Archive
13 November 2026
Vulnerabilities first published on this day (UTC), newest first.
771 results · Feed
-
High 7.0
Path traversal in Zenitel turbineweb certificate delete RPC allows arbitrary file deletion as root
Path traversal in the certificate.deleteCertificate JSON-RPC method (POST /api/rpc) of the turbineweb web interface in Zenitel VSFF6, VSFF8, VSFF8MP, VSFF8MN, and VSFT devices with software versions from 10.0.3.0 before 10.1.3.0 allows authenticated administr…
-
Medium 6.9
Zenitel Connect web interface serves production JavaScript source maps without authentication
The web interface in Zenitel Connect before 1.11.0 serves production JavaScript source maps without authentication, which allows remote attackers to obtain the complete front-end source code, including API usage and internal client logic, via requests for the…
-
High 7.1
A Ruby object-document mapper does not apply its automatic field-level encryption configuration to certain fields when …
-
Medium 6.9
Zenitel Connect login allows account-lockout denial of service
The login flow in Zenitel Connect before 1.11.0 applies per-account lockout on repeated failed login attempts, which allows remote attackers to cause a denial of service (temporary lockout of targeted user accounts from the web interface, repeatable for as lo…
-
Medium 6.3
Zenitel Connect missing lockout and rate limiting on the WAMP-CRA authentication channel
Improper restriction of excessive authentication attempts in the WAMP-CRA (challenge-response) authentication path in Zenitel Connect before 1.11.0 allows remote attackers to guess user passwords via unlimited authentication attempts, because the path, in whi…
-
Medium 6.3
Refused calls drain the HTTP/2 connection flow-control window in elixir-grpc grpc_server
Missing Release of Resource after Effective Lifetime vulnerability in elixir-grpc grpc_server allows a client to stall all later calls on a shared HTTP/2 connection via calls that the server refuses while their DATA frames are in flight. The stream handler gr…
-
Medium 6.0
A flaw in the automatic client-side encryption schema generation of the Mongoid ODM may cause values that an applicatio…
-
Medium 5.1
Zenitel Connect web interface loads integration iframe without sandboxing or origin restriction
The web interface in Zenitel Connect before 1.11.0 loads an integration iframe without sandboxing or origin restrictions, which allows remote attackers to present phishing content to authenticated users via a crafted frame source.
-
High 7.2
Cudy TR3000 before 2.5.42 Root RCE via OpenVPN Configuration Import
Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows authenticated administrators to run root commands by importing a malicious OpenVPN client configuration. Attackers can include tls-verify or ipchange directives, which the in…
-
High 8.6
Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows authenticated administrators to ex…
-
High 8.6
Cudy TR3000 before 2.5.42 contains a command injection vulnerability that allows authenticated administrators to execut…
-
High 8.6
Cudy TR3000 before 2.5.42 contains a mass assignment vulnerability in the vpn.set_conf App RPC method that allows authe…
-
High 7.2
Cudy TR3000 before 2.5.42 Command Injection via Scheduled Reboot Time
Cudy TR3000 before 2.5.42 contains a command injection vulnerability that allows authenticated administrators to execute commands as root by injecting newlines into reboot_time. Attackers can submit a reboot_time value followed by a newline and crontab line, …
-
High 7.0
Cudy TR3000 before 2.5.42 contains an option injection vulnerability that allows authenticated administrators to inject…
-
High 7.0
Cudy TR3000 before 2.5.42 contains a dnsmasq configuration injection vulnerability that allows authenticated administra…
-
Medium 6.9
Zenitel Connect login allows username enumeration via verbose error responses
The login flow in Zenitel Connect before 1.11.0 returns different error responses depending on whether a submitted username exists, which allows remote attackers to enumerate valid user accounts via crafted login requests.
