A missing authorization vulnerability exists in WC Lovers WCFM Membership plugin (wc-multivendor-membership) up to version 2.12.0. This flaw allows attackers with limited privileges to exploit incorrectly configured access control security levels, potentially leading to unauthorized actions. The vulnerability has a medium severity rating with a CVSS score of 4.3.
A missing authorization vulnerability exists in myCred up to version 4.0.2, allowing exploitation of incorrectly configured access control security levels. This flaw could permit unauthorized users with limited privileges to perform actions they should not be allowed to. The vulnerability has a medium severity rating with a CVSS score of 4.3, indicating limited impact primarily on integrity without affecting confidentiality or availability.
Nanosystems Supremo versions for Windows and macOS prior to 5.0.2.3874 have an improper certificate validation vulnerability. This flaw allows attackers on the same network to intercept and relay TLS connections by using self-signed certificates. Exploitation can lead to exposure of sensitive data such as usernames, SHA-256 password hashes, and license codes.
A missing authorization vulnerability exists in WC Lovers WCFM Membership (wc-multivendor-membership) up to version 2.12.0. This flaw allows exploitation of incorrectly configured access control security levels, potentially enabling unauthorized actions that impact data integrity. The vulnerability has a medium severity rating with a CVSS score of 5.3 and does not affect confidentiality or availability.
A race condition vulnerability in Bagisto versions before 2.3.16 and 2.4.x before 2.4.1 allows attackers to redeem single-use coupons multiple times by submitting concurrent order requests. This bypasses the intended usage checks for coupons during checkout.
GNU Gatekeeper (gnugk) versions before 5.16 contain an out-of-bounds read vulnerability in the H46024Socket::ReceivedProbePacket() function. This flaw allows remote attackers to cause a heap over-read by sending short probe packets, specifically short application-defined RTCP packets during H.460.24 probing. The vulnerability may lead to a crash of the gatekeeper service but does not impact confidentiality or integrity.
A path traversal vulnerability exists in phpMyAdmin MoTranslator up to version 6.0.1 in the Loader::getTranslator function. This flaw allows remote attackers with low privileges to manipulate the locale argument, potentially leading to unauthorized file access. The vulnerability has a medium severity score of 6.3 and public exploit details have been disclosed. The vendor has not responded to the disclosure, and no patch information is available.
NetBox versions from 2.9.0 up to but not including 4.7.4 contain a broken access control vulnerability in the BulkComponentCreateView. This flaw allows authenticated users with add-component permission to bypass view permissions on parent devices and virtual machines. Exploitation enables viewing out-of-scope device details and creating components on unauthorized devices or VMs by submitting arbitrary IDs or using filters.
A Zip Slip vulnerability exists in the /upload endpoint of codeskyblue gohttpserver versions through 1.3.0. This flaw allows attackers to write arbitrary files on the server by uploading a specially crafted Zip archive.
An out-of-bounds read vulnerability exists in wlroots versions before 0.20.2 in the read_surface_class() function within xwayland/xwm.c. This flaw allows local X11 clients to leak compositor heap memory by setting a WM_CLASS property with a NUL-terminated instance but an unterminated class, causing an over-read of heap bytes exposed as the window class or app_id over IPC.
TeXlyre versions from 0.11.0 up to but not including 0.13.5 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows attackers to execute malicious scripts by supplying crafted LSP or typesetter recipe icons containing HTML event handlers. Successful exploitation can lead to persistent script execution, potentially exposing local projects and repository credentials to attackers.
A vulnerability in the GStreamer JPEG 2000 decimator (gst-plugins-bad) can cause integer overflows or division by zero when processing crafted JPEG 2000 media. This can lead to application crashes and denial of service. The flaw requires processing attacker-controlled media through the jp2kdecimator element. No confidentiality or integrity impacts have been demonstrated. Some Linux distributions have versions with the fix, while others are still tracking exposure.
MongoDB Database Tools mongorestore has a vulnerability where it incorrectly URL-decodes an original collection name from metadata if the dump filename is truncated. This can allow a database user with the ability to create and populate a specially encoded collection to cause a restore operation to write documents into a different collection that the user cannot directly modify. This may lead to omission of backed-up documents or unintended replacement of collections when using the --drop option. The issue affects versions from 100.0.2 up to but not including 100.20.1.
SolarWinds Dameware contains a command injection vulnerability (CVE-2026-28336) that requires authentication and could allow an attacker to compromise a remotely controlled host. The vulnerability has a critical CVSS score of 9.9, indicating high impact on confidentiality, integrity, and availability.
A vulnerability exists in phpMyAdmin SQL-Parser versions 6.0.0 and 6.0.1 in the parse function of src/Statements/ExplainStatement.php. The flaw involves incorrect type conversion due to manipulation of the nextToken argument. This vulnerability can be exploited remotely and public exploit code is available. The vendor has not responded to the disclosure. The vulnerability has a CVSS score of 5.3, indicating medium severity, and impacts availability but not confidentiality or integrity.
Lightdash versions from 0.2609.0 up to but not including 3.137.0 have an authorization bypass vulnerability in the RenameService. This flaw allows authenticated users with update permission on one project to access and modify dashboards of other projects due to improper verification of project identifiers. Attackers can manipulate dashboard filters or read field metadata from unauthorized projects.
A stored cross-site scripting (XSS) vulnerability exists in Barn2 Plugins Posts Table with Search & Sort up to version 1.4.14. This flaw allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts that execute in users' browsers. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.
A missing authorization vulnerability exists in Uncanny Owl Uncanny Automator up to version 7.7.1. This flaw allows exploitation of incorrectly configured access control security levels, potentially enabling unauthorized actions that impact the integrity of the system. The vulnerability has a medium severity rating with a CVSS score of 5.3.
A vulnerability in im3x Scriptables through the v2-dev branch allows attackers to inject arbitrary operating system commands by uploading a file with a specially crafted filename to the /sync endpoint. This could enable unauthorized command execution on the affected system.
SolarWinds Dameware contains a buffer overflow vulnerability (CVE-2026-28335) that can lead to remote code execution. Exploitation requires authentication. The vulnerability has a high severity score of 8.4 and impacts confidentiality, integrity, and availability.