DataCap versions through 2025.1.1 have a missing authorization vulnerability that allows any authenticated user, including self-registered accounts, to escalate privileges. By sending PUT requests to the /api/v1/user/allocationRole endpoint, attackers can assign themselves the administrator role and gain full control of the instance.
CoreShop versions through 1.5.5 have an unauthenticated SQL injection vulnerability in the api/Good/GetGoodsPageList endpoint. The flaw arises from an unvalidated 'order' parameter that is appended directly to an ORDER BY clause, allowing attackers to inject subqueries. Exploitation can bypass SqlSugar's field validation and use blind SQL injection techniques to extract sensitive data such as member accounts and orders.
Orchard CMS versions 1.10.3 through 1.11 have an improper authorization vulnerability in the MediaLibraryService.CheckMediaFolderPermission() function. This flaw allows authenticated users with Author or Contributor roles to access media items belonging to other users. Exploitation enables attackers to display, clone, and delete other users' media by content ID and to delete arbitrary media folders via FolderController.Delete().
ZenTao PMS versions up to 22.6 have a missing authorization vulnerability in the doc::ajaxGetDoc() function. This flaw allows authenticated users with low privileges to bypass access checks and read private documents by enumerating document IDs. The vulnerability affects private documents and restricted libraries, products, projects, or team documents.
RuoYi-Vue-Plus versions through 6.0.0 have an authorization bypass vulnerability in the SysUserServiceImpl.selectUserListByDept function. This flaw allows authenticated users with the system:user:list permission under a department-restricted role to access user information from any department by specifying arbitrary department IDs. The exposed data includes usernames, nicknames, account status, last login IP and time, and remarks. The vulnerability has a CVSS score of 4.3, indicating medium severity.
Tencent BlueKing CMDB (bk-cmdb) versions through 3.14.6 have a missing authorization vulnerability that allows authenticated users to view hosts belonging to other businesses. This occurs because the API endpoint POST /api/v3/hosts/search/asstdetail bypasses authorization checks, enabling unauthorized access to host attributes and topology details.
Open Web Analytics versions before 1.14.1 have an authorization vulnerability that allows authenticated users with view_reports permission on one site to access report data of other sites. This occurs because clickstream and transaction reports are not properly scoped to the authorized siteId, enabling users to supply another site's session_id or order_id to view its visit history, IP addresses, user agents, and order data.
Blossom versions through 1.17.1 have an authorization bypass vulnerability that permits authenticated users with non-readonly privileges to modify other users' pictures by using arbitrary picture IDs. This allows attackers to delete images or change their star status via specific endpoints.
A missing authorization vulnerability exists in Crocoblock JetFormBuilder (jetformbuilder) up to version 3.6.7.1. This flaw allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized modification of data or functionality. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity impact primarily on integrity without affecting confidentiality or availability. No public exploits or known active exploitation have been reported. No patch or remediation information is currently available.
A missing authorization vulnerability exists in Arraytics Timetics up to version 1.0.65. This flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized modification of data or actions without proper permissions. The vulnerability has a CVSS score of 5.3, indicating a medium severity impact primarily affecting integrity without impacting confidentiality or availability.
Dell OpenManage Enterprise versions prior to 4.8.0 contain an injection vulnerability due to improper neutralization of special elements in output. This flaw could allow a high privileged attacker with adjacent network access to perform script injection. The vulnerability has a CVSS score of 6.8, indicating a medium severity impact on confidentiality, integrity, and availability.
A stored cross-site scripting (XSS) vulnerability exists in The Events Calendar plugin by Liquid Web / StellarWP, affecting versions up to 6.18.2. This vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers with limited privileges to execute scripts in the context of other users. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.
Bitcoin Core versions up to and including 31.1 have a vulnerability where undo files have no size limit, which can lead to a Denial of Service (DoS) condition.
A missing authorization vulnerability exists in Liquid Web / StellarWP The Events Calendar plugin, affecting versions up to 6.18.2. This flaw allows unauthorized access due to incorrectly configured access control security levels. The vulnerability has a medium severity rating with a CVSS score of 5.3.
Bitcoin Core versions prior to 29.5, 30.4, 31.2, and 32.1 are affected by an out-of-memory (OOM) vulnerability. This issue can cause the software to consume excessive memory, potentially leading to crashes or denial of service. No detailed exploitation or impact scenarios are provided.
CVE-2026-111487 is an out-of-bounds write vulnerability in the Qt Framework's assimp scene import plugin within the Qt3D module. This flaw could potentially lead to memory corruption when processing certain 3D scene data. The vulnerability has a medium severity rating with a CVSS score of 6.8. No affected versions or patches have been explicitly identified in the available data.
libmspack versions up to 0.11alpha have an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor. This flaw allows an attacker to craft a malicious MS-ZIP CAB file that causes the decompressor to leak up to 32 KiB of stale heap memory in the extracted output. The vulnerability arises from unchecked back-reference distances in the decompression process.
Dell OpenManage Enterprise versions prior to 4.8.0 contain an authentication bypass vulnerability that allows an unauthenticated attacker with adjacent network access to spoof authentication and potentially steal sessions.
Tcpflow versions up to 1.6.1 contain an out-of-bounds read vulnerability. This flaw allows unauthenticated attackers to read process memory by sending specially crafted IPv4 or IPv6 TCP packets with forged IP payload lengths. Exploitation can lead to leakage of adjacent memory into reconstructed flow files or cause tcpflow to crash.
Miaomiaowu versions before 0.9.3 have an insecure direct object reference (IDOR) vulnerability in the /api/user/proxy-provider-configs endpoint. This flaw allows authenticated users to access other users' proxy provider configurations by iterating the global auto-increment external_subscription_id parameter. The exposed data includes override scripts, filter rules, custom request headers, and health-check URLs. The vulnerability has a CVSS 3.1 base score of 4.3, indicating medium severity.