CVE Vulnerability Catalog

Wtyczka Otter Blocks dla WordPressa jest podatna na obejście weryfikacji zakupu we wszystkich wersjach do 3.1.4 włącznie. Problem wynika z metody 'get_customer_data', która polega na niesigned 'o_stripe_data' cookie do określenia własności produktu Stripe dla nieautoryzowanych użytkowników.

Podatność związana z niewłaściwą kontrolą częstotliwości interakcji w oprogramowaniu MeWare Software Development Inc. PDKS umożliwia przeprowadzenie ataku typu Flooding. Problem dotyczy wersji PDKS od V16.20200313 do przed VMYR_3.5.2025117.

Podatność CVE-2026-7399 dotyczy oprogramowania PDKS firmy MeWare Software Development Inc. i polega na obejściu autoryzacji za pomocą klucza kontrolowanego przez użytkownika, co umożliwia nadużycie uprawnień.

Insufficient validation of node IDs in the Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. Although QML execution is typically more restricted than native code execution, this could still lead to denial of service, information disclosure, or other impacts depending on the application's privilege level and data access.

Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares.

In JetBrains IntelliJ IDEA versions before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, and 2026.1.1, it was possible to read arbitrary local files via the built-in web server.

A vulnerability has been identified in the Linux kernel that leads to a double free when splitting a virtual memory area (VMA). The issue occurs when a user performs a partial munmap() on a privcmd mapping, allowing for improper memory pointer management.

A buffer overflow vulnerability has been identified in the Linux kernel in the file drivers/xen/sys-hypervisor.c. The issue arises because the build id returned by HYPERVISOR_xen_version(XENVER_build_id) is not NUL terminated, leading to memory overflow.

CVE-2026-42800 involves a NULL pointer dereference vulnerability in the ims_client module on ASR1903 devices running Linux. This allows for pointer manipulation, potentially leading to unexpected system behavior.

Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This issue is associated with program files Code/Nr/nr_fw/RA/src/NrPwrCtrl.C.

CVE-2026-42512 affects dhclient, which incorrectly calculates the new size of the array of string pointers when resizing. This can lead to a heap buffer overrun, potentially resulting in a crash or allowing remote code execution.

The vulnerability in libnv involves a lack of verification whether the provided socket descriptor fits within the FD_SETSIZE (1024) limit during data exchange over a socket. An attacker can force a libnv application to allocate large file descriptors, potentially leading to stack corruption.

When processing the header of an incoming message, libnv failed to properly validate the message size. The lack of validation allows a malicious program to write outside the bounds of a heap allocation, which can trigger a crash or system panic.

ColorOS Assistant has an unauthenticated download channel, leading to file path traversal.

Incorrect packet validation allows unbounded recursion parsing SCTP chunk parameters, which can eventually lead to stack overflow and system panic.

An operator precedence bug in the kernel results in a scenario where a buffer overflow allows attacker-controlled data to overwrite adjacent execve(2) argument buffers.

A heap overflow vulnerability in the TLS protocol dissector in Wireshark 4.6.0 through 4.6.4 allows remote attackers to cause a denial of service or potentially execute arbitrary code.

The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives. When the lease file is subsequently re-parsed by dhclient, a malicious field may be passed to dhclient-script(8), which evaluates it.

Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.

All versions of the django-mdeditor package are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file names.