CVE Vulnerability Catalog

A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service. Technical details were not provided in the description.

A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.

The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notification email sent to the site owner, allowing unauthenticated users to inject arbitrary HTML, such as phishing links, into that email.

The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, and the validated signature does not cover the order or the amount. This allows unauthenticated attackers to forge a payment confirmation and mark arbitrary orders as paid without paying.

A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited data corruption.

The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a submission on forms using its PayPal Commerce gateway. This allows unauthenticated visitors to submit paid forms without paying, and the form's confirmation is delivered and notification emails are sent even though no order exists at the payment provider.

A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.

A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service.

Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them. A local attacker with a valid session on the terminal or remote desktop server could modify these files to execute arbitrary commands within another user’s security context when that user logs in using the same theme or operating mode.

Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism. A remote attacker authenticated with valid first-factor credentials could bypass the second-factor verification because the authentication flow does not correctly apply the MFA validation result, allowing the attacker to complete the login without a valid second-factor token and gain access to protected applications and resources.

A vulnerability in the TSplus Remote Access web server involves improper access control. An unauthenticated remote attacker can access internal resources by manipulating paths through the /socket.io/JWN/ endpoint, bypassing access restrictions.

This CVE ID was rejected because it is a duplicate of CVE-2026-39749 and was never published. Both IDs refer to the same Broken Access Control vulnerability in the App for Cloudflare WordPress plugin.

A Missing Authorization vulnerability in Crocoblock JetFormBuilder allows exploiting incorrectly configured access control security levels. Affects versions up to 3.6.6.

An SQL Injection vulnerability in Webnus Modern Events Calendar Lite allows blind SQL injection. Affects versions before 7.37.0.

A vulnerability in insights-runtime-extractor allows an unprivileged tenant to take over a node. The scanning process does not sufficiently drop privileges (only seteuid, without changing ruid/suid and without removing capabilities), and then executes a workload-controlled binary with root privileges in the host namespace. An attacker can exploit this to gain full node access through the CRI-O socket.

A vulnerability in JTL-Shop's authentication middleware processes the plugin safe mode toggle on the admin logout route before checking authentication. An unauthenticated attacker can toggle the safe mode, deactivating all plugins and causing a shop-wide denial of service.

The public consent endpoint of JTL-Shop accepts arbitrary consent names from unauthenticated visitors without validating them against the configured consent items. These names are stored in the consent statistics and rendered without output encoding in the administration backend, allowing script code injection that executes in an administrator's browser session.

A Code Injection vulnerability in VillaTheme Email Template Customizer for WooCommerce allows code injection. Affects versions up to 1.3.4.

The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of payment gateway return requests, relying on a merchant secret that is empty on a store which has not entered its credentials. This allows unauthenticated attackers to mark arbitrary orders as paid and to disclose the name, email address and postal address of any order's customer.

A vulnerability in NSD involves text tokens in RDATA (e.g., TXT records) under 32 bytes not being checked to stay within the reserved space, allowing arbitrary sized out-of-bounds stack writes, including overwriting a callback function pointer.