CVE Vulnerability Catalog

The Login with QR WordPress plugin through 1.0.0 does not verify that the code used to log a user in is one it issued, matching any stored user metadata value instead. This allows unauthenticated attackers to log in as any user, including administrators.

The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication fails. This allows unauthenticated attackers to log in as any user, including administrators.

The Private Feed Key WordPress plugin through 0.1 does not verify that the key used to authenticate a feed request is one it issued, matching any stored user metadata value instead. This allows unauthenticated attackers to log in as any user, including administrators.

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to and including 1.1.9 via the move_file function. This is due to insufficient file type validation during chunked upload handling. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

djust prior to version 1.0.7 has a vulnerability in the WebSocket transport that bypasses standard Django authorization mechanisms (such as LoginRequiredMixin, PermissionRequiredMixin, etc.) and the staff gate in the admin extension. Mount authorization is done via check_view_auth, not the View.dispatch() chain, allowing anonymous or under-privileged clients to open a WebSocket and dispatch view handlers, including admin ones.

UVdesk Community Skeleton through 1.1.8 fails to authenticate or validate installation state on wizard endpoints in ConfigureHelpdesk controller actions. Unauthenticated attackers can repoint the database and create super administrator accounts by submitting crafted requests to wizard endpoints, gaining full control of the instance.

Feast through 0.66.0 fails to verify JWT token signatures before establishing user identity, allowing attackers to bypass all role-based access control by presenting an unverified token with a hardcoded claim value. Attackers can obtain trusted internal identity and gain unchecked read and write access to all entities, feature views, data sources, and permission policies on the server.

Marten from version 7.0.0 until 9.13.0 has a vulnerability involving interpolation of runtime, potentially attacker-controlled strings into single-quoted SQL literals without escaping or parameterization in several LINQ and tenant-management paths. The primary confirmed vector is a dictionary indexer key used by Where filters. This could enable filter or multi-tenant authorization bypass and blind data exfiltration, and in some configurations data modification.

Vulnerabilities in Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software are related to improper access control issues (CWE-284). They were discovered during an internal security review and have been addressed in a software hardening release.

A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks. This is due to insufficient validation of user-supplied input in REST API calls. A successful exploit could allow the attacker to view or modify data on the underlying database, and in single-node deployments could cause a DoS condition.

A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0. The script accepts an attacker-controlled URL parameter and passes it to curl_setopt(CURLOPT_URL) without host or scheme validation, allowing an unauthenticated remote attacker to make arbitrary HTTP and HTTPS requests from the server to internal networks or cloud metadata services.

A server-side request forgery (SSRF) vulnerability exists in the UnifiedLogin service of Altium Enterprise Server. An unauthenticated network attacker can cause the server to issue outbound HTTP requests to a destination of the attacker's choosing, including internal services reachable only from the server. One such internal service exposes configuration and credential material without authentication, relying on local origin, which is satisfied by forged requests.

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions. These vulnerabilities impact the HP Advance server hosting the software.

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions. These vulnerabilities impact the HP Advance server hosting the software.

kkFileView 4.2.0 and later is vulnerable to Server-Side Request Forgery in the /getCorsFile endpoint. The TrustHostFilter validates the first non-empty parameter in a fixed priority order, while the controller only reads and fetches urlPath, allowing bypass of the trust.host whitelist by supplying both urlPath (real target) and url (whitelisted decoy), with the response body echoed back to the attacker.

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This is due to insufficient authorization checks in the REST API web service. An attacker can send crafted HTTP requests to the exposed REST API port to read and modify configuration and identity data with administrative privileges.

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attacker to obtain root privileges. This is due to unsecured deserialization of untrusted data over the sftunnel management connection. An attacker can send crafted sftunnel RPCs to gain root privileges on the device and its high-availability peer. Valid administrative credentials on a managed Cisco FTD device are required.

Cisco's engineering team conducted a comprehensive internal security review of Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software, resulting in a hardening release. The vulnerabilities tracked by CVE-2026-20330 are related to improper neutralization issues grouped under CWE Pillar CWE-707.

Cisco's engineering team conducted a comprehensive internal security review of Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software, resulting in a hardening release. The vulnerabilities tracked by CVE-2026-20329 are related to improper handling of exceptional conditions grouped under CWE Pillar CWE-703.