CVEs

Unauthenticated Local File Inclusion in Mikado Core <= 1.6 versions.

Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions.

Unauthenticated Local File Inclusion in Solene <= 3.4 versions.

Unauthenticated PHP Object Injection in Kapee < 1.7.0 versions.

Unauthenticated PHP Object Injection in EmallShop <= 2.4.21 versions.

Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions.

Subscriber Arbitrary Content Deletion in WPAMS < 49.5.3 versions.

Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions.

Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions.

Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions.

Unauthenticated Sensitive Data Exposure in Bricksforge <= 3.1.8.4 versions.

Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.

DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.

A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressbook file backend allows a Flatpak application with D-Bus access to craft a malicious URI containing directory traversal sequences. This URI is stored without proper validation during contact…

In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In MmsSmsProvider of MmsSmsProvider.java, there is a possible way to retrieve sensitive information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

In PackageInstaller.Session#transfer of frameworks/base/services/core/java/com/android/server/pm/PackageInstallerSession.java, there is a possible memory exhaustion attack due to a logic error in the code. This could lead to local denial of service with no additional execution…

An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, registration action IS required) who has the vulnerable software could, introduce arbitrary JavaScript by injecting a Cross-site Scripting (XSS)  payload into the 'Hostname'…

An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could, with a Slow Loris attack, cause Denial of Service (DoS) on the web interface of the device. This…

An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could obtain privilege information by using the command Version via the path:…

Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions.

Unauthenticated Deserialization of untrusted data in Slimstat Analytics < 5.4.0 versions.

Unauthenticated Arbitrary File Deletion in BookPro <= 1.1.0 versions.

Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.

Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions.

Unauthenticated Remote Code Execution (RCE) in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.47 versions.

Subscriber Arbitrary File Upload in WishList Member X <= 3.29.0 versions.

Unauthenticated Broken Authentication in Booknetic <= 4.8.5 versions.

Unauthenticated Broken Access Control in MetForm Pro <= 3.9.1 versions.

Subscriber Broken Access Control in MetForm Pro <= 3.9.1 versions.

Subscriber Broken Access Control in WishList Member X <= 3.29.0 versions.

Unauthenticated Broken Access Control in WordPress Dating Theme <= 11.2.0 versions.

Unauthenticated Cross Site Request Forgery (CSRF) in WordPress Dating Theme <= 11.2.0 versions.

Unauthenticated SQL Injection in WPJobster <= 6.3.5 versions.

Unauthenticated Cross Site Scripting (XSS) in WPJobster <= 6.3.5 versions.

Unauthenticated Local File Inclusion in EcoBlue <= 1.15 versions.

Subscriber SQL Injection in WooCommerce Frontend Manager – Ultimate < 6.7.7 versions.

Subscriber Arbitrary File Download in Woocommerce Book Price <= 1.3 versions.

Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions.

Unauthenticated Local File Inclusion in AutoParts <= 1.5.8 versions.

Unauthenticated Local File Inclusion in Right Way <= 4.0 versions.

Unauthenticated Cross Site Scripting (XSS) in Skillate <= 1.2.10 versions.

Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions.

Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions.

Unauthenticated Local File Inclusion in Reprizo <= 1.0.8 versions.

Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.

A flaw was found in vLLM, an open-source library for large language model inference. This vulnerability arises from improper handling of image metadata, specifically EXIF orientation and PNG transparency (tRNS) data, during image processing. When images are converted to RGB,…

Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)