CVE Vulnerability Catalog

An improperly controlled modification of dynamically-determined object attributes vulnerability in Drupal Formatter Field allows object injection. This affects versions from 0.0.0 to 2.0.0.

A missing authorization vulnerability in Drupal LocalGov Workflows allows forceful browsing. This affects versions from 0.0.0 to 1.6.0.

An improperly controlled modification of dynamically-determined object attributes vulnerability in Drupal AlternativeCommerce (Basket) allows object injection. This affects versions from 0.0.0 to 2.1.17.

The OAuth Single Sign On - SSO (OAuth Client) plugin for WordPress contains an authentication bypass vulnerability via an alternate path or channel, allowing password recovery exploitation. This issue affects versions up to and including 38.5.8.

OpenReplay versions 1.24.0 through 1.25.0 contain an XSS vulnerability allowing an unauthenticated attacker to take over a dashboard account. The attacker can inject a malicious script via custom event names or captured page URLs, which are stored in ClickHouse without output encoding and later rendered in the dashboard, enabling theft of the JWT token from localStorage.

The miniOrange Social Login and Register plugin for WordPress up to version 7.7.0 contains an authentication bypass vulnerability leading to account takeover. An attacker can supply an arbitrary email address (e.g., admin) to the Profile Completion flow, exploit the weak OTP space (99,000 values) and leaked transaction hash to crack the OTP in under a second, and log in as the targeted user.

FreeRDP versions 3.21.0 through 3.27.9 contain an incomplete fix for CVE-2026-23530 in the planar_decompress_plane_rle_only function in planar.c. A malicious RDP server can send a crafted planar RDPGFX_CMDID_WIRETOSURFACE_1 payload that reads one byte past the input buffer.

In 32-bit builds of FreeRDP prior to 3.28.0, an integer overflow occurs in the update_read_delta_points function in libfreerdp/core/orders.c. A malicious RDP server can exploit this to allocate an undersized heap buffer and write beyond its bounds.

MCP Server Kubernetes before version 3.9.0 contains an argument injection vulnerability in structured tools (kubectl_get, kubectl_describe, kubectl_delete) that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can inject the --server flag to redirect kubectl commands to an attacker-controlled API server, causing the operator's bearer token to be transmitted externally and enabling full cluster compromise.

An SQL injection vulnerability in SEM-PMP by Semtek Informatics Software Consulting Trade Ltd. Co. allows command line execution through SQL injection. The issue affects versions up to 23042026.

A vulnerability in Prowler before 5.30.3 allows an attacker to take over accounts in another tenant by manipulating the email address in a SAMLResponse. The system trusted the email domain from the SAMLResponse when selecting the tenant, instead of binding the token to the validated SAML configuration.

An SQL injection vulnerability (CWE-89) has been found in MobilMen 20T by Adam Retail Automation Ltd. The flaw allows an attacker to manipulate database queries due to improper neutralization of special elements in SQL commands.

The database plugin for Grav CMS prior to version 1.2.0 contains an SQL injection vulnerability in the PDO::tableExists method. The table name passed by plugin or developer code is directly interpolated into a raw SQL query without sanitization, allowing arbitrary SQL execution.

An issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privileges via the /SystemUsers/CreateAppUser component. This vulnerability can be exploited to gain unauthorized administrative access.

In 9Router prior to version 0.4.80, the /api/settings/database endpoint allows full database export (containing all credentials, API keys, OAuth tokens, and settings) and full database import (complete overwrite) without any authentication requirement beyond the ALWAYS_PROTECTED middleware check, which only validates JWT or CLI token. This issue is fixed in version 0.4.80.

A flaw was found in the file_type content detector of guardrails-detectors, allowing a remote attacker to supply an arbitrary XSD string processed without restrictions. This can lead to server-side requests to arbitrary URLs or local file reads.

PraisonAI before version 4.6.78 contains a code injection vulnerability in deploy/api.py where the agents_file parameter is directly interpolated into an f-string without sanitization. Attackers can inject arbitrary Python code that executes when the generated server code runs via subprocess.Popen().

In JetBrains IntelliJ IDEA before 2026.1.4 and 2026.2, a vulnerability allowed code execution via path traversal in project workspace ID handling.

A vulnerability in Vikunja before version 2.2.1 allows unauthorized access to share hashes and downloading/deleting all file attachments across the instance. An authorization flaw in the LinkSharing.ReadAll and GetTaskAttachment endpoints enables privilege escalation to admin-level shares.

A vulnerability in Dell PowerFlex Manager prior to version 5.1.0.1 allows OS command injection. A high-privileged attacker with remote access can exploit this during OS Repository processing to execute arbitrary commands as root.