Tencent RapidJSON version 1.1.0 contains a vulnerability in the GetCachedPowerByIndex function within include/rapidjson/internal/diyfp.h. The flaw involves manipulation of the decimalPosition argument, leading to an out-of-bounds read. This vulnerability can be exploited remotely without authentication. Public exploit code has been disclosed. The project has been notified but has not yet issued a response or patch.
A reflected Cross-site Scripting (XSS) vulnerability exists in the Review Schema software up to version 3.1.4. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker to execute arbitrary scripts in the context of a user's browser session.
The DefaultStateSerializer component in Apache Storm, used for persisting and restoring stateful bolt checkpoints with a Redis-backed state provider, improperly configures Kryo serialization to allow deserialization of untrusted data without class registration. This enables an attacker with write access to the state store keyspace to inject serialized objects that execute arbitrary code in the worker JVM during state restoration. The vulnerability requires Redis-backed state usage and write privileges to the state store, which is a data-plane privilege distinct from code execution rights. Apache Storm 3.1.0 addresses this by enforcing class registration in the serializer, but upgrading may require migration due to changes in checkpoint restoration behavior.
A vulnerability in myCred up to version 4.0.2 allows unauthorized retrieval of embedded sensitive system information. This exposure can lead to a high-impact confidentiality breach without requiring user interaction or privileges.
A stored Cross-Site Scripting (XSS) vulnerability exists in the profile editing form of the website https://www.luxorgymtarrega.com. The parameters cliNom and cliCognoms do not validate or escape user input before storing it in the database and displaying it in HTML responses. This allows attackers to inject and execute arbitrary JavaScript code in the browsers of users who view the affected content.
Apache Airflow versions prior to 3.4.0 are vulnerable to unsafe deserialization in deadline alert fields. This vulnerability allows a DAG author to instantiate classes from Airflow's deserialization allow list with controlled arguments in the scheduler and API server processes. The issue persists despite a partial fix for CVE-2026-45360, which only addressed the 'reference' field, leaving 'callback' and 'interval' fields exploitable. Users are advised to upgrade to version 3.4.0 or later to mitigate this risk.
A path traversal weakness exists in the load_state_dict_into_model function of the MoE Shard Checkpoint Loader component in lxtGH OMG-Seg up to commit f3b26b609bae919760cd3ccf09c36179bb8624a0. The vulnerability arises from manipulation of the weight_map argument and can be exploited remotely. Public exploit code is available. The project does not use versioning, and no fix or response from the maintainers has been reported.
Apache Airflow's CeleryExecutor component allowed execution of callback workloads without validating authentication tokens. This flaw enables an attacker with write access to the Celery broker to enqueue forged callbacks that execute arbitrary code on all CeleryExecutor workers without needing Airflow credentials. The issue affects deployments using the CeleryExecutor. A fix is available in Apache Airflow version 3.4.0 and later, where token validation is enforced before executing callbacks.
A Cross-site Scripting (XSS) vulnerability exists in Crocoblock JetFormBuilder up to version 3.6.8. This vulnerability allows improper neutralization of input during web page generation, leading to DOM-based XSS. The flaw could allow an attacker to execute arbitrary scripts in the context of the affected web application.
A stored cross-site scripting (XSS) vulnerability exists in 10Web Form Maker versions up to 1.15.50. This vulnerability arises from improper neutralization of input during web page generation, allowing attackers to inject malicious scripts that can execute in the context of other users. The vulnerability has a CVSS 3.1 score of 7.1, indicating high severity with network attack vector, low attack complexity, no privileges required, and user interaction needed. It impacts confidentiality, integrity, and availability with low to high impact levels. No patch or remediation information is currently provided.
A missing authorization vulnerability exists in weDevs weDocs (up to version 2.6.1) that allows attackers to exploit incorrectly configured access control security levels. This flaw enables unauthorized remote attackers to access sensitive information without authentication.
A stored cross-site scripting (XSS) vulnerability exists in WPMU DEV Hummingbird plugin versions up to 3.21.2. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker with low privileges to execute malicious scripts in the context of other users. The vulnerability has a medium severity rating with a CVSS score of 6.5.
A Cross-Site Scripting (XSS) vulnerability exists in Welcart e-Commerce up to version 2.12.6 due to improper neutralization of script-related HTML tags. This flaw allows an attacker to inject code, potentially impacting the integrity and availability of the application.
A stored cross-site scripting (XSS) vulnerability exists in the wpWax Directorist plugin up to version 8.10.6. This vulnerability involves improper neutralization of input during web page generation, allowing attackers with limited privileges to inject malicious scripts that can impact confidentiality, integrity, and availability.
A stored cross-site scripting (XSS) vulnerability exists in the WP Wham Checkout Files Upload for WooCommerce plugin, affecting versions up to and including 2.4.0. This vulnerability allows an attacker to inject malicious scripts that can be executed in the context of users visiting the affected web pages.
A stored cross-site scripting (XSS) vulnerability exists in FolioVision FV Flowplayer Video Player (fv-wordpress-flowplayer) versions up to 7.5.56.7212. This vulnerability allows attackers to inject malicious scripts that can be executed in the context of users' browsers when they view affected web pages.
An Incorrect Privilege Assignment vulnerability exists in Webful Creations RepairBuddy computer-repair-shop software, allowing privilege escalation. The vulnerability affects versions up to 4.1234. It has a CVSS 3.1 base score of 6.3, indicating a medium severity level. The vulnerability allows an attacker with some privileges to escalate their privileges further without user interaction. No public exploits or known active exploitation are reported. No patch or remediation information is currently available.
A stored Cross-site Scripting (XSS) vulnerability exists in Flying Images by Gijo Varghese, affecting versions up to 2.4.15. This vulnerability allows attackers to inject malicious scripts that execute in users' browsers when they view affected pages.
Apache Airflow's logout endpoint fails to properly revoke tokens on the server when revocation encounters errors, including database failures or tokens from external issuers with long identifiers. As a result, tokens remain valid after logout, allowing continued API access until token expiration. Users should upgrade to Apache Airflow 3.4.0 or later to address this issue.
A stored cross-site scripting (XSS) vulnerability exists in Welcart e-Commerce versions up to 2.12.6. This vulnerability allows an attacker to inject malicious scripts that are stored and later executed in the context of users' browsers when they view affected pages. The flaw is due to improper neutralization of input during web page generation.