CVE Vulnerability Catalog

A logic issue was addressed with improved validation. Fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.2. An app may be able to access sensitive user data.

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

Missing cryptographic key commitment in Amazon S3 Encryption Client for Go. A user with write access to the S3 bucket can introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an instruction file instead of S3 metadata.

Missing cryptographic key commitment in the AWS SDK for Ruby may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigate this issue, upgrade AWS SDK for Ruby to version 1.208.0 or later.

A "Privilege boundary violation" vulnerability affecting multiple Radiometer Products allows a user with physical access to the analyzer to gain unauthorized access to functionalities outside the restricted environment. The vulnerability is due to weakness in the design of access control implementation in application software. Related CVEs are CVE-2025-14096 and CVE-2025-14097.

W podatności CVE-2025-14347 występuje niewłaściwa neutralizacja danych wejściowych podczas generowania stron internetowych w systemie OBS (Student Affairs Information System)0, co pozwala na ataki typu Reflected XSS. Problem dotyczy wersji przed 26.5009.

The Download Plugins and Themes in ZIP from Dashboard plugin for WordPress (all versions up to 1.9.6) is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on the download_plugin_bulk and download_theme_bulk functions. Unauthenticated attackers can archive all the site's plugins and themes and place them in the `wp-content/uploads/` directory via a forged request if they can trick a site administrator into performing an action such as clicking a link.

The Zephyr Project Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.203 via the `file` parameter. This makes it possible for authenticated attackers, with Custom-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. On servers that have `allow_url_fopen` enabled, this issue allows for Server-Side Request Forgery.

The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by third-party apps which can construct intents to directly open adb debugging functionality without user interaction.

The WP Cookie Consent plugin for WordPress (all versions up to 4.0.7) is vulnerable to unauthorized data modification due to a missing capability check on the gdpr_delete_policy_data function. Unauthenticated attackers can permanently delete arbitrary posts, pages, attachments, and other post types by ID.

The Converter for Media plugin for WordPress (all versions up to 6.3.2) is vulnerable to unauthorized data modification due to a missing capability check on the `/webp-converter/v1/regenerate-attachment` REST endpoint. Authenticated attackers with Subscriber-level access and above can delete optimized WebP/AVIF variants for arbitrary attachments.

The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets (Google Reviews, YouTube Feed, Photo Feeds, and More) plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the getAdvanceSettings and saveAdvanceSettings functions in all versions up to, and including, 4.0.1. This makes it possible for unauthenticated attackers to view and modify plugin's advanced settings.

Certain ASRock motherboard models and its subsidiaries have a protection mechanism failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.

Certain GIGABYTE motherboard models have a protection mechanism failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.

nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality. Malicious payloads inserted into the "Product Name" and "Short Description" fields are stored in the backend database and executed automatically whenever a user views the affected pages.

nopCommerce version 4.90.0 is vulnerable to Cross-Site Scripting (XSS) via the Currencies functionality.

nopCommerce version 4.90.0 is vulnerable to Cross-Site Scripting (XSS) via the Blog posts functionality in the Content Management area.