CVE Vulnerability Catalog

Discuz! X5.0 versions from 20260320 to 20260610 contain a local file inclusion vulnerability that allows authenticated administrators to execute arbitrary code by importing a specially crafted plugin configuration containing path traversal sequences.

In Spring AI Vector Stores, a vulnerability allows the use of special characters to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components include: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store.

In OCaml-TLS before version 2.1.0, the server implementation does insufficient checks of the certificate provided by the client during client authentication. This allows impersonation with certificates that are not meant for client authentication.

In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service (DoS) condition. The application is vulnerable when it uses a vulnerable version of org.springframework.cloud:spring-cloud-sleuth-instrumentation and Spring TX instrumentation is not disabled.

An issue in Iru, Inc Kandji Agent before v.4.7.5(5374) allows a local attacker to escalate privileges via a client validation gap to invoke restricted agent functionality.

An issue in Observeinc's Observe v.2026-01-28 and before allows a remote attacker to obtain sensitive information via the CSV Log export component.

A Time-Based Blind SQL Injection vulnerability in the alias_management module of OpenSIPS Control Panel (opensips-cp) prior to version 9.3.3 allows authenticated attackers to execute arbitrary SQL commands via the 'table' GET parameter in alias_management.php.

An issue in Microvirt MEmu Android Emulator version 9.2.7.0 allows a local attacker to escalate privileges via the MemuService.exe component.

A vulnerability was discovered in Rakuten Send Anywhere for Android (version 23.2.9) that allows untrusted applications to force arbitrary file downloads into the app's storage. These files appear in the application's trusted Received interface, creating a vector for arbitrary code execution or denial-of-service through resource exhaustion.

A code injection vulnerability in the wxExecute() function of OpenCPN v5.12.0 allows attackers to execute arbitrary code via embedding shell metacharacters.

A heap use-after-free vulnerability exists when importing zero-width characters from an ODF number format. A position value read from the document was not validated against the length of the format-code string, allowing a malformed number format to be processed against memory outside that string. In fixed versions, the position is bounds-checked before use.

In Mastodon, versions with a missing condition in the check for remote accounts' consent to be featured in a remote Collection allow attackers to bypass this check and fake consent. This can lead to a situation where an account appears to be allowed in a Collection when it actually is not.

The Pizzy Library from MIA Technology Inc. has a vulnerability related to improper neutralization of formula elements in a CSV file, allowing for code injection.

The vulnerability in MIA Technology Inc.'s Pizzy Library related to improper control of interaction frequency allows for Flooding attacks.

The Pizzy Library by MIA Technology Inc. has a vulnerability related to improper access control and missing authorization, allowing exploitation of incorrectly configured access control security levels.

Multer versions 1.0.0 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service via deeply nested field names in multipart form data. An attacker can exploit this to force allocation of deeply nested object structures, consuming CPU and memory.

CVE-2026-49111 in ThemeGrill Masteriyo - LMS has an incorrect privilege assignment vulnerability that allows privilege escalation.

The Stiofan GetPaid vulnerability involves the insertion of sensitive information into sent data, allowing for the retrieval of that data later.

A vulnerability in WP Engine Faust.Js allows authentication bypass via an alternate path or channel, enabling password recovery exploitation.

The WordPress Sliced Invoices plugin version 3.8.2 contains an authenticated SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send requests to the admin.php endpoint with action=duplicate_quote_invoice and malicious 'post' values to extract sensitive database information or modify data.