CVE Vulnerability Catalog

There is a remote SQL Injection vulnerability in the getLiveValues function that allows unauthorized access to data. An attacker can exploit this flaw, leading to a total loss of data confidentiality.

The ssoabstractservice has a remote SQL Injection vulnerability that can be exploited by an unauthenticated attacker. The flaw arises from improper neutralization of special elements in a SQL SELECT command, potentially leading to a total loss of confidentiality.

In CVE-2026-40810, an unauthenticated remote attacker can exploit an SQL Injection vulnerability in the userinfo endpoint due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the /wp-json/litespeed/v1/notify_ccss and /wp-json/litespeed/v1/notify_ucss REST API endpoints in all versions up to and including 7.7. These endpoints accept CSS content from QUIC.cloud callback notifications and store it to disk without sanitization.

A local user with low privileges may influence the behavior of a privileged system service by manipulating configuration or application-related files in user-writable areas of the filesystem. The affected service processes data from locations that are not sufficiently protected against modification by low-privileged users.

Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device downloaded from the PLCnext Store without implementing any data verification mechanism, leading to the capability for an Engineer user to reach arbitrary code execution with root privileges on the PLC device.

The Query Shortcode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to and including 0.2.1, allowing authenticated attackers with contributor-level access and above to include and execute arbitrary .php files on the server.

The Login with NEAR plugin for WordPress is vulnerable to Authentication Bypass in all versions up to and including 0.3.3. The `ajaxLoginWithNear()` function allows attackers to log in as any existing WordPress user, including administrators, based on the supplied `account` parameter.

The Firebase Support & Chat Management plugin for WordPress is vulnerable to privilege escalation in all versions up to and including 3.1.1. The `firebase_auth()` function authenticates the request as the WordPress user whose email is supplied in the `user_email` POST parameter without verifying ownership of that email.

The EventPress WordPress theme before version 22.2 does not sanitize or escape the 'id' parameter in the eventpress_customizer_notify_dismiss_action AJAX handler, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against logged-in users.

An insecure password scheme due to improper encryption algorithm selection, inadequate key management, or flawed code implementation, potentially leading to data leakage or tampering.

Vulnerability in IO::Compress for Perl before version 2.220 allows arbitrary code execution via File::GlobMapper using an attacker-controlled output glob. The _parseOutputGlob() wraps the glob in quotes, and _getFiles() evaluates it via eval STRING, enabling Perl code injection.

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. The defect is in the bundled CLI tool, not the library.

Vulnerability in the IO::Uncompress::Unzip library for Perl before version 2.220. The fastForward function compares the offset length (1-19 bytes) with the chunk size, causing a per-byte read loop leading to CPU exhaustion. An attacker can supply a crafted zip file.

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0, including 9.3.x and 8.3.x, does not prevent certain XML parsers from resolving external entities.

A flaw in UTT HiPER 1250GW up to version 3.2.7-210907-180535 exists in the strcpy function of the Web Management Interface. Manipulating the Profile argument leads to a stack-based buffer overflow. The attack is remotely exploitable and the exploit is public.

In the UTT HiPER 1250GW router up to version 3.2.7-210907-180535, a stack-based buffer overflow vulnerability exists in the strcpy function in the file /goform/formConfigFastDirectionW. A remote attacker can manipulate the Profile parameter, leading to buffer overflow.

A stack-based buffer overflow vulnerability has been detected in UTT HiPER 1200GW up to version 2.5.3-170306 in an unknown function of the /goform/formPptpClientConfig file. Manipulation of the PPTP server address, username, password, or tunnel name arguments leads to buffer overflow. The attack can be initiated remotely and the exploit is public.

A security flaw in UTT HiPER 1200GW up to version 2.5.3-170306 affects the Web Management Interface. The strcpy function in /goform/setSysAdm allows buffer overflow via the sysAdmUser/sysAdmPass arguments. The attack is remotely exploitable and the exploit is publicly available.

Tanium Connect has an unauthorized code execution vulnerability. The vendor has released a fix.