CVE Vulnerability Catalog

A vulnerability in the CLI of Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows a local, high-privileged attacker to escalate privileges to root. The CLI accepts input without proper validation, enabling shell command injection executed with root permissions.

A Cross-site Scripting (XSS) vulnerability was found in Juniper Networks Junos Space in the list filter field. It allows an attacker to inject malicious script tags that, when visited by another user (including an administrator), execute commands with the target's permissions. All versions before 24.1R5 Patch V3 are affected.

In Junos OS Evolved on PTX and QFX5000 series, a classic buffer overflow in evo-aftmand/evo-pfemand allows an unauthenticated adjacent attacker to cause a DoS by sending crafted multicast packets, leading to crashes and restarts of line cards or non-line card devices.

Joomla HikaShop 4.7.4 contains a reflected XSS vulnerability allowing unauthenticated attackers to inject malicious scripts via GET parameters in the product filter endpoint. Attackers can craft malicious URLs with XSS payloads in from_option, from_ctrl, from_task, or from_itemid parameters to steal session tokens or login credentials.

Joomla Solidres 2.13.3 contains a reflected XSS vulnerability allowing unauthenticated attackers to inject malicious scripts via multiple GET parameters including show, reviews, type_id, distance, facilities, categories, prices, location, and Itemid. Attackers can craft malicious URLs with JavaScript payloads to steal session tokens, login credentials, or manipulate site content.

Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected XSS vulnerability allowing attackers to inject malicious scripts via the keyword parameter. Attackers can craft malicious URLs with script payloads in the keyword parameter of the product-variants endpoint to execute arbitrary JavaScript in victim browsers and steal session tokens or credentials.

Joomla iProperty Real Estate 4.1.1 contains a reflected XSS vulnerability allowing attackers to inject malicious scripts via the filter_keyword parameter. Attackers can craft URLs with JavaScript payloads in the filter_keyword GET parameter of the all-properties-with-map endpoint to execute arbitrary code in victim browsers and steal session tokens or credentials.

Joomla JLex Review 6.0.1 contains a reflected XSS vulnerability allowing attackers to inject malicious scripts via the review_id URL parameter. Attackers can craft malicious links containing JavaScript payloads that execute in victims' browsers when clicked, enabling session hijacking or credential theft.

The WordPress adivaha Travel Plugin 2.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the isMobile parameter. Attackers can craft malicious URLs containing JavaScript payloads in the isMobile GET parameter at the /mobile-app/v3/ endpoint to execute arbitrary code in victims' browsers and steal session tokens or credentials.

A flaw was found in libcap. A local unprivileged user can exploit a TOCTOU race condition in the `cap_set_file()` function, allowing an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file.

A stored cross-site scripting (XSS) vulnerability exists in Kiamo before version 8.4 due to improper output encoding of user-supplied input in administrative interfaces. An authenticated administrative user can inject arbitrary JavaScript code that is executed in the browser of users viewing the affected pages.

AlanWeb SCADA saves sensitive information, including user credentials, into a log file. Combined with another vulnerability (CVE-2026-34184), an unauthorized user could access this data and gain further authorized access to the system.

In awwaiid mcp-server-taskwarrior up to version 1.0.1, there is a command injection vulnerability in the server.setRequestHandler function of index.ts via the Identifier argument. Local access is required. An exploit is publicly available, and a patch exists.

The Download Manager plugin for WordPress up to version 3.3.52 is vulnerable to Stored XSS via the 'sid' attribute of the 'wpdm_members' shortcode. Insufficient input sanitization and output escaping allow attackers with contributor-level access to inject arbitrary scripts.

The OSM – OpenStreetMap plugin for WordPress up to version 6.1.15 is vulnerable to Stored Cross-Site Scripting via the 'marker_name' and 'file_color_list' shortcode attributes of the [osm_map_v3] shortcode. Insufficient input sanitization and output escaping allow authenticated attackers with Contributor-level access or higher to inject arbitrary scripts that execute when a user visits the page.

The Ziggeo plugin for WordPress up to version 3.1.1 lacks authorization in the wp_ajax_ziggeo_ajax handler. It only verifies a nonce, not user capabilities. The nonce is exposed to all logged-in users. Authenticated attackers (Subscriber+) can perform many admin operations like saving translations, managing event templates, modifying SDK settings, and managing notifications.

The Experto Dashboard for WooCommerce plugin for WordPress up to version 1.0.4 is vulnerable to Stored Cross-Site Scripting in settings fields (e.g., Navigation Font Size). Insufficient input sanitization and output escaping allow authenticated attackers with Administrator access to inject scripts that execute on the settings page. This only affects multi-site installations and installations where unfiltered_html is disabled.

The MStore API plugin for WordPress up to version 4.18.3 has an IDOR vulnerability in the update_user_profile() function. An authenticated user with Subscriber access can modify arbitrary meta fields on their account, including sensitive ones like wp_user_level, without proper validation.

In taskflow-ai up to version 2.1.8, an OS command injection vulnerability was found in the terminal_execute component via manipulation in src/mcp/server/handlers.ts. The attack is remotely exploitable. Version 2.1.9 fixes the issue.

code-projects Simple IT Discussion Forum 1.0 has a cross-site scripting vulnerability in /edit-category.php via the Category argument. The attack can be launched remotely. The exploit has been published and may be used.