CVE Vulnerability Catalog

The Wireless Control Module (WCM) of the 2025 Indian Motorcycle Scout Bobber + Tech uses weak authentication. An attacker with access to the in-vehicle network can recover the user-set unlock PIN by passively observing a single authentication exchange, as the display response uses a non-cryptographic operation.

The Simple Divi Shortcode plugin for WordPress up to version 1.2 contains a Stored XSS vulnerability via the 'id' parameter of the [showmodule] shortcode. An attacker with contributor-level access can inject arbitrary HTML/JavaScript.

Service Center by BankPro E-Service Technology has an Insecure Direct Object Reference vulnerability. An authenticated attacker can modify a parameter in a specific query function to access other users' EC order details.

A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed conversion error in the `soup_body_input_stream_read_chunked()` function by sending a malicious HTTP request. This vulnerability occurs when libsoup operates behind a non-libsoup proxy server or as a proxy in front of a non-libsoup backend server.

The StatCounter plugin for WordPress up to version 2.1.1 has a Stored XSS vulnerability. The statcounter_addToTags() function outputs the post author's nickname in a JavaScript context without proper escaping, allowing authenticated attackers with Author-level access to inject scripts.

The Automotive Car Dealership Business WordPress Theme is vulnerable to Stored Cross-Site Scripting via the 'Project Details' custom field in Portfolio Items. The vulnerability is due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level permissions or higher can inject arbitrary web scripts that execute whenever a user accesses an injected page.

The Breeze plugin for WordPress up to version 2.5.2 exposes sensitive information to unauthenticated attackers. When caching for logged-in users is enabled, the plugin improperly verifies the 'wordpress_logged_in_' cookie, allowing attackers to impersonate an administrator and read private content.

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress up to version 6.3.7 contains a sensitive information exposure vulnerability. The AJAX action 'ays_poll_get_user_information' serializes and returns the full WP_User object (including password hash, email, login, roles, and capabilities) without nonce verification or capability check beyond is_user_logged_in(). This allows authenticated attackers with subscriber-level access or above to retrieve their own password hash, which WordPress does not normally expose, and can be used for offline password cracking.

The Post Snippets plugin for WordPress up to version 4.0.19 is vulnerable to Stored Cross-Site Scripting due to insufficient output escaping of snippet content when rendering JavaScript variables in the post editor, where double quotes are not properly handled. An authenticated attacker with Administrator access can inject malicious scripts via an imported file that execute when any administrator accesses the post editor.

In the CUPS Printer Driver installer for macOS (Canon PIXUS iX6800 Series, PIXMA MG2500 Series and iX6800 Series) up to version 16.91.0.0, improper handling of symbolic links allows a local attacker with login privileges to modify directory permissions they normally would not have access to.

In My Image Garden for macOS version 3.6.8 and earlier, improper handling of symbolic links allows a local attacker with login privileges to modify file permissions they normally would not have access to.

In Google Chrome on Mac prior to 148.0.7778.216, an out-of-bounds read in WebRTC allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

Inappropriate implementation in the Media component in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to bypass same-origin policy via a crafted video file.

Insufficient validation of untrusted input in the OptimizationGuide component in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page.

In Google Chrome on ChromeOS prior to version 148.0.7778.216, insufficient validation of untrusted input in Media allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

Inappropriate implementation in the Skia library in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

In Google Chrome prior to version 148.0.7778.216, insufficient validation of untrusted input in Printing allows a remote attacker who compromised the renderer process to bypass site isolation via a crafted HTML page.

In Google Chrome prior to version 148.0.7778.216, insufficient input validation in the Input component allows a remote attacker who compromised the renderer process to bypass site isolation via a crafted HTML page.

An inappropriate implementation in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker, after convincing a user to perform specific UI gestures, to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

An inappropriate implementation in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.