CVE Brief Security Intelligence

Multiple memory overflow vulnerabilities in NetScaler ADC and Gateway can lead to Denial of Service (DoS) when configured as an Oracle load balancer, DNS proxy, or DNS recursive resolver.

A critical security vulnerability has been identified in phpMyFAQ versions prior to 4, which may allow for unauthorized access or system exploitation.

Adobe ColdFusion 2025 contains a high-severity vulnerability that requires immediate attention from security administrators to ensure platform integrity.

A high-severity vulnerability has been identified in the Coolify self-hosted server and application management platform.

Adobe ColdFusion 2025 is affected by a high-severity vulnerability that may allow for unauthorized system interaction or compromise.

Apple Safari contains an unspecified vulnerability that was addressed through improved validation checks.

Apple iOS and iPadOS contain an input sanitization vulnerability that could potentially be leveraged by attackers.

The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via the update_capabilities REST endpoint, allowing unauthorized users to elevate their access levels.

The BookingPress Appointment Booking Pro plugin for WordPress is susceptible to SQL injection via the 'store_service_date' parameter within the bpa_assign_staffmember_to_slots() function.

The RegistrationMagic plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to and including 6.

The WP Support Plus Responsive Ticket System WordPress plugin is vulnerable to an undisclosed flaw in versions through 9.

The WP Support Plus Responsive Ticket System WordPress plugin is vulnerable to an undisclosed flaw in versions through 9.

A memory overflow vulnerability in NetScaler ADC and Gateway appliances configured as SSL VPN, ICA, or AAA servers may lead to service disruption or Denial of Service (DoS).

The Ninja Forms plugin for WordPress is vulnerable to unauthorized data access due to a missing authorization check on the 'ninja-forms-views/token/refresh' REST API endpoint.

The Youtube Showcase plugin for WordPress is vulnerable to an Arbitrary Function Call, allowing attackers to execute unintended code via the plugin's interface.

The Visualizer plugin for WordPress is vulnerable to an authorization bypass, potentially allowing unauthorized users to perform sensitive actions.

Apache ActiveMQ is affected by an improper authorization vulnerability that could allow unauthorized access to system resources.

The Oj (Optimized JSON) Ruby gem contains a security vulnerability that may impact applications relying on its JSON parsing and object marshalling capabilities.

Insufficient input validation in NetScaler ADC and Gateway configured as a SAML IDP can lead to a memory overread vulnerability, potentially exposing sensitive information.

A denial of service vulnerability exists in NetScaler ADC and Gateway due to improper handling of malformed HTTP/2 requests when HTTP/2 is enabled.

A deserialization vulnerability in Control-M/Server and Control-M/Enterprise Manager allows unauthorized execution of arbitrary code via the messaging consumer functionality.

A local privilege escalation vulnerability in Nokia MantaRay NM allows an authenticated local user with administrative privileges to escalate to root.

UltraVNC Viewer is susceptible to a high-severity vulnerability that may allow for unauthorized system interaction or remote code execution.

Capgo software is affected by a high-severity vulnerability that could lead to unauthorized system access or compromise of the application environment.

An additional high-severity vulnerability has been identified in Capgo software, necessitating immediate attention to maintain system security.

A security vulnerability has been identified in OpenZiti through version 2, potentially exposing the system to unauthorized access or operational disruption.

A security flaw exists in DeepTutor versions prior to 1, potentially allowing attackers to bypass security controls or compromise the application environment.

A flaw in the Rancher GitHub authentication provider causes incorrect caching of team memberships, allowing unauthorized users to gain principal access.

The Delta Electronics DVP80ES3 controller contains a vulnerability involving an improperly implemented security check, which may allow for unauthorized access or operational disruption.

Seiko SkyBridge MB-A100 and MB-A110 devices are vulnerable to OS command injection due to improper neutralization of special elements in input.

Redeight CMS version 1 contains an unrestricted file upload vulnerability that may allow attackers to upload and execute malicious files on the server.

