CVE Vulnerability Catalog

Open WebUI versions 0.9.6 through 0.11.0 allow an authenticated user to cancel another user's in-flight tasks (e.g., model response generation) by knowing the chat ID. This occurs because the delete operation cancels tasks before checking permissions. The issue is fixed in version 0.11.0.

A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed with elevated privileges.

A weakness has been identified in Systerel S2OPC up to 1.7.3, affecting the function LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse in the file src/ClientServer/frontend/client_wrapper/internal/state_machine.c of the DeleteMonitoredItemsRequest Handler component. This manipulation causes an out-of-bounds read. The attack can only be executed locally, and the exploit has been made public.

Cross-Site Request Forgery vulnerability in the Oidcc.Plug.AuthorizationCallback module of the oidcc_plug library. An attacker can cause the victim's browser to complete an authorization flow the victim never initiated, leading to the victim being signed in to the attacker's account.

The Brizy WordPress plugin before version 2.8.19 does not properly verify authorization on the object being modified before updating a template's type meta, validating a request parameter that is different from the one used in the write operation, allowing users with Contributor-level access and above to change the template-type assignment of templates owned by other users.

The Brizy WordPress plugin before version 2.8.19 does not properly restrict who can modify its site-global design data and does not sanitize part of that data before outputting it, allowing authenticated users with Author-level access and above to store arbitrary JavaScript that is then served unsanitised on the site's front-end pages and executes in the browser of every visitor, including administrators.

The MonsterInsights WordPress plugin before version 11.1.0 does not correctly validate the signature on one of its unauthenticated AJAX actions. When the plugin is not connected to Google Analytics, the HMAC signing key is empty, allowing unauthenticated attackers to forge a valid signature and overwrite a configuration value, disrupting server-side analytics in Manual GA4 mode.

A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to the client. A local attacker can exploit this to disclose cached directory data and heap layout information from the sssd_nss process.

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacker to execute arbitrary code if the host application then unsafely processes the altered data.

A flaw in the backchannel logout endpoint of the keycloak-services component (part of Red Hat Build of Keycloak) allows the system to incorrectly accept logout requests without a cryptographic signature when an OIDC identity provider is configured to skip signature validation. An attacker knowing session details can force a user to be logged out.

A flaw in the Node.js HTTP client can cause request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible `IncomingMessage` headers while piping the original body to a reused backend connection. Node.js can omit headers beyond `maxHeadersCount`/`maxHeaderPairs` from `req.headers`, `req.rawHeaders`, and `req.headersDistinct`, while still using those omitted headers internally for HTTP message framing, particularly hiding `Content-Length` from userland while the request body is still delivered.

Insufficient verification of data authenticity in Caliptra Core ROM and Core Firmware (validate_debug_unlock_token()) in subsystem mode allows an attacker with access to the integrator's debug unlock signing service to unlock production debug on an unintended device by presenting a valid token issued for a different device sharing the same debug unlock key hash. The 384-bit challenge nonce continues to prevent replay of previously issued tokens. Practical impact is limited to loss of per-device scope enforcement within a set of devices that share the same unlock authority by design; it does not enable debug unlock on devices outside that set.

Misskey versions 2025.3.2 up to (but not including) 2026.5.4 have a missing permission check that allows access to certain Direct Messages data regardless of account permissions. Notes with 'specified' visibility are not affected. Fixed in version 2026.5.4.

OpenAkita up to version 1.27.12 has an XSS vulnerability in the File Upload API at /api/upload. Manipulating the File argument allows remote script execution. Exploitation is difficult but the exploit is public. The vendor did not respond.

HCL iControl is affected by missing access control. The application failed to enforce proper granular access controls, allowing users to access administrator-level functionalities without appropriate authorization.

Sharp and Toshiba Tec MFPs cache print data internally and leave it uncleared. It may be accessed later by other users.

A vulnerability was identified in Meesho Online Shopping App up to 20260607 on Android. The component com.meesho.supply stores user_id, phone number, email address, and name in cleartext. The attack requires physical access to the device.

The 'Classified Listing' WordPress plugin before version 5.4.4 does not perform a capability check on an AJAX action that returns aggregated store revenue totals, allowing users with contributor-level access and above to read daily revenue figures normally restricted to administrators and report managers.

The 'Classified Listing' WordPress plugin before version 5.4.4 does not perform a capability or ownership check on an AJAX action that returns a post's content, allowing users with contributor-level access and above to read the content of any post, page, or custom post type on the site — including drafts, pending, and private posts owned by other users — regardless of ownership.

The Tag, Category, and Taxonomy Manager WordPress plugin before version 3.51.0 does not verify that a user is authorized to access a referenced post before processing it and returning derived data. This allows users with contributor privileges to disclose data from private or draft posts they do not own.