CVE Vulnerability Catalog

A session management issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. A user with Voice Control enabled may be able to transcribe another user's activity.

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 26.1 and iPadOS 26.1. An app may be able to fingerprint the user.

macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.2 fix an issue with cache handling that allowed an attacker with physical access to view deleted notes.

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.

A cross-site scripting (XSS) vulnerability has been detected in Qualitor up to version 8.24.73. The issue affects an unknown function in the file /Qualitor/html/bc/bcdocumento9/biblioteca/request/viewDocumento.php and is triggered by manipulating the cdscript argument. The attack can be launched remotely and the exploit has been publicly disclosed.

The CleverDisplay BlueOne hardware player has physically enclosed USB interfaces, but after bypassing the enclosure, a USB keyboard can be connected and ESC pressed during boot to access the BIOS setup. BIOS settings can be viewed but not modified. This may expose internal system information.

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information.

The WP Fastest Cache Premium plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to and including 1.7.4 via the 'get_server_time_ajax_request' AJAX action. Authenticated attackers with Subscriber-level access and above can make web requests to arbitrary locations from the web application and query or modify information from internal services. The free version is not affected.

AzuraCast version 0.23.1 mistakenly exposes an API endpoint intended for internal use by the SFTP software sftpgo through the public-facing HTTP API. A user with specific internal knowledge of a station's operations can craft a custom HTTP request that affects the contents of a station's database. This issue is fixed in version 0.23.2.

When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certificate verification can allow an attacker able to intercept network traffic to perform a man-in-the-middle (MITM) attack, which may obtain sensitive information of the UPS server configuration. This issue affects ADM from 4.1.0 through 4.3.3.RKD2 and from 5.0.0 through 5.1.0.RN42.

In yangshare warehouseManager 仓库管理系统 1.1.0, the addCustomer function in CustomerManageHandler.java is vulnerable to cross site scripting (XSS) via manipulation of the Name argument. The attack can be executed remotely, and the exploit is publicly available.

Multiple constant-time implementations in wolfSSL before version 5.8.4 may be transformed into non-constant-time binary by LLVM optimizations, which can potentially result in observable timing discrepancies and lead to information disclosure through timing side-channel attacks.

In JetBrains TeamCity before 2025.11, path traversal was possible via file upload.

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata.

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure.

In Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2, opening a malicious PDF containing a crafted JavaScript call to search.query() with a crafted cDIPath parameter (e.g., "/") may cause an out-of-bounds read in internal path-parsing logic, potentially leading to information disclosure or memory corruption.

A vulnerability in baowzh hfly (up to commit 638ff9abe9078bc977c132b37acbe1900b63491c), affecting unknown processing in the file /admin/index.php/advtext/add of the advtext Module. The manipulation results in cross-site scripting (XSS). The attack can be executed remotely. The exploit has been released publicly.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to, under certain conditions, render content in dialogs to other users by injecting malicious HTML content into merge request titles.

The TableProgressTracking MediaWiki extension in versions 1.2.0 and below does not enforce CSRF token validation in the REST API. An attacker could craft a malicious webpage that, when visited by an authenticated user on a wiki with the extension enabled, triggers unintended authenticated actions through the victim's browser. Due to the lack of token validation, an attacker can delete or track progress against tables.

In Canonical's Apport crash reporting tool, process_crash() in data/apport may create crash files with incorrect group ownership, possibly exposing crash information beyond expected or intended groups.