CVE Vulnerability Catalog

Grav is a file-based web platform. Prior to version 2.0.0-beta.2, a business logic vulnerability in the Grav Admin Panel allowed a low-privileged user to overwrite existing accounts, including the primary administrator account.

A vulnerability in MediaWiki related to the exposure of sensitive information to unauthorized actors. It affects program files includes/Skin/Skin.Php.

CVE-2026-34091 describes an exposure of sensitive information to unauthorized actors in MediaWiki. This affects versions before 1.43.7, 1.44.4, and 1.45.2.

A vulnerability in CheckUser at the Wikimedia Foundation allows exposure of sensitive information to unauthorized actors. It affects versions from 1.45.0 before 1.45.2.

Vulnerability in the Wikimedia Foundation Scribunto extension. Affects versions from 1.45.0 before 1.45.2.

CVE-2026-34088 involves the exposure of sensitive information to unauthorized actors in MediaWiki. This affects versions before 1.43.7, 1.44.4, and 1.45.2.

CVE-2026-34087 involves the exposure of sensitive information to unauthorized actors in OATHAuth used by the Wikimedia Foundation. The issue affects OATHAuth versions before 1.43.7, 1.44.4, and 1.45.2.

Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks through version 2.61.0. It uses etree.parse() to parse XML files without disabling entity resolution, allowing for the creation of a malicious XML file that leads to excessive resource consumption.

docuFORM Managed Print Service Client version 11.11c is vulnerable to a directory traversal attack, allowing attackers to read arbitrary files via crafted URL.

A reflected cross-site scripting (XSS) vulnerability in the dfm-menu_orderopt.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

A reflected XSS vulnerability in the dfm-menu_markeralerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser by injecting a crafted payload into an unfiltered variable value.

A reflected cross-site scripting (XSS) vulnerability in the acc-menu_pricess.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

A reflected cross-site scripting (XSS) vulnerability in the dfm-menu_alerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.

A flaw was found in Cockpit that allows a remote attacker to execute arbitrary commands on the host by exploiting unsanitized user-controlled parameters in the system logs UI. An attacker can inject shell metacharacters and command substitutions, leading to arbitrary shell command execution on the affected system.

The Magic Link authentication flow accepts multiple invalid authentication requests without adequate rate limiting or resource control, leading to uncontrolled memory usage growth.

A path traversal vulnerability exists in GROWI v7.5.0 and earlier, which may allow an attacker to execute arbitrary EJS templates on the server when an email server is running in GROWI.

Dell Automation Platform versions prior to 2.0.0.0 contain a missing authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.

Due to a lack of user account state validation during authentication, locked user accounts can be successfully authenticated using Magic Link or Pass Key methods. This bypasses the intended security control that should prevent access to accounts that have been locked.

In the Linux kernel, a vulnerability was found in the RxRPC protocol implementation where DATA and RESPONSE packet handlers did not check for shared page fragments (e.g., from splice()). This allowed in-place decryption on shared pages, potentially leading to data integrity issues.

The Custom css-js-php WordPress plugin through 2.0.7 does not properly sanitize user input before using it in a SQL query, allowing unauthenticated users to execute arbitrary PHP code on the server.