A security vulnerability exists in IBM WebSphere Application Server 9 that may allow for unauthorized system access or impact.

A high-severity security vulnerability has been identified in IBM Langflow OSS 1 that may pose a risk to system integrity.

A security vulnerability in IBM WebSphere Application Server - Liberty 17 could allow for unauthorized system compromise.

Capgo versions prior to 12 are affected by a security vulnerability that may expose the system to unauthorized access or manipulation.

A high-severity vulnerability exists in Vibe-Trading software that may allow for unauthorized system interaction.

A high-severity vulnerability in electron-builder's updater component may allow for the compromise of the automatic update mechanism.

An unauthenticated directory traversal vulnerability in the OFFIS DCMTK Toolkit allows for the unauthorized reading of worklist records.

A critical security vulnerability has been identified in IBM Langflow OSS that requires immediate attention from system administrators.

A security flaw exists within IBM Langflow OSS, necessitating prompt mitigation to prevent unauthorized system interaction.

A security vulnerability exists in Picklescan that may allow unauthorized operations. Further technical details remain limited pending disclosure.

Picklescan contains a high-severity security flaw that could lead to unauthorized system access or data compromise.

A security flaw in Picklescan may allow unauthorized exploitation, necessitating immediate attention from security administrators.

A security vulnerability exists in picklescan that may allow for unauthorized code execution or data manipulation.

A security flaw has been identified in picklescan that could lead to unauthorized system impacts.

A critical security vulnerability has been discovered in picklescan that requires immediate attention from security administrators.

A security vulnerability exists in the Picklescan library that may allow for unauthorized operations. Users are advised to update to the latest version to mitigate potential risks.

A security vulnerability in the Crawl4AI framework may allow for unauthorized access or system manipulation. Administrators should verify their current deployment status.

A vulnerability in Capgo versions prior to 12 may allow for unauthorized system interaction. Users are urged to upgrade to version 12 or later immediately.

A vulnerability has been discovered in IBM DevOps Automation that could permit unauthorized access or system disruption.

A vulnerability exists in Woodpecker CI versions prior to 3 that may expose the system to unauthorized access or operational disruption.

A security vulnerability in SeaweedFS versions before 4 could lead to unauthorized access to the distributed storage system.

A vulnerability in JeecgBoot through version 3 may allow for unauthorized access or system manipulation due to insufficient security controls.

An out-of-bounds heap write vulnerability exists in the RAR5 recovery-volume processing logic of WinRAR, potentially allowing arbitrary code execution.

The electron-updater component in electron-builder contains a vulnerability in the automatic update mechanism that could lead to unauthorized code execution.

Nokia MantaRay NM is vulnerable to an unrestricted file upload flaw due to insufficient validation of user-submitted file types.

The brace-expansion package is vulnerable to security flaws in versions through 5, potentially allowing for unexpected behavior or arbitrary code execution.

Picklescan versions before 0 are susceptible to security vulnerabilities that may lead to unauthorized data access or malicious code execution when processing untrusted input.

Capgo versions before 12 are vulnerable to security flaws that could permit unauthorized access or manipulation of updates, impacting the integrity of the software delivery pipeline.

IBM Business Automation Manager Open Editions contains an unspecified security vulnerability that requires immediate attention from system administrators.

Dolibarr ERP/CRM is affected by a security vulnerability that may allow unauthorized access or system impact. Users are advised to verify their current version against the latest vendor security releases.

The Delta Electronics DVP80ES3 PLC is susceptible to an improper resource shutdown or release vulnerability, which could result in a denial-of-service condition.

The Delta Electronics DVP80ES3 PLC is affected by a vulnerability involving the improper enforcement of message integrity during transmission.

The Delta Electronics DVP80ES300T PLC is vulnerable to an improper validation of array index, potentially leading to memory corruption or instability.

UltraVNC viewer contains a vulnerability that may allow for unauthorized memory access or arbitrary code execution through improper input handling.

Capgo software is affected by a vulnerability that may allow an attacker to bypass security controls or gain unauthorized access to system functions.