CVE Vulnerability Catalog

The Nexi XPay plugin for WordPress versions up to 8.3.0 contains an unauthorized data modification vulnerability due to missing authorization checks on the redirect function. This allows unauthenticated attackers to mark pending WooCommerce orders as paid/completed.

Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, a Stored Cross-Site Scripting (XSS) vulnerability exists in the social post attachment upload functionality. An authenticated user can upload a malicious HTML file containing JavaScript via the /api/social_post_attachments endpoint. The file is served without sanitization, content type restrictions, or Content-Disposition header, causing JavaScript execution in the application context. This can lead to session hijacking, account takeover, privilege escalation, and other actions. This issue has been fixed in version 2.0.0-RC.3.

October CMS versions prior to 3.7.14 and 4.1.10 contain a stored cross-site scripting vulnerability in the SVG sanitization logic. The regex pattern used to strip event handler attributes could be bypassed using a crafted payload, allowing malicious SVG files to be uploaded through the Media Manager with embedded JavaScript. Exploitation could lead to privilege escalation if a superuser views or embeds the malicious SVG, and requires authenticated backend access with media upload permissions.

October CMS before versions 3.7.14 and 4.1.10 contains a server-side information disclosure vulnerability in the INI settings parser. PHP's parse_ini_string() supports ${} syntax for environment variable interpolation, allowing attackers with Editor access to inject patterns like ${APP_KEY}, leading to exposure of sensitive environment variables.

Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Divide By Zero vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application or render it unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction – the victim must visit a crafted webpage.

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are vulnerable to DOM-based XSS. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. User interaction is required – the victim must visit a crafted page.

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are vulnerable to DOM-based XSS. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. User interaction is required – the victim must visit a specially crafted page.

A reflected Cross-Site Scripting (XSS) vulnerability in Radware Alteon 34.5.4.0 vADC load-balancer allows an attacker to inject malicious scripts into the website.

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker can trick a victim into visiting a crafted URL, leading to execution of malicious JavaScript in the victim's browser. Scope is changed.

A vulnerability in Windows Snipping Tool exposes sensitive information to an unauthorized actor, allowing an attacker to perform network spoofing.

Microsoft Office Word has an out-of-bounds read vulnerability that allows an unauthorized attacker to disclose information locally.

Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.

A race condition in .NET Framework when using shared resources concurrently allows an unauthorized attacker to cause a denial of service over the network.

A heap-based buffer overflow in the Windows USB Print Driver allows an unauthorized attacker to elevate privileges through a physical attack.

An improper access control vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

The 'profiling.sampling' module (Python 3.15+) and 'asyncio introspection capabilities' (3.14+) could be exploited to read and write addresses in a privileged process if that process connected to a malicious or 'infected' Python process via the remote debugging feature.

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR (PaaS and on-premise versions) allows an attacker to intercept sensitive data sent in plaintext. The flaw affects multiple versions from 7.3 to 7.6.

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR (PaaS and on-premise versions) allows an authenticated attacker to view cleartext passwords in responses to Secure Message Exchange and Radius queries, if configured. The issue involves sending sensitive data in an unencrypted form.

W Keycloak znaleziono lukę w stronie logowania do wyboru organizacji. Zdalny atakujący z uprawnieniami `manage-realm` lub `manage-organizations` może wykorzystać podatność na przechowywane Cross-Site Scripting (XSS), co pozwala na wykonanie złośliwego kodu JavaScript w przeglądarce użytkownika.