Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), and 8.6.1.0 through 8.6.1.20 (LTS2026) contain an improper privilege management vulnerability. This flaw could allow a high privileged attacker with remote access to elevate their privileges. The vulnerability has a CVSS score of 6.7, indicating a medium severity level. No public exploits or known in-the-wild exploitation have been reported. Patch or remediation information is not provided in the available data.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), and 8.6.1.0 through 8.6.1.20 (LTS2026) contain a stack-based buffer overflow vulnerability. This flaw could be exploited by a high privileged attacker with remote access to cause a denial of service. The vulnerability does not impact confidentiality or integrity. No public exploits or known active exploitation have been reported. The CVSS v3.1 base score is 4.9 (medium severity).
Eaton easyE4 devices use a static nonce during authentication, which allows an unauthenticated attacker who can capture authentication traffic to replay valid authentication exchanges. This replay attack could lead to unauthorized access to the device.
An OS command injection vulnerability in a CoreTec product allows authenticated users with certain roles to execute arbitrary system commands. The flaw is in the configuration daemon's time synchronization handler, which unsafely concatenates user input when setting the system time-zone. This can lead to full control over the affected device. The vulnerability has a high severity score of 7.7 and requires authentication with limited privileges. No patch or remediation details are currently provided.
Eaton easySoft does not properly validate TLS certificates presented by easyE4 devices, allowing a network-adjacent attacker to potentially perform man-in-the-middle attacks. This vulnerability could enable interception or modification of communications between easySoft and easyE4 devices.
Eaton easyE4 devices implement an insufficiently strong password policy. This weakness allows an attacker who obtains password hashes, potentially via related vulnerabilities such as CVE-2026-41020, to conduct offline password-guessing attacks and possibly recover user credentials. The vulnerability is rated high severity with a CVSS score of 7.5.
A vulnerability in github.com/eclipse-keypont/crypto11/v2 versions from 2.0.0-rc3 through 2.0.0-rc8 allows an attacker to compromise the confidentiality of shared secrets. The ML-KEM key-pair lookup functions do not verify that the public key matches the private key, enabling an attacker who can open an unauthenticated session and plant a public key object with victim identifiers to receive shared secrets intended for the victim. Versions prior to 2.0.0-rc3 and after 2.0.0-rc8, as well as v1 module paths, are not affected.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), and 8.6.1.0 through 8.6.1.20 (LTS2026) contain a Server-Side Request Forgery (SSRF) vulnerability. This vulnerability allows an unauthenticated remote attacker to potentially perform SSRF attacks against the server.
The PuMuKIT application has an Unrestricted Upload of File with Dangerous Type vulnerability that allows unauthenticated users to upload any file type to the server. This upload can occur in any directory where the web server user has write permissions, potentially enabling file deletion as well. The vulnerability is rated high severity with a CVSS score of 8.8.
Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1 contain a vulnerability where the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands executed on remote agent hosts. An attacker able to modify the API response can inject shell metacharacters, causing arbitrary command execution on the agent host when the operator deploys or attaches an agent. This issue is fixed in version 3.9.2.
Eclipse ioFog Operator versions 3.8.0 up to but not including 3.9.2 disable TLS certificate verification when contacting the Controller API and logging into an external OIDC issuer. This allows an on-path attacker to present any certificate and capture sensitive credentials such as the OAuth client secret or the Controller bootstrap admin password. These credentials can then be used to supply access tokens for subsequent Controller API calls.
TRO600 has a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended only for localhost. By exploiting port forwarding, the attacker can interact with locally bound ports and services, leading to unauthorized access to sensitive functions and confidential data, as well as impacting availability.
TRO600 has an arbitrary file read vulnerability that allows an unauthenticated attacker to read or download arbitrary files on the device, including sensitive configuration and password data. This leads to disclosure of sensitive information. The vulnerability is rated high severity with a CVSS score of 8.7. No affected versions or patch information are provided.
The Advanced Views – Display Framework for Gutenberg & Elementor WordPress plugin contains a stored cross-site scripting (XSS) vulnerability in the 'comment' parameter in all versions up to and including 3.9.6. This flaw allows unauthenticated attackers to inject malicious scripts that execute whenever a user views a page containing the injected comment. The vulnerability affects even unapproved or pending comments because the plugin's comment retrieval function does not filter by approval status, enabling payload execution before comment review.
The Advanced Custom Fields: Extended (ACFE) plugin for WordPress up to version 0.9.2.6 contains an authorization bypass vulnerability. This flaw allows unauthenticated attackers to delete arbitrary media library attachments by submitting a crafted form with a numeric attachment ID, bypassing ownership and capability checks. Exploitation requires a site administrator to have configured a public-facing ACFE form with an Email action that includes a deletable attachment field bound to user input.
An unauthenticated stored cross-site scripting (XSS) vulnerability exists in the DJ-HelpfulArticles Joomla extension versions prior to 1.3.0. The vulnerability arises because the 'was this article helpful' voting widget accepts a client-supplied IP field via AJAX handlers without proper validation or output escaping. This field is stored and later rendered in the administrator backend without HTML escaping, allowing injection of malicious scripts. The lack of CSRF protection, rate limiting, and reliance on an attacker-controlled field for vote de-duplication exacerbates the risk.
The darylldoyle svg-sanitizer library versions before 1.0.0 contain vulnerabilities related to CSS injection and remote reference bypass. These flaws allow attackers to embed external resources by uploading crafted SVG files. Exploitation can involve unsanitized style content, unquoted url() values, or image href attributes, potentially leading to data exfiltration, user tracking, or visitor IP disclosure.
A reflected cross-site scripting (XSS) vulnerability exists in Kulga News Software versions from 26.7.4 up to but not including 26.10.0. This flaw is due to improper neutralization of input during web page generation, which can lead to the execution of malicious scripts in a user's browser. The vulnerability has a medium severity rating with a CVSS score of 6.1.
The svg-sanitizer library versions from 0.11.0 up to but not including 1.1.0 contain a vulnerability where submitting well-formed XML documents without a top-level svg root element causes an uncaught exception. Specifically, supplying documents with a non-svg root or nested svg element triggers a LogicException in the Sanitizer::sanitize() function, leading to crashes or bypassing upload rejection.
A denial of service vulnerability exists in svg-sanitizer versions from 0.5.3 up to but not including 1.1.0. The flaw occurs in the Sanitizer::sanitize() function, which repeatedly rescans the entire input while stripping PHP tags. This behavior allows unauthenticated attackers to craft SVG files containing many overlapping PHP tag openers and closers, causing excessive CPU usage and service disruption.