CVE Vulnerability Catalog

Woocommerce CSV Importer version 3.3.6 contains a path traversal vulnerability that allows registered users to delete arbitrary files by submitting unescaped filenames through the delete_export_file AJAX action. Attackers can craft POST requests with directory traversal sequences in the filename parameter.

Allok AVI DivX MPEG to DVD Converter version 2.6.1217 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a text file with a specially crafted buffer containing shellcode and SEH chain overwrite values, then paste the contents into the License Name field to trigger code execution.

Allok Fast AVI MPEG Splitter version 1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious license name string. Attackers can craft a payload of 780 bytes to trigger the overflow and execute code with application privileges.

Redaxo CMS Addon MyEvents version 2.2.1 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the myevents_id parameter.

A security flaw has been discovered in h2oai h2o-3 up to version 7402 in the importBinaryModel function of the h2o-core/src/main/java/hex/Model.java file of the JAR Handler component. Manipulating this function leads to deserialization, which can be exploited in remote attacks.

A vulnerability was identified in Oinone Pamirs up to version 7.2.0 affecting the function RSQLToSQLNodeConnector.makeVariable of the queryListByWrapper interface. This manipulation leads to SQL injection, which can be initiated remotely.

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin version 3.4.9 is vulnerable to privilege escalation. This is due to missing WordPress capability enforcement in the OAuth bearer-token authorization path, allowing access to admin-level MCP tools without verifying administrator privileges.

A weakness has been identified in CoreWorxLab CAAL up to version 1.6.0, affecting an unknown function in the file src/caal/webhooks.py of the test-hass Endpoint component. This manipulation leads to server-side request forgery.

A vulnerability in Das U-Boot before version 2026.04 allows bypassing FIT (Flat Image Tree) signature verification by omitting hashed-nodes from the hash calculation. An attacker can supply a modified FIT image that will be accepted as properly signed.

Fuel CMS version 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'col' parameter in the Activity Log interface.

The WordPress Plugin Backup and Restore version 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating parameters in AJAX requests.

The WordPress Plugin Anti-Malware Security and Bruteforce Firewall version 4.20.59 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the file parameter.

TextPattern CMS version 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload arbitrary PHP files by exploiting the plugin upload functionality. Attackers can authenticate, retrieve a CSRF token from the plugin event page, and upload malicious PHP files to the textpattern/tmp/ directory for code execution.

WP Learn Manager version 1.1.2 contains a stored XSS vulnerability that allows unauthenticated attackers to inject malicious scripts through the `fieldtitle` parameter. Attackers can submit POST requests to the jslm_fieldordering page with XSS payloads in the fieldtitle field, allowing arbitrary JavaScript execution when administrators view the field ordering interface.

VX Search version 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges.

Sticky Notes Widget version 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350000 repeated characters and paste it twice into a new note to trigger an application crash on iOS devices.

Sticky Notes & Color Widgets version 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can paste large payloads of repeated characters into note fields to trigger application crashes.

My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350000 repeated characters and paste it twice into a new note to trigger an application crash.

Macaron Notes version 5.5 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can generate a payload containing 350000 repeated characters and paste it into a note field to trigger application crash.

Color Notes version 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350,000 repeated characters and paste it twice into a new note to cause the application to stop responding.