CVE Vulnerability Catalog

IBM Concert versions 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.

The Eaton UPS Companion software installer has a vulnerability related to improper quotation in search paths, which could lead to arbitrary code execution by an attacker with access to the file system. This issue has been fixed in the latest version of EUC.

Nozomi Networks Labs discovered that validation of incoming XML messages is inadequate, which could allow an attacker to perform XSS on the user's browser. The manufacturer has released a patch; refer to the manufacturer's report for details.

Cybersecurity Nozomi Networks Labs has discovered inadequate permission management for camera guest account. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

A server-side request forgery (SSRF) vulnerability exists in the Business Process Management component of YunaiV yudao-cloud up to version 2025.11. An attacker can remotely manipulate url/header/body arguments in BpmHttpCallbackTrigger and BpmSyncHttpRequestTrigger functions. The exploit has been publicly disclosed.

A vulnerability was discovered in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414 involving cross-site scripting in the userLogin function in the file src/main/java/com/flycms/web/front/UserController.java. Manipulation of the redirectUrl argument allows remote attack execution. The exploit is publicly available and may be used.

A security flaw has been discovered in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414. The affected element is an unknown function of the file src/main/java/com/flycms/web/system/IndexAdminController.java of the component Admin Login. Performing a manipulation of the argument redirectUrl results in cross site scripting. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

The Frontend Post Submission Manager Lite (Frontend Posting) WordPress plugin up to and including version 1.2.6 is vulnerable to unauthorized loss of data due to an incorrect authorization check in the 'media_delete_action' function. This allows unauthenticated attackers to delete arbitrary attachments.

A vulnerability was detected in JEPaaS up to 7.2.8 in the postilService.loadPostils function of /je/postil/postil/loadPostil. Manipulation of the keyWord argument results in SQL injection, and remote exploitation is possible. The exploit is now public and may be used.

A security vulnerability has been detected in youlai-mall 1.0.0/2.0.0 in the submitOrderPayment function of OrderController.java. Manipulation of the orderSn argument leads to improper authorization, and the attack may be launched remotely. The exploit has been disclosed publicly and may be used.

A weakness has been identified in youlai-mall 1.0.0/2.0.0. This impacts the function getMemberByMobile in the file mall-ums/ums-boot/src/main/java/com/youlai/mall/ums/controller/app/MemberController.java. The manipulation causes improper access controls. The attack may be initiated remotely, and the exploit has been made available to the public.

ONLYOFFICE Docs before version 9.2.1 contains an XSS vulnerability related to the Color theme name, which may allow injection of malicious script.

XSS vulnerability in ONLYOFFICE Docs before 9.2.1, present in the Font field of the Multilevel list settings window. This is related to DocumentServer.

A security flaw has been discovered in youlai-mall versions 1.0.0 and 2.0.0 affecting the deductBalance function in MemberController.java. The manipulation results in improper authorization and can be launched remotely. The exploit has been released to the public and may be exploited.

TOZED ZLT M30s router up to version 1.47 has an information disclosure vulnerability in the web management interface, in file /reqproc/proc_post, via manipulation of the goformId argument. The attack can be performed remotely, and the exploit is public.

JD Cloud BE6500 router version 4.4.1.r4308 has a command injection vulnerability in function sub_4780 of file /jdcapi via the ddns_name argument. The attack can be performed remotely, and the exploit is public.

Insufficient access control in the RTMP implementation in Pexip Infinity through 38.1 allows an attacker to disconnect RTMP streams traversing a Proxy Node.

Pexip Infinity versions 32.0 through 37.1 before 37.2, in certain OTJ (One Touch Join) configurations for Teams SIP Guest Join, has Improper Input Validation in the OTJ service, allowing a remote attacker to trigger a software abort via a crafted calendar invite, leading to a denial of service.

A vulnerability in Fujitsu / Fsas Technologies ETERNUS SF ACM/SC/Express (DX / AF Management Software) before 16.8-16.9.1 PA 2025-12. When collected maintenance data is accessible by a principal/authority other than ETERNUS SF Admin, an attacker could potentially affect system confidentiality, integrity, and availability.

ONLYOFFICE Docs before 9.2.1 allows XSS in the textarea of the comment editing form. This is related to DocumentServer.