CVE Brief Security Intelligence

The AdRotate Banner Manager plugin for WordPress is vulnerable to PHP Code Injection, potentially allowing remote code execution.

A critical vulnerability exists in the Jenkins External Workspace Manager Plugin, potentially allowing for unauthorized access or system compromise.

A use-after-free vulnerability in the Digital Credentials component of Google Chrome on Mac allows for potential memory corruption or arbitrary code execution.

A use-after-free vulnerability exists in the FileSystem component of Google Chrome prior to version 149, potentially allowing arbitrary code execution.

A use-after-free vulnerability in the Blink rendering engine of Google Chrome prior to version 149 may allow for arbitrary code execution.

A use-after-free vulnerability in the Bluetooth component of Google Chrome on macOS prior to version 149 could allow for arbitrary code execution.

A use-after-free vulnerability exists in the Blink rendering engine of Google Chrome, potentially allowing for arbitrary code execution or system instability.

A use-after-free vulnerability in the Autofill component of Google Chrome on Windows may allow attackers to trigger memory corruption and execute arbitrary code.

An out-of-bounds read and write vulnerability in the Blink InterestGroups component of Google Chrome could lead to memory corruption and potential code execution.

A race condition vulnerability exists within the DevTools component of Google Chrome, potentially allowing for unauthorized exploitation.

Apple M1 GPUs fail to clear register file data between compute shader dispatches, potentially allowing data leakage between processes.

A critical security vulnerability has been identified in the Jenkins Script Security Plugin, potentially allowing for unauthorized script execution.

A vulnerability in the Jenkins OWASP ZAP Plugin may allow attackers to exploit security testing configurations to gain unauthorized access or execute code.

A SQL injection vulnerability in the NVBUDashboard component of Quest NetVault Backup allows remote code execution.

A SQL injection vulnerability in the NVBURASDevice component of Quest NetVault Backup enables remote code execution.

A SQL injection vulnerability in the NVBUDeviceDrive component of Quest NetVault Backup facilitates remote code execution.

Quest NetVault Backup is vulnerable to a SQL injection flaw within the NVBURemovableMedia component, potentially allowing for remote code execution.

Quest NetVault Backup contains a SQL injection vulnerability in the NVBULibraryPort component, which may enable remote code execution by an attacker.

Quest NetVault Backup is susceptible to a SQL injection vulnerability within the NVBULibrarySlot component, which could allow an attacker to perform remote code execution.

A SQL injection vulnerability in the NVBUDashboard component of Quest NetVault Backup allows remote attackers to potentially execute arbitrary code.

A command injection vulnerability in the NVBULogDaemon component of Quest NetVault Backup enables remote attackers to execute arbitrary system commands.

A file upload command injection vulnerability in the Unraid web server allows remote attackers to execute arbitrary commands by uploading malicious files.

Unraid Web Server is vulnerable to remote code execution via command injection in the ToggleState function.

NSD is vulnerable to a heap overflow during AXFR zone transfers when processing maliciously crafted SVCB resource records.

The Mistune Python Markdown parser is susceptible to a vulnerability that may allow for remote code execution or cross-site scripting depending on the implementation.

A vulnerability in the NSD name server software fails to properly enforce client certificate authentication when a provide-xfr is configured with a tls-auth-name.

A security vulnerability has been identified in the concurrent-ruby library for Ruby, potentially impacting applications relying on these concurrency tools.

An OS command injection vulnerability exists in the Rapid7 InsightConnect Sed Plugin, allowing authenticated attackers to execute arbitrary system commands via the expression parameter.

Quest NetVault Backup is vulnerable to a cross-site scripting (XSS) flaw in the viewclient component that facilitates authentication bypass.

Quest NetVault Backup contains a cross-site scripting (XSS) vulnerability in the addclient3 function that permits authentication bypass.

The Appsmith platform, used for building internal tools and admin panels, contains a critical security vulnerability requiring immediate attention.

Gogs is vulnerable to a security flaw that could allow for unauthorized actions or system compromise.

A security flaw in the Gogs self-hosted Git service may lead to significant operational risks.

Jellyfin is susceptible to a security vulnerability that could impact the integrity of self-hosted media server deployments.

A vulnerability exists in the Jellyfin media server that may allow for unauthorized access or system compromise.

A high-severity vulnerability has been identified in the Warp agentic development environment that may impact user security.

An additional high-severity vulnerability has been disclosed in the Warp agentic development environment.

Warp, an agentic development environment, contains a high-severity vulnerability that may allow for unauthorized access or system manipulation.

Mailerup contains a missing authentication vulnerability in the RegisterView function, potentially allowing unauthenticated access to critical account registration processes.

Capgo versions prior to 12 are affected by a high-severity vulnerability that requires immediate attention to maintain system security.

A vulnerability exists in the NLnet Labs NSD software, potentially allowing for significant service disruption or unauthorized control.

GitLab EE is affected by a security vulnerability requiring immediate remediation to prevent unauthorized system access.

A high-severity vulnerability has been identified in the SiYuan personal knowledge management system that may compromise user data integrity.

A high-severity security vulnerability has been identified in the Rocket.Chat communication platform, necessitating immediate administrative review.

A security vulnerability has been identified in the Gogs self-hosted Git service that requires immediate administrative attention to prevent potential system compromise.

A critical security vulnerability has been identified in the Mastodon social network server, necessitating prompt remediation to protect instance integrity.

A security vulnerability has been identified in Capgo prior to version 12, requiring immediate updates to secure the platform.

GitLab EE contains a security vulnerability in versions 19 and later that necessitates an immediate update.

A security vulnerability has been identified in the Cacti performance and fault management framework that requires immediate attention from system administrators.

A security vulnerability has been identified in Mastodon, a social network server based on ActivityPub, which could potentially expose the platform to unauthorized manipulation.

A security vulnerability has been identified in the Warp agentic development environment, requiring swift action to protect developer workstations and environments.

A security vulnerability exists in Rocket.Chat that could potentially allow for unauthorized access or system compromise.

A security vulnerability in the Gogs self-hosted Git service may allow for unauthorized access or manipulation of repository data.

A vulnerability in the OpenColorIO framework may allow for unauthorized actions during the processing of color management data.

Gogs, an open-source self-hosted Git service, contains a high-severity vulnerability that may allow for unauthorized access or system compromise.

Docling, a tool for document processing and AI integration, contains a high-severity vulnerability that could be leveraged to compromise document parsing workflows.

OpenText Access Manager is vulnerable to a reflected Cross-Site Scripting (XSS) attack due to improper neutralization of user-supplied input during web page generation.

A vulnerability exists in Supabase Capgo prior to version 12 that may allow for unauthorized system impact.

A security vulnerability in n8n versions before 2 allows for potential unauthorized access or system compromise.

A security vulnerability has been identified in Rocket.Chat that may permit unauthorized access or impact the integrity of the communication platform.

A security vulnerability exists in the Gogs self-hosted Git service that may allow for unauthorized access or system compromise.

A security vulnerability has been identified in the Warp agentic development environment that may impact user security and system integrity.

A security vulnerability in ProFTPD allows for potential unauthorized actions, necessitating immediate review and patching.

A security vulnerability exists in Picklescan before version 0, potentially allowing for malicious code execution during the scanning of untrusted pickle files.

A security vulnerability exists in Picklescan before version 0, which may lead to arbitrary code execution when processing crafted input files.