-
Critical 9.1
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could pot…
-
Medium 4.3
Dell PowerStore contains a content-injection vulnerability. An unauthenticated attacker could exploit this vulnerabilit…
-
Medium 6.5
In gittuf 0.10.0 through 0.15.0, when a minimum threshold global rule and a policy rule protect the same namespace, ver…
-
Low 2.3
In gittuf 0.4.0 through 0.16.0, when a policy update appears within the range of reference state log entries being veri…
-
Medium 5.5
In gittuf 0.10.0 through 0.17.0, the verification workflow does not load policy updates that are propagated from an ups…
-
Medium 5.5
In gittuf before 0.18.0, verification of file protection rules uses the quoted, escaped pathnames that Git prints by de…
-
High 7.8
X.Org Server EDID DS_RANGES Out-Of-Bounds Write
A buffer overflow in handling EDID Display-Range descriptors in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by malicious monitors to crash the x server or execute cote.
-
Low 2.3
@utcp/http before 1.1.14 contains a server-side request forgery vulnerability that allows remote manuals to reach loopb…
-
Critical 9.3
RBH Access Technologies Integra32 Security Management System 5.1.11 R5.0 contains an unauthenticated deserialization vu…
-
High 8.8
Dell PowerStore contains a SQL Injection vulnerability. An authenticated attacker could exploit this vulnerability, pot…
-
Medium 5.7
CCC Attestation SIG attested-tls-poc through commit 731ca82 TOCTOU via Handshake-Only Attestation
CCC Attestation SIG attested-tls-poc through commit 731ca82 contains a time-of-check time-of-use vulnerability because Evidence is appraised only once during the TLS handshake, without post-handshake re-attestation. Attackers with local access to the attestin…
-
High 7.1
WordPress Catna – Woo Name Your Price and Offers plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Catna – Woo Name Your Price and Offers catna-woo-name-your-price-and-offers allows Reflected XSS.This issue affects Catna – Woo Name Your Price an…
-
Critical 9.3
WordPress Alex Reservations plugin <= 2.4.8 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alejandro Alex Reservations alex-reservations allows SQL Injection.This issue affects Alex Reservations: from n/a through 2.4.8.
-
Medium 5.3
WordPress reCAPTCHA for WooCommerce plugin <= 1.4.7 - Broken Authentication vulnerability
Weak Password Recovery Mechanism for Forgotten Password vulnerability in RelyWP reCAPTCHA for WooCommerce recaptcha-woo allows Password Recovery Exploitation.This issue affects reCAPTCHA for WooCommerce: from n/a through 1.4.7.
-
High 7.5
WordPress Gmail SMTP plugin <= 1.2.3.23 - Broken Access Control vulnerability
Missing Authorization vulnerability in Noor Alam Gmail SMTP gmail-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gmail SMTP: from n/a through 1.2.3.23.
-
Medium 6.5
WordPress WP Job Portal plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad WP Job Portal wp-job-portal allows Stored XSS.This issue affects WP Job Portal: from n/a through 2.7.2.
-
Medium 5.3
WordPress Broadcast Live Video plugin <= 7.3.15 - Broken Authentication vulnerability
Weak Authentication vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Authentication Abuse.This issue affects Broadcast Live Video: from n/a through 7.3.15.
-
High 8.5
WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows Blind SQL Injection.This issue affects Newsletters: from n/a through 4.18.1.
-
Medium 6.5
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.16 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Stored XSS.This issue affects rtMedia for WordPress, BuddyPress and bbPress…
-
High 7.1
WordPress Translate and boost SEO – Automatic AI translation – wpLingua plugin <= 3.1.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpLingua Translation Service Translate and boost SEO – Automatic AI translation – wpLingua wplingua allows Stored XSS.This issue affects Translat…
-
High 8.8
WordPress Newsletters plugin <= 4.18.2 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affects Newsletters: from n/a through 4.18.2.
-
High 7.1
WordPress WP Photo Album Plus plugin <= 9.3.06.001 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob N. Breetvelt WP Photo Album Plus wp-photo-album-plus allows Reflected XSS.This issue affects WP Photo Album Plus: from n/a through 9.3.06.001.
-
Medium 6.5
WordPress Passster plugin <= 4.3.20 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20.
-
High 7.1
WordPress Custom Post Types and Custom Fields creator – WCK plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in madalin.ungureanu Custom Post Types and Custom Fields creator – WCK wck-custom-fields-and-custom-post-types-creator allows Reflected XSS.This issue affects C…