CVE Brief Security Intelligence

A vulnerability in the BEEP feature of Cisco IOS XE Software allows an unauthenticated remote attacker to trigger a denial of service condition on affected devices.

A vulnerability in the Extensible Messaging Client Protocol of Cisco IOS and IOS XE Software allows an unauthenticated remote attacker to cause a denial of service on an affected device.

An internal security review identified a memory buffer vulnerability in Cisco IOS XE Software that could allow an unauthenticated remote attacker to cause a denial of service on an affected device.

A resource management vulnerability in Cisco IOS XE Software identified during an internal review could allow an unauthenticated remote attacker to cause a denial of service on an affected device.

A vulnerability in Cisco IOS XE Software involves an incorrect calculation flaw, potentially leading to a denial of service condition.

A vulnerability in Cisco IOS XE Software involving insufficient control flow management may allow an unauthenticated attacker to trigger a denial of service.

A vulnerability in Cisco IOS XE Software stemming from improper input validation may allow an unauthenticated attacker to cause a denial of service.

Bolt CMS is vulnerable to a security flaw where content field values are rendered through the Twig environment without a SandboxExtension, potentially allowing unauthorized code execution.

An origin validation error in livebook allows untrusted notebook output to execute session-wide keyboard shortcuts, enabling unauthorized cell evaluation or runtime restarts.

A Server-Side Request Forgery vulnerability in the DownloadBookmark function of go-shiori allows authenticated attackers to perform unauthorized requests.

A vulnerability in Thermo Fisher Applied Biosystems software allows potential unauthorized modification of data files due to a lack of digital signature verification.

The Checkimate WooCommerce plugin for WordPress is vulnerable to improper access control, allowing unauthenticated attackers to potentially perform unauthorized actions.

A command injection vulnerability in the Cisco IMC management interface allows authenticated, low-privilege users to execute arbitrary commands and escalate to root privileges.

The WPMU DEV Dashboard plugin for WordPress contains an authentication bypass vulnerability that allows unauthenticated attackers to gain unauthorized access to the application.

An access control vulnerability in Apple macOS allows an application to potentially access sensitive user data due to insufficient restrictions.

The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient authorization checks in the connector function.

The Newsletters WordPress plugin is vulnerable to Server-Side Request Forgery (SSRF) due to improper input validation, allowing unauthenticated attackers to perform unauthorized requests.

The SirenGPS Android Application 2.19.44 contains an access control vulnerability that allows authenticated users to access data belonging to other users.

A security vulnerability in the Jenkins Multijob Plugin allows for unauthorized actions or information disclosure, affecting versions up to 669.v9d96a_d9c71b_0.

A cross-site request forgery (CSRF) vulnerability in the Jenkins Multijob Plugin allows attackers to perform unauthorized actions on behalf of authenticated users.

A vulnerability in Cisco Catalyst SD-WAN components allows for the cleartext storage of sensitive information, potentially exposing credentials or configuration data to unauthorized access.

An improper access control vulnerability in SecureAge CatchPulse allows local, non-administrative attackers to bypass security policy enforcement via an unrestricted kernel filter communication port.

A NULL pointer dereference vulnerability in the H5Pget_fill_value function of HDF5, prior to version 2.3.1, can lead to application crashes or potential denial of service conditions.

A race condition in Apache CXF's JCacheCodeDataProvider allows for the repeated redemption of authorization codes, resulting in the issuance of multiple valid access tokens.

Jenkins is vulnerable to an improper handling of case-insensitivity in user and group names, which could allow unauthorized impersonation.

An authorization bypass vulnerability exists in multiple API endpoints of Scripta eScriptorium, allowing authenticated users to perform unauthorized operations on data records.

A server-side request forgery vulnerability exists in the Stirling-PDF ConvertWebsiteToPDF endpoint, allowing unauthenticated attackers to potentially access internal resources.

A server-side request forgery vulnerability in the Foxit PDF Services API allows authenticated users to manipulate external file references during PDF creation.

A Server-Side Request Forgery (SSRF) vulnerability exists in the IBM Application Gateway Operator, allowing an authenticated attacker to perform unauthorized requests.

An inefficient regular expression complexity vulnerability in the CSS scrubber of html_sanitize_ex allows unauthenticated remote attackers to trigger CPU exhaustion via crafted CSS declarations.

An inefficient algorithmic complexity vulnerability in the traversal engine of html_sanitize_ex allows unauthenticated remote attackers to trigger CPU and memory exhaustion via flat sibling elements.

An improper privilege management vulnerability in the REST API document processing pipeline of MarkLogic Server allows authenticated users to escalate privileges.

The WPMU DEV Forminator plugin for WordPress contains an incorrect privilege assignment vulnerability, allowing authenticated contributors to escalate their privileges.

The Constant Contact Creative Mail plugin for WordPress is susceptible to SQL injection, allowing authenticated subscribers to execute unauthorized database queries.

The WP Job Portal plugin for WordPress contains an SQL injection vulnerability that allows authenticated subscribers to execute arbitrary database queries.

A broken authentication vulnerability in the Super Socializer plugin allows unauthenticated attackers to bypass security controls via an alternate path or channel.

A path traversal vulnerability in GitHub Enterprise Server allows unauthenticated attackers to delete arbitrary files and directories on the host instance.

IBM Langflow OSS is affected by a code injection vulnerability, allowing an authenticated attacker to execute arbitrary code within the application environment.

A code injection vulnerability in IBM Langflow OSS allows an authenticated attacker to execute arbitrary code, potentially resulting in full system compromise.

IBM Langflow OSS versions 1.0.0 through 1.10.3 contain a vulnerability involving inadequate encryption strength, which could allow unauthorized access to sensitive information.

