CVE Vulnerability Catalog

A vulnerability in the firmware update mechanism of Nous W3 Smart WiFi Camera version 1.33.50.82 allows unauthenticated attackers with physical proximity to escalate privileges to root by supplying a crafted update.tar archive stored on a FAT32-formatted SD card.

The AI Chatbot Free Models plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.6.5. This is due to insufficient sanitization in the 'newcodebyte_chatbot_export_messages' function. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration.

The LLM Hubspot Blog Import plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'process_save_blogs' AJAX endpoint in all versions up to and including 1.0.1. This allows authenticated attackers with Subscriber-level access or higher to trigger an import of all Hubspot data.

The Bold Page Builder plugin for WordPress (all versions up to and including 5.4.5) is vulnerable to Stored Cross-Site Scripting via the 'percentage' parameter. This is due to insufficient input sanitization and output escaping.

A container privilege escalation flaw was found in certain Container-native Virtualization images. The /etc/passwd file is created with group-writable permissions during build time, allowing an attacker with non-root access to modify it and add a user with arbitrary UID, including 0, leading to full root privileges within the container.

A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload.

The RSS Aggregator by Feedzy plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.1.0 via the 'feedzy_sanitize_feeds' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query information from internal services.

An open redirection vulnerability exists in MOLGENIS EMX2 v11.14.0. An attacker can create a malicious URL using a manipulated redirection parameter, potentially leading users to phishing sites or other malicious destinations.

A Path Traversal vulnerability exists in TESI Gandia Integra Total version 4.4.2236.1. An authenticated attacker can download a ZIP file containing server files, including those in parent directories, by exploiting the "direstudio" parameter in comprimir.php.

W podatności CVE-2025-10727 występuje niewłaściwa neutralizacja danych wejściowych podczas generowania stron internetowych w oprogramowaniu AcBakImzala firmy ArkSigner Software and Hardware Inc., co pozwala na ataki typu Reflected XSS. Problem dotyczy wersji AcBakImzala przed 5.1.4.

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read the steps of another user's private checklist.

The Front End Users plugin for WordPress has a missing authorization vulnerability affecting versions up to and including 3.2.33. The issue allows unauthorized access to functions that should require appropriate permissions.

The SUMO Memberships for WooCommerce plugin (sumomemberships) contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This issue affects versions from n/a through < 7.8.0.

Fusion Builder up to version 3.13.2 contains a DOM-Based XSS vulnerability due to improper input neutralization during web page generation. This allows an attacker to execute malicious scripts in the victim's browser.

The WPComplete plugin has a missing authorization vulnerability, allowing access to functionality not properly constrained by ACLs. Affects versions up to and including 2.9.5.3.

The Hydra Booking plugin for Themefic has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This affects versions up to and including 1.1.9.

The Oboxmedia Ads plugin for WordPress (all versions up to and including 1.9.8) is vulnerable to Stored Cross-Site Scripting via the 'before_widget' and 'after_widget' parameters of the oboxads-ad-widget shortcode. This is due to insufficient input sanitization and output escaping.

Vulnerability in Oracle ZFS Storage Appliance Kit (component: Remote Replication) affecting version 8.8. A high-privileged attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS) of the appliance.

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Affects versions 9.0.0-9.4.0. Easily exploitable by a high privileged attacker with network access via multiple protocols, can cause a hang or frequently repeatable crash (complete DoS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).

A vulnerability in Oracle Applications Framework (part of Oracle E-Business Suite) in the Personalization component. Affects versions 12.2.3-12.2.14. A low-privileged attacker can access via HTTP and compromise the framework, leading to unauthorized update, insert, or delete access to some data.