, any message, including SERIAL_CONTROL providing interactive shell access, can be sent by an unauthenticated party with access to the MAVLink interface. PX4 provides message signing as the cryptographic authentication mechanism, and when enabled, unsigned messages are rejected at the protocol level.

Zora: Post, Trade, Earn Crypto version v2.60.0 contains an arbitrary file overwrite vulnerability during the file import process. An attacker can overwrite critical internal files, potentially leading to arbitrary code execution or information exposure.

The MS27102A Remote Spectrum Monitor is vulnerable to authentication bypass, allowing unauthorized users to access and manipulate its management interface. The device provides no mechanism to enable or configure authentication, making the issue inherent to its design.

Funambol Zefiro Cloud version v32.0.2026011614 contains an arbitrary file overwrite vulnerability during the file import process. An attacker can overwrite critical internal files, potentially leading to arbitrary code execution or information exposure.

The NIS Animal Sounds and Ringtones app version 1.3.0 by PEAKSEL D.O.O. contains an arbitrary file overwrite vulnerability during the file import process. An attacker can overwrite critical internal files of the application.

An arbitrary file overwrite vulnerability in Cast to TV Screen Mirroring v2.2.77 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

In FLY is FUN Aviation Navigation v35.33, an arbitrary file overwrite vulnerability exists during file import. An attacker can overwrite critical internal files, leading to arbitrary code execution or information exposure.

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, the FHIR Validator HTTP service exposes an unauthenticated "/loadIG" endpoint that makes outbound HTTP requests to attacker-controlled URLs. Combined with a startsWith() URL prefix matching flaw in the credential provider (ManagedWebAccessUtils.getServer()), an attacker can steal authentication tokens (Bearer, Basic, API keys) configured for legitimate FHIR servers by registering a domain that prefix-matches a configured server URL. This issue has been patched in version 6.9.4.

wenxian versions 0.3.1 and prior contain a command injection vulnerability in a GitHub Actions workflow. Untrusted user input from issue_comment.body is used directly inside a shell command, allowing potential arbitrary code execution on the runner. At the time of publication, no public patches are available.

PJSIP before version 2.17 has a heap out-of-bounds read vulnerability in the VP9 RTP unpacketizer. Insufficient bounds checking on payload descriptor length may cause reads beyond the allocated RTP buffer.

MikroORM prior to versions 6.6.10 and 7.0.6 has a prototype pollution vulnerability in the Utils.merge helper used internally when merging object structures. The function did not prevent special keys such as __proto__, constructor, or prototype, allowing attacker-controlled input to modify the JavaScript object prototype.