CVE Vulnerability Catalog

NVIDIA Transformers4Rec contains a vulnerability allowing improper deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.

Vulnerability in Eclipse hawkBit versions 1.0.3 and prior in the Direct Device Integration (DDI) Controller. Allows an authenticated device to escalate privileges and download any firmware artifact within the same tenant, bypassing assignment restrictions. Additionally, the software module listing endpoint does not enforce assignment checks, enabling enumeration of available artifacts.

Unrestricted file upload vulnerability in ZS-Admin up to version b52e145. An unknown function in /api/system/file/upload in the SysFileController component does not restrict the uploaded file type, allowing remote upload of arbitrary files. The exploit is public.

When verifying a MAC with a ChunkedMacVerification object in the Tink library, the tag comparison is not constant-time. This potentially allows an attacker to use timing information as a side channel to determine how many bytes of a given tag match the correct tag, which could lead to bytewise recovery of the correct tag.

Vulnerability in Plane involving an authorization flaw in the asset-management API. Authenticated users can access, delete, or duplicate assets belonging to another workspace by providing only the victim workspace slug and asset ID. No membership verification in the target workspace enables cross-tenant data exposure, deletion, and persistent exfiltration of files into an attacker-controlled workspace.

Vulnerability in the Apple Find My backend service allows an attacker with a valid PET (Private Endpoint Token) to enumerate devices and remove offline devices from an Apple ID account without two-factor authentication or ownership verification. This may result in unauthorized device removal.

Home Assistant Core before 2026.5.4 contains a cross-site scripting vulnerability in the Shelly integration's `async_get_media_image()` method. Attackers controlling a Shelly device's thumb field can serve arbitrary HTML content via a data URI with `text/html` content type without validation against an image-only allowlist. This enables theft of session tokens and authenticated calls to sensitive endpoints like locks, alarms, and covers.

Vulnerability in PraisonAI (versions before 4.6.40) allows automatic fetching of content from URLs mentioned in CLI prompts. An attacker can inject a malicious URL, resulting in fetching localhost resources and injecting them into the model context, with no private address restrictions.

In PraisonAI before version 4.6.40 (and praisonaiagents before 1.6.40), URL validation in `spider_tools` can be bypassed using alternate loopback host encodings. The validation only blocks exact strings like 'localhost' and '127.0.0.1', allowing SSRF to loopback services.

Stored cross-site scripting (XSS) vulnerability in SolarWinds Serv-U. Can lead to session hijacking or information disclosure from an administrator account.

Vulnerability in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. The getTenantId function in /api/system/sys/dept/page of the MyBatis-Plus Tenant Plugin allows authorization bypass via manipulation of the X-Tenant-Id argument. Remote attack, exploit publicly available.

In ZS-Admin up to version b52e14536d59fda11e56e2536a1c32e82a38cead, the function OrderItem.asc/OrderItem.desc in file /api/system/sys/dept/page of component com.zs.sys.dept.controller.SysDeptController is vulnerable to SQL injection via manipulation of the orderField argument. The attack can be carried out remotely. The exploit has been publicly disclosed.

Vulnerability in the Ninja Forms WordPress plugin version 3.14.8 allows unauthenticated attackers to bypass form validation by merging attacker-controlled field metadata before validation. Attackers can send a malicious AJAX request, overriding field types, removing required flags, and disabling CAPTCHA.

Vulnerability in the Ninja Forms WordPress plugin version 3.14.8 and earlier. Missing authorization in the Gutenberg block 'ninja-forms/submissions-table' allows authenticated attackers with Author role to expose stored form submissions (including PII) to unauthenticated visitors.

In the libssh library, if data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.

Sparkle, a software update framework for macOS, up to version 2.9.1, has a vulnerability in the Mach connection authentication mechanism. After stage 1 installation completes, new connections to the Mach service are accepted from any local process without code or team ID verification, potentially allowing unauthorized updates.

In multiple D-Link devices (including DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, DNS-1550-04) up to version 20260205, a command injection vulnerability exists in the cgi_check_rsync_rw function of /cgi-bin/remote_backup.cgi. Manipulation of the ip argument allows remote command execution. The exploit is publicly available.

Vulnerability in zenml-io/zenml version 0.94.2. The `GET /api/v1/stack-deployment/stack` endpoint lacks proper RBAC checks, allowing any authenticated user to enumerate all deployed stacks (including component details, service connector info, and owner IDs) across all tenants.

An access control bypass in snapd allows strictly confined snap applications to query systemd-userdbd via UNIX sockets, retrieving password hashes from /etc/shadow.

An out-of-bounds read vulnerability in QTextCodec::codecForName() in Qt. When called with a non-NUL-terminated QByteArray, the codec-name matching routine reads past the buffer. This usually results in incorrect codec selection; worst case, it causes a crash (DoS). Affects Qt5Compat module from Qt 6.0.0 and Qt Core in Qt 4.x and 5.x.