CVE Vulnerability Catalog

A vulnerability in Gleam allows a man-in-the-middle attacker to substitute forged Hex package contents during dependency resolution due to insufficient verification of data authenticity. The second request to the unsigned Hex API is used instead of verified repository metadata.

A code injection vulnerability in swagger-typescript-api (prior to 13.12.2) occurs during API client generation. The parseRouteName function passes OpenAPI path keys to templates without proper escaping of JavaScript template literal interpolation, allowing an attacker to inject ${...} code in the path that executes when the generated method is called.

A code injection vulnerability in swagger-typescript-api (prior to 13.12.2) occurs when processing enum values in OpenAPI schema components. Enum values are passed to Ts.StringValue without escaping before rendering TypeScript enum declarations, allowing an attacker to inject code that executes when the generated module is imported.

A code injection vulnerability in swagger-typescript-api (prior to 13.12.2) occurs when copying the server URL from OpenAPI to apiConfig.baseUrl. The template interpolates apiConfig.baseUrl without escaping, allowing an attacker to inject TypeScript code that executes when the generated fetch client module is imported.

swagger-typescript-api prior to 13.12.2 does not escape the server URL interpolation in the axios-http-client.ejs template. An attacker can supply a malicious OpenAPI spec that injects JavaScript code executed when HttpClient or Api is instantiated.

swagger-typescript-api prior to 13.12.2 forwards the --authorizationToken to every request fetching remote OpenAPI schemas. An attacker can use a malicious spec to exfiltrate this token to an external endpoint.

TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that allows an authenticated attacker to bypass configured 2FA for connection approval via Unattended Access and establish a remote connection to a macOS host.

cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when applying untrusted RFC 6902 JSON Patch via cJSONUtils_ApplyPatches. An attacker can supply a patch with add and copy operations that amplify document depth, causing a stack overflow and process crash.

Joomla Extension Gridbox below version 2.20.2 has a vulnerability allowing an unauthenticated attacker to recursively delete directories via the generateNewApp method.

open-iscsi has a Double Free vulnerability that allows an unauthenticated MITM attacker to cause DoS. The issue affects versions up to 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

CSRF vulnerability in the Joomla extension RO CSVI versions prior to 9.11.0. CSRF vectors exist in AJAX endpoint handlers, potentially allowing an attacker to perform unauthorized actions in the context of an administrator's session.

Joomla extension RO CSVI (rolandd.com) before version 9.11.0 allows unauthenticated attackers to create directories on the server.

Joomla Extension Gridbox below version 2.20.2 has a vulnerability allowing an authenticated attacker to upload arbitrary files. Combined with CVE-2026-65884, it can lead to remote code execution (RCE).

Streamsoft Business Intelligence (BI) stores user passwords in plaintext in the database. This issue was fixed in version 6.8.0.0, and users were requested to change their password on first login.

open-iscsi has an Incorrect Authorization vulnerability that allows unprivileged local users to use the iscsiuio control socket. The issue affects versions up to 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

CWE-522 Insufficiently Protected Credentials vulnerability allows a local privileged attacker to bypass authentication and modify credentials, potentially leading to compromise of managed devices.

CWE-787 Out-of-bounds write vulnerability in IGSS Definition can cause data loss or potential arbitrary code execution when importing a malicious CGF file.

The Extra Checkout Options plugin for WordPress up to version 2.3.2 allows authenticated users with Subscriber-level access and above to upload PHP files. Missing authorization and nonce validation in the eco_save_settings() function enables modification of allowed file types, followed by PHP file upload via the frontend, leading to remote code execution.

GNU Bison allows arbitrary program execution during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for XML-to-HTML transformation via %define tool.xsltproc, which is accepted without restriction and passed directly to execvp(). Running bison --html on an attacker-provided grammar enables execution of an arbitrary program with the privileges of the Bison process.

In the BFD library of GNU binutils, the DLX ELF backend's dlx_rtype_to_howto() function lacks bounds checking, allowing out-of-bounds write. A crafted ELF/DLX file can lead to arbitrary code execution.