CVE Vulnerability Catalog

Dell PowerScale OneFS versions prior to 9.12.0.0 contain an improper check for unusual or exceptional conditions vulnerability. A high privileged attacker with local access could exploit this to cause a denial of service.

Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication.

In WSO2 Identity Server, active access tokens are not revoked or invalidated when a user account is locked. This allows previously issued valid tokens to remain usable, enabling locked accounts to access protected resources.

LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where opening a crafted web page can repeatedly trigger OS-level dialogs due to insufficient safeguards when handling arbitrary URL schemes, potentially causing the iOS device to become temporarily inoperable.

The WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'put_wpgm' shortcode in all versions up to and including 4.8.7. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes.

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_box' shortcode in all versions up to, and including, 7.4.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase. This permits a local user to make unprivileged modifications, allowing the altered resource to pass system checks and be executed with elevated privileges upon a user-initiated update.

A path traversal vulnerability in OpenHarness prior to commit dd1d235 allows remote gateway users with chat access to read arbitrary files by supplying path traversal sequences to the /memory show slash command. Attackers can bypass the project memory directory validation and access sensitive files accessible to the OpenHarness process.

The CVE-2026-21726 vulnerability allows an attacker to read files by exploiting double encoding in the namespace parameter at the Ruler API endpoint.

A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string without explicit termination, it results in an out-of-bounds read when processed by functions like snprintf(). A local attacker could potentially trigger this vulnerability by initiating a crafted passkey authentication request, causing the SSSD PAM responder to crash, resulting in a local Denial of Service (DoS).

A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center allowed an unauthenticated, remote attacker to perform cross-site scripting (XSS) attacks. The issue was due to improper handling of HTML and script content. Cisco has addressed this vulnerability in the service, requiring no customer action.

A vulnerability in Cisco ISE and Cisco ISE-PIC allows an authenticated remote attacker to perform path traversal attacks on the underlying OS and read arbitrary files. The flaw is due to improper validation of user-supplied input.

A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) allows an authenticated local attacker with administrative privileges to perform command injection on the underlying OS and elevate privileges to root. The issue is due to insufficient input validation.

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) allow an authenticated remote attacker with administrative write privileges to conduct stored XSS or reflected XSS attacks against a user of the interface. These issues stem from insufficient sanitization of user-supplied data stored in web pages.

The YouTube Showcase plugin for WordPress is vulnerable to Stored XSS due to improper neutralization of input during web page generation. This issue affects versions from n/a through 3.5.1.

Cross-Site Request Forgery (CSRF) vulnerability in ZAYTECH Smart Online Order for Clover plugin. Allows an attacker to perform unauthorized actions on behalf of a logged-in user. Affects versions up to and including 1.6.0.

Cross-Site Request Forgery (CSRF) vulnerability in DeluxeThemes Userpro plugin. Allows an attacker to perform unauthorized actions on behalf of a logged-in user. Affects versions before 5.1.11.

In Grafana's alerting system, users with edit permissions for contact points (e.g., 'alert.notifications:write' or 'alert.notifications.receivers:test' granted via the 'Contact Point Writer' role) can modify contact points created by others and change the endpoint URL to a controlled server. By invoking the test functionality, they can capture and extract redacted secure settings, such as authentication credentials for third-party services (e.g., Slack tokens), leading to unauthorized access and potential compromise of external integrations.

A potential vulnerability in Lenovo Software Fix that during installation could allow a local authenticated user to perform an arbitrary file write with elevated privileges.

A potential DLL hijacking vulnerability in Lenovo Service Bridge that could allow a local authenticated user to execute code with elevated privileges under certain conditions.