IBM Langflow OSS versions 1.0.0 through 1.10.3 are susceptible to a code injection vulnerability, which could allow an authenticated attacker to execute arbitrary code.

IBM Langflow OSS versions 1.0.0 through 1.10.3 contain an OS command injection vulnerability, allowing an authenticated attacker to execute arbitrary commands on the host system.

IBM Langflow OSS versions 1.0.0 through 1.10.3 contain an incorrect privilege assignment vulnerability that allows authenticated users to gain elevated access.

A type confusion flaw in the Dynamic Client Registration security policy management of the Red Hat build of Keycloak allows authenticated users to impact system security.

Mistral Vibe is vulnerable to arbitrary command execution due to the inclusion of functionality from an untrusted control sphere within its git-fsmonitor-hook.

The LoRA-GA and CorDA initialization modules in Hugging Face peft are vulnerable to deserialization of untrusted data, which may lead to arbitrary code execution.

The sanitize_sql_column function in Cacti is vulnerable to SQL injection, potentially allowing an authenticated attacker to manipulate database queries.

Koha's guided report builder contains a SQL injection vulnerability that allows authenticated users to execute arbitrary database commands.

Eclipse Theia is affected by multiple vulnerabilities including cross-site request forgery and path traversal, potentially leading to unauthorized access.

The Magistrala Rules Engine allows authenticated users to execute arbitrary Go or Lua scripts server-side, leading to code injection.

The backmeup npm package is vulnerable to OS command injection due to insecure concatenation of input parameters when constructing shell commands.

HashBrown CMS is susceptible to OS command injection, allowing authenticated attackers to execute unauthorized commands via improper handling of system inputs.

HashBrown CMS contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary system commands.

OMICRON StationGuard is vulnerable to a timing discrepancy attack, which could allow an unauthenticated remote attacker to gain unauthorized access or influence system operations.

InvoiceNinja v5.0.0 is susceptible to Stored Cross-site Scripting (XSS) due to the unsafe rendering of the terms field in the client portal via the Laravel Blade raw output directive.

A path traversal vulnerability in rclone versions 1.40.0 through 1.74.9 allows authenticated users to read or write files outside of the intended directory via malicious path manipulation.

The get_resource tool in AWS aws-transform-mcp-server versions 0.1.0 through 0.1.4 is vulnerable to path traversal, allowing unauthorized file access.

ESPHome through 2026.7.0 contains a vulnerability related to incomplete validation of data, which may allow for significant system impact.

A buffer overflow vulnerability exists in nanoMODBUS versions up to 1.23.0, potentially allowing for arbitrary code execution or denial of service.

A Server-Side Request Forgery (SSRF) vulnerability in the METS and IIIF import URI handling of Scripta eScriptorium allows authenticated attackers to perform unauthorized requests.

IBM Langflow OSS versions 1.0.0 through 1.10.3 contain a code injection vulnerability that can be exploited by authenticated users to execute arbitrary code.

IBM Langflow OSS is vulnerable to improper control of code generation, which may allow an authenticated attacker to perform code injection attacks.

IBM Langflow OSS contains a security flaw involving reliance on untrusted inputs for security decisions, which may allow an authenticated attacker to bypass intended security controls.

A server-side request forgery vulnerability exists in Progress MarkLogic Server that may allow an authenticated user to perform unauthorized requests.

A server-side request forgery vulnerability exists in the Memos webhook URL validation logic, specifically within the isReservedIP function.

A race condition vulnerability exists in the Memos webhook dispatch function within the safeDialContext implementation.

A cross-site scripting vulnerability exists in the CHANNEL_SetLabel() function of OpenBK7231T_App, which may allow for unauthorized script execution.

A timing discrepancy vulnerability in OMICRON StationScout versions prior to 3.05 may allow for unauthorized information disclosure or system manipulation.

An authentication bypass vulnerability in the @neo4j/graphql library allows attackers to manipulate assumed-immutable data.

The Total Upkeep plugin for WordPress contains a broken access control vulnerability that allows unauthenticated attackers to perform unauthorized actions.

Nuxt contains vulnerabilities related to improper handling of case sensitivity and incorrect authorization, which may lead to unauthorized access or information disclosure.

IBM QRadar is susceptible to XML External Entity (XXE) injection, which may allow an unauthenticated attacker to read arbitrary files from the server.

The WLED project contains a broken access control vulnerability in the GET /json/cfg endpoint that allows unauthenticated modification of configuration settings.

Crater fails to verify company ownership when accessing notes, allowing authenticated users to bypass authorization checks and view or manage notes belonging to other companies.

The toner-management application contains missing authorization checks in its administrative state-changing handlers, allowing unauthorized users to modify system states.

The Login with phone number WordPress plugin contains an authentication bypass vulnerability, allowing unauthenticated attackers to spoof identity and gain unauthorized access.

An unauthenticated Local File Inclusion vulnerability in the E2Pdf WordPress plugin allows attackers to include arbitrary files on the server.

Nuxt is susceptible to code and output injection due to improper neutralization of special elements, potentially allowing unauthorized code execution.

The KARR Security System and SWDS automotive anti-theft systems use shared Bluetooth authentication keys, allowing unauthorized access to vehicle security functions.

Spacebar Server contains a missing authorization vulnerability that allows authenticated attackers to join arbitrary group direct message channels without verification.

IBM Langflow OSS is vulnerable to code injection, allowing an authenticated user to execute arbitrary code via improper control of code generation.

IBM WebSphere Application Server is vulnerable to unsafe reflection, allowing remote, unauthenticated attackers to potentially influence application behavior.

Flarum Framework contains a vulnerability involving the use of expired keys, which allows attackers to bypass password reset token expiration mechanisms.