Search: 5.1.8.3

SemanticMediaWiki versions from 2.5.0 up to but not including 7.3.1 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows users with page-edit rights to inject malicious scripts via Code-typed property values. The vulnerability arises because the CodeStringValueFormatter renders annotated JSON values with embedded HTML markup unescaped on the Special:Browse page, enabling execution of JavaScript in the browsers of users viewing the page. The issue is fixed in version 7.3.1.

Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject scripts via External identifier property values. Attackers can annotate markup payloads that ExternalIdentifierValue renders unescaped on Special:Browse, executing JavaScript in viewers' sessions, including administrators.

SemanticMediaWiki versions from 5.0.0 up to but not including 7.3.1 contain a stored cross-site scripting (XSS) vulnerability in the ext.smw.tooltip.tippy.js component. This flaw allows editors to inject malicious JavaScript via specially crafted data-* attributes in .smw-highlighter spans, which execute when users hover over them. The vulnerability is fixed in version 7.3.1.

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to force quadratic computation by supplying a zero limit to Special:PropertyLabelSimilarity. Attackers can send repeated requests with limit=0 to bypass the SQL LIMIT and trigger pairwise similar_text() comparisons, exhausting PHP CPU, memory, and database connections.

Semantic MediaWiki versions from 2.5.0 up to but not including 7.3.1 contain a vulnerability that allows low-privilege editors to cause uncontrolled resource consumption. By supplying a large limit parameter to the #set_recurring_event parser function without specifying an end date, attackers can generate a massive number of date subobjects. This leads to exhaustion of CPU, memory, and database resources. The issue is fixed in version 7.3.1.

Semantic MediaWiki versions from 2.5.0 up to but not including 7.3.1 have an authorization vulnerability that allows ordinary editors to permanently protect pages by adding an 'Is edit protected' annotation. This occurs when the $smwgEditProtectionRight setting is enabled, causing the EditProtectionUpdater to apply indefinite edit and move restrictions without verifying the author's permissions, effectively locking out other editors and administrators.

CVE-2026-82121 is an origin validation error vulnerability in Hitachi HiRDB Server Version 10 and certain versions of Version 9. It allows an attacker to bypass origin checks, potentially leading to unauthorized data access. The vulnerability affects multiple versions prior to 10-12-01 and specific 9.x versions. It has a high severity with a CVSS score of 7.5. A fix is available in version 10-12-01.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the category management functionality of the Phoca Download extension for Joomla versions 3.1.0 through 6.1.5. This vulnerability allows an attacker to trick an authenticated user into performing unwanted actions without their consent.

The Kirki WordPress plugin up to version 6.2.5 contains a privilege escalation vulnerability via PHP Object Injection. This occurs due to deserialization of untrusted input in an AJAX dispatcher without proper capability checks, allowing authenticated users with Subscriber-level access or higher to inject PHP objects. Exploitation can lead to overwriting an administrator's password and gaining full administrative control.

A vulnerability in virtualenv's venv creator allows attacker-controlled pathnames containing Unicode line boundary characters (e.g., U+2028) to inject additional configuration keys into the pyvenv.cfg file during readback. This can alter the 'home' path and 'include-system-site-packages' setting, potentially changing the interpreter's standard library location and weakening environment isolation. The issue affects virtualenv versions from 20.0.0b1 up to but not including 2.5.1_1. A fix is available in version 2.5.1_1.

CVE-2026-107472 is an out-of-bounds read vulnerability in the QTextCodec TSCII encoding component of the Qt 5 Compatibility APIs module. This flaw affects Qt versions from 4.0.0 up to 6.8.8 and from 6.9.0 up to 6.11.2. Applications converting text to TSCII encoding via QTextCodec may read memory beyond the input buffer, potentially causing crashes or incorrect data interpretation. The vulnerability has a medium severity score of 4.3 and does not have known exploits in the wild.

CVE-2026-111461 is an OS command injection vulnerability in the Moxa OnCell G3150A-LTE Series devices. It occurs when the SMS management functionality is enabled and configured. A remote attacker with required privileges can exploit insufficient input validation in this functionality to execute arbitrary commands on the device. The vulnerability has a high severity with a CVSS score of 7.5.

CVE-2026-105946 is an out-of-bounds read vulnerability in the QAuthenticator NTLM authentication handling within the Qt Network module. It affects applications using QNetworkAccessManager or QTcpSocket that authenticate with NTLM. A malicious server or proxy can send a crafted NTLM challenge to trigger this flaw, potentially exposing sensitive heap memory contents or causing an application crash. The vulnerability affects Qt versions from 6.8.0 up to but not including 6.8.10, and from 6.9.0 up to but not including 6.11.2. Fixed versions are 6.8.10 and 6.11.2. The CVSS 4.0 score is 5.3, indicating medium severity.

Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a device code. An authenticated remote attacker holding a restricted API key-derived session could claim an attacker-controlled device code and obtain a full read-write session valid for up to 365 days, bypassing the original token's scope and lifetime restrictions. This did not bypass two-factor authentication or directly disclose plaintext secrets.

A cross-site scripting (XSS) vulnerability exists in the chat.php file of the MD-MAFUJUL-HASAN Online-Payroll-Management-System up to commit a8902bf64575e325f6d6bf93a55f7bd273ec58cd. The vulnerability arises from manipulation of the ID argument and can be exploited remotely. The project has not yet responded to the issue report, and no fixed versions or patches are currently available. The vulnerability has a low severity score of 3.5 (CVSS 3.1).

DevilutionX versions 1.4.0 through 1.5.5 contain a heap buffer overflow vulnerability in the bundled libmpq library. The flaw occurs in the libmpq__archive_dup routine when opening specially crafted MPQ archives with a block table count exceeding the hash table count. This causes a heap overflow via memcpy during game startup, leading to a crash.

OpenPanel versions before 3.0.0 have an SQL injection vulnerability that allows authenticated users to bypass tenant scoping. This occurs because unescaped profile filter names are injected into a JOIN subquery, enabling attackers to manipulate the query and read events from all projects. The vulnerability has a CVSS score of 6.5, indicating a medium severity impact.

Parse Server versions before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 contain a vulnerability where the owning object reference in $relatedTo relation queries is not properly validated. This allows a client with read access to at least one object of the owning class to bypass owning-object ACL checks by supplying a query operator instead of an object ID, potentially disclosing which readable objects are linked to owning objects it cannot read.

A vulnerability in SourceCodester Online Food Ordering System 1.0 allows remote attackers to bypass authentication by manipulating the ID argument in the admin/delete_admin.php file. This issue can lead to unauthorized actions without requiring user interaction. The vulnerability has a medium severity rating with a CVSS score of 6.5. Public exploit code has been disclosed, but there are no known exploits in the wild. No patch or remediation information is currently available.