CVE Vulnerability Catalog

The Free Builder for Elementor WordPress plugin before version 1.6.7 does not sanitize contact form field values before storing and displaying them in the admin dashboard, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute when a logged-in administrator views the form submissions.

Information disclosure vulnerability in HCL DevOps Plan. An attacker can use the revealed information to focus their attacks.

Post-authentication command injection in the syslog component of Zyxel AX7501-B1 firmware. An authenticated attacker with admin privileges can execute OS commands via the 'LogServer' field.

A vulnerability was detected in D-Link DNS-320 1.0.2 in the file /mydlink/multi_uploadify.php. Manipulation of the argument Filedata[] results in unrestricted upload. The attack is remotely exploitable and the exploit is public.

In D-Link DNS-320 version 1.0.2, an unknown function in /web/function/save_ajax.php is vulnerable to unrestricted file upload via the Malicious Handler argument. The attack can be executed remotely and the exploit is publicly available.

A vulnerability has been found in D-Link DNS-320 version 1.0.2, involving unrestricted file upload in the uploadify.php function. An attacker can remotely upload arbitrary files, potentially leading to device compromise.

A vulnerability in D-Link DNS-320 1.0.2 in the file /photo_center/php/uploadify.php allows unrestricted upload via manipulation of the Malicious Handler argument. The attack can be initiated remotely and the exploit is publicly available.

Netty prior to versions 4.1.136.Final and 4.2.16.Final continues inflating zlib-compressed header blocks after maxHeaderSize is exceeded, allowing a remote peer to send a small compressed HEADERS block that expands into much larger raw header data, causing compression-amplified CPU and allocation churn.

Netty prior to versions 4.1.136.Final and 4.2.16.Final accepts a peer-declared SETTINGS entry count up to the 24-bit frame-length limit and materializes every unique setting ID in DefaultSpdySettingsFrame, allowing a remote SPDY/3.1 peer to send a syntactically valid roughly 2 MiB SETTINGS frame that creates 262144 map entries, amplifying network input into heap growth and ordered-map insertion work.

A vulnerability was found in D-Link DNS-320 version 1.0.2, involving unrestricted file upload in the /web/web_file/upload.php script. Manipulating the File argument allows remote attackers to upload arbitrary files without proper validation. The exploit has been publicly disclosed and may be used.

Use-after-free in the Aura component in Google Chrome prior to 150.0.7871.128 allows a local attacker to potentially exploit heap corruption via a malicious file. The issue has a high security severity.

Use-after-free vulnerability in the Ozone component in Google Chrome on Linux prior to version 150.0.7871.128. A remote attacker, by convincing a user to perform specific UI gestures, can cause heap corruption via a crafted HTML page.

Out-of-bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High).

Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

FreeRDP before version 3.28.0 treats lines beginning with a forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass certificate validation, or expose local filesystems without user interaction.

Vulnerability in AgenticMail packages (@agenticmail/claudecode before 0.2.39, @agenticmail/codex before 0.1.33, @agenticmail/core before 0.9.43, @agenticmail/openclaw before 0.5.71). An external email sent to the bridge inbox causes the operator's Claude Code session to resume with bypassed permissions, enabling indirect prompt injection into a fully-privileged agent.

Vulnerability in AgenticMail (versions before 0.9.64) allows a low-privileged authenticated agent to enumerate and claim tasks assigned to other agents. Missing authorization in task endpoints.

A vulnerability in NextCRM (open source CRM) allows an authenticated low-privileged user to create, modify, archive, or soft-delete products in the CRM catalog via the MCP API.

NextCRM version 0.12.1 has a vulnerability in MCP campaign tools where handlers ignore the authenticated user ID and operate on campaigns only by object ID. A low-privileged user with a valid MCP API token can enumerate, read, modify, or delete other users' campaigns.

SSRF vulnerability in FlareSolverr before version 3.4.7 in the /v1 API endpoint. A remote attacker can obtain sensitive information.