CVE Vulnerability Catalog

In the SAIL library prior to 1.0.2, the built-in WebP decoder can crash during loader initialization when processing a malformed animated WebP file with inconsistent container or ANMF frame metadata. A zero image width is used as a divisor when computing bytes_per_pixel, causing an arithmetic fault and process termination.

A vulnerability in Xibo (versions prior to 4.4.3) involves missing access-control checks on the GET /dataset/export/csv/{id} endpoint. An authenticated user can export data from any dataset, including those created by administrators, by iterating over sequential dataset IDs. Exploitation requires the privilege allowing edits and deletion of all datasets, which is not granted to non-administrators by default.

A use-after-free caused by lack of lifecycle management when adding or removing XInput master devices exists in X.org X Server before 21.1.25 and XWayland before 24.1.14. An authenticated X client could exploit this to crash the X server or potentially execute code in the X server context.

A use-after-free in present_clear_window_notifies() in X.org X Server before 21.1.25 and XWayland before 24.1.14 could be exploited by malicious X clients to crash the server or potentially execute code in the X server context.

HCL BigFix AEX is affected by an information disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths.

HCL BigFix AEX is affected by a clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts.

HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or unauthorized actions through the affected application.

Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the email field from the request body without checking its type and passes it straight into the MongoDB storage query. When email is not a string (for example a JSON object such as {"$ne": null}), the MongoDB storage adapter's parseWhere silently drops the field rather than rejecting the request, producing an empty filter that matches all users, and the password is verified against the first user (the administrator). This is a partial authentication bypass that removes the email factor for the administrator account, enables user enumeration, and amplifies credential-stuffing.

Redux Framework by David Anderson has a missing authorization vulnerability that allows lifting sensitive data embedded in cache. The issue affects versions up to and including 4.5.16.

The WP Discussion Board plugin has a stored Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. The issue affects versions up to and including 2.6.0.

Dell iDRAC Service Module (iSM) for Windows, Linux, and ESXi versions prior to 6.1.1.0 contains an improper control of code generation (code injection) vulnerability. A high-privileged attacker with local access could exploit this to elevate privileges.

The WordPress plugin My auctions allegro (my-auctions-allegro-free-edition) contains a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This affects versions up to and including 4.0.3.

The Joomla extension iCagenda (icagenda.com) contains a CSV formula injection vulnerability in the registrations export. This affects versions 3.5.0 to 4.0.16.

Sensitive information disclosure occurs due to missing SSL certificate verification affecting one component. The vulnerability affects Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

Sensitive information disclosure occurs due to improper token validation. The vulnerability affects Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

Linux binaries have the executable stack attribute enabled. The vulnerability affects Acronis Cyber Protect 17 (Linux) before build 42587.

Sensitive information disclosure occurs due to improper token validation. The vulnerability affects Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

A cross-site scripting (XSS) vulnerability occurs due to improper input validation. The vulnerability affects Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

Sensitive information disclosure occurs due to insufficiently protected credentials. The vulnerability affects Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later evaluated by its template engine. The filter meant to strip template delimiters runs before a decoding step that reconstructs them, allowing an authenticated administrator to execute arbitrary template expressions server-side and read PHP constants such as the site's database credentials and authentication keys.