CVE Vulnerability Catalog

The ThemeRain Core plugin has a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This issue affects versions from n/a through 1.1.9.

Gutenverse News plugin (versions up to 3.0.2) has a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. An unauthorized user can perform actions they are not permitted to.

The Яндекс Доставка (Boxberry) plugin has a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This issue affects versions from n/a through 2.34.

Missing Authorization vulnerability in BERTHA AI (WordPress plugin) allows exploiting incorrectly configured access control security levels. The issue affects versions up to and including 1.13.

Stored XSS vulnerability in the Generic Elements plugin allows persistent injection of malicious script into the page. An attacker can exploit this to execute script in the victim's browser.

Cross-Site Request Forgery (CSRF) vulnerability in Duplicate Content Cure plugin. Allows an attacker to perform unauthorized actions on behalf of an authenticated user.

An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then sending a query with qtype set to ANY.

The Actionwear products sync plugin (up to version 2.3.3) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This enables unauthorized access to product sync functions.

An Information Disclosure vulnerability in Application Server ABAP allows an authenticated attacker to read unmasked values displayed in ABAP Lists. Successful exploitation could lead to unauthorized disclosure of data, resulting in a high impact on confidentiality without affecting integrity or availability.

SAP BusinessObjects Business Intelligence Platform allows an unauthenticated remote attacker to send crafted requests through the URL parameter that controls the login page error message. This can cause the server to fetch attacker-supplied URLs, resulting in low impact to confidentiality and integrity, and no impact to availability.

Due to a missing authorization check in SAP Enterprise Search for ABAP, an attacker with high privileges may read and export the contents of database tables into an ABAP report. This could lead to a high impact on data confidentiality and a low impact on data integrity. There is no impact on application's availability.

The SAP Internet Communication Framework does not perform authentication checks for features that require user identification, allowing an attacker to reuse authorization tokens. This violates secure authentication practices and causes low impact on Confidentiality, Integrity, and Availability of the application.

SAPUI5 and OpenUI5 packages use outdated third-party libraries with known vulnerabilities. When markdown-it encounters special malformed input, it fails to terminate properly, resulting in an infinite loop. This denial of service causes high CPU usage and system unresponsiveness due to a blocked processing thread.

XSS vulnerability in SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts that execute in the context of other users' browsers, enabling theft of session cookies, tokens, and other sensitive information. The impact on confidentiality and integrity is low, and no impact on availability.

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.

An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.

A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then block until it receives more data, resulting in a DoS condition of the webserver.

A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources, leading to reduced performance of management functions.

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm.

SIMATIC CN 4100 devices (all versions before V4.0.1) expose server information in their responses. An attacker with network access can gain useful information, increasing the likelihood of targeted attacks.