CVE Vulnerability Catalog

The WP Job Portal plugin for WordPress in all versions up to and including 2.4.0 is vulnerable to Arbitrary File Read via the 'downloadCustomUploadedFile' function. This allows authenticated attackers with Subscriber-level access and above to read the contents of arbitrary files on the server.

A potential security vulnerability in Quartus Prime Standard Edition Design Software may allow escalation of privilege.

Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target directory already exists.

An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1, 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the packages react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. A specifically crafted HTTP request sent to a vulnerable Server Function may unsafely return the source code of any Server Function.

In U-Boot of append_uint32_le(), there is a possible fault injection due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In the AreFencesRegistered function of gxp_fence_manager.cc, there is a possible information leak due to improper input validation. This could lead to local information disclosure without requiring additional execution privileges. User interaction is not needed for exploitation.

In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free. This could lead to local escalation of privilege in the OS Kernel level with System execution privileges needed. User interaction is not needed for exploitation.

In ProtocolPsUnthrottleApn() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.

In SwDcpItg of up_L2commonPdcpSecurity.cpp, there is a possible denial of service due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

In cellular modem, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

In onCreateTasks of CameraActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

IBM Aspera Orchestrator versions 4.0.0 through 4.1.0 allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency. The flaw affects the email sending mechanism and can be triggered remotely by a logged-in user.

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user.

A vulnerability was found in Rental Management System 2.0 by code-projects in an unknown function of the Transaction.java file of the Log Handler component. Manipulation leads to CRLF injection. The attack can be initiated remotely and the exploit has been made public.

An unrestricted file upload vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0, affecting an unknown function in the /admin/property.php file. Manipulating the image argument allows remote upload of malicious files. The exploit is publicly available.

An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed user-supplied HTML to inject DOM elements with IDs that collided with server-initialized data islands. These collisions could overwrite or shadow critical application state objects used by certain Project views, leading to unintended server-side POST requests or other unauthorized backend interactions. Successful exploitation requires an attacker to have access to the target GitHub Enterprise Server instance and to entice a privileged user to view crafted malicious content.

A vulnerability was detected in D-Link DIR-803 up to version 1.04 in an unknown function of /getcfg.php in the Configuration Handler component. Manipulation of the AUTHORIZED_GROUP argument results in information disclosure, and the attack may be performed remotely. The exploit is public and the vulnerability only affects products no longer supported by the maintainer.

In JetBrains TeamCity before 2025.11, stored XSS was possible via a session attribute.

A vulnerability was detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. The impacted element is an unknown function of the file /Public/Kindeditor/php/upload_json.php. Manipulation of the argument imgFile results in unrestricted upload. The attack can be initiated remotely, and the exploit is now public and may be used.

A vulnerability in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c affects an unknown function in the file /admin/index.php/datafile/download. Manipulating the filename argument leads to path traversal. The attack can be performed remotely, and the exploit has been publicly disclosed.