CVE Vulnerability Catalog

An incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier. If exploited, arbitrary code may be executed with SYSTEM privileges.

The Static Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 2.2. The issue arises from the static_block_content() shortcode handler not verifying the post's status and the user's capabilities.

In Zephyr OS on Xtensa targets with CONFIG_USERSPACE and CONFIG_XTENSA_MMU, arch_mem_domain_deinit() fails to remove the domain node from the global xtensa_domain_list, leaving a dangling pointer. Subsequent memory mapping/unmapping operations may trigger NULL pointer dereference or use-after-free, causing system crash or userspace isolation breach.

Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges.

The Video Conferencing with Zoom plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 4.6.7. This is due to the plugin not properly verifying that a user is authorized to perform an action, allowing unauthenticated attackers to obtain the Zoom SDK API key and a freshly-signed JWT.

In GnuTLS, the `gnutls_pkcs11_token_set_pin` function can lead to a use-after-free vulnerability when changing the Security Officer PIN with a NULL old PIN for a token without a protected authentication path.

A flaw was found in the MP3 Extractor `tracker-extract-mp3` component of GNOME localsearch, allowing for a buffer overflow. A remote attacker could exploit this vulnerability by providing a specially crafted MP3 file with malformed ID3 tags.

A flaw was found in GNOME localsearch (previously known as tracker-miners) in the MP3 Extractor component, which involves a heap buffer overflow. This issue occurs when processing specially crafted MP3 files containing malformed ID3v2.3 COMM tags.

A flaw in the `tracker-extract-mp3` component of GNOME localsearch leads to a heap buffer overflow when processing specially crafted MP3 files. A remote attacker could exploit this by providing a malicious MP3 file, resulting in application crashes.

A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor. When processing specially crafted MP3 files containing ID3v2.4 tags, a missing bounds check in the `extract_performers_tags` function can lead to a heap buffer overflow.

Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry pointing to a provider lookalike domain.

The Canon EOS Network Setting Tool version 1.5.0 or earlier uses a non-secure protocol as the default FTP configuration. This may lead to unauthorized access to data transmitted via FTP.

The Canon EOS Network Setting Tool version 1.5.0 and earlier uses weak SSH cryptographic algorithms, which may lead to potential security threats.

The Canon EOS Network Setting Tool version 1.5.0 and earlier uses hard-coded cryptographic keys, which may lead to unauthorized access to data.

The Canon EOS Network Setting Tool version 1.5.0 or earlier has improper validation of server certificates. This can lead to man-in-the-middle attacks.

The Canon EOS Network Setting Tool version 1.5.0 or earlier has improper validation of SSH host keys.

Slim is a PHP micro framework that enables users to write simple web applications and APIs. In versions 4.4.0 through 4.15, if an application uses HttpException::setTitle() and/or setDescription() to include untrusted/request-derived data, an attacker could inject arbitrary HTML/JavaScript that executes in the victim's browser.

Welcart e-Commerce versions up to 2.11.28 have an issue with unauthenticated access that can lead to broken access control.

There is a Cross Site Scripting (XSS) vulnerability in FV Flowplayer Video Player versions below 7.5.51.7212 for subscribers.

There is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability in WP Migrate Lite versions <= 2.7.8. An attacker can exploit this flaw to perform unauthorized actions on behalf of the user.