What needs attention now.

RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification

• ransomlook
• Broken access control

phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache

• phpipam
• CWE-706

Remote Code Execution

• Zscaler Client Connector
• CWE-20

Authentication bypass between ZCC and client connector portal

• Zscaler Client Connector
• Authentication bypass

RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Data

• ransomlook
• Broken access control

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Sin…

• miniorange.com miniOrange OAuth Client (free) extension for Joomla
• miniorange.com OAuth Single Sign-On – OIDC SSO | Login with Azure AD (free) extension for Joomla
• Broken access control

RansomLook Unauthenticated Database Export Exposes Private Data

• ransomlook
• Broken access control

IDOR and missing authorization in Prospero Flow CRM supplier API allows cross-tenant read and modification

• Roskus Prospero Flow CRM
• Broken access control

WordPress FreightCo theme <= 1.1.15 - PHP Object Injection vulnerability

• Theme-Rex FreightCo
• Insecure deserialization

WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerability

• MVPThemes Jawn
• Privilege escalation

WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability

• WPCafe WP Cafe Pro
• File inclusion

WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerability

• RedefiningTheWeb Affiliate Pro - Affiliate Program for WooCommerce & WordPress
• Privilege escalation

WordPress Woo Essential plugin <= 4.3.0 - SQL Injection vulnerability

• DiviNext Woo Essential
• SQL injection

WordPress Digits plugin <= 9.2 - Privilege Escalation vulnerability

• UnitedOver, LLC Digits
• Privilege escalation

Instance template path traversal allows arbitrary host file write as root

• Canonical LXD
• Path traversal

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5

• joomlack.fr Page Builder CK extension for Joomla
• SQL injection

DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory

• DJI Neo
• DJI Neo 2
• Hard-coded credentials

4MOSAn Security Technology｜4MOSAn GCB Doctor - OS Command Injection

• 4MOSAn Security Technology 4MOSAn GCB Doctor
• Command injection

UTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy stack-based overflow

• UTT HiPER 1250GW
• Memory corruption

EFM ipTIME T24000M Session Validation httpcon_check_session_url improper authentication

• EFM ipTIME T24000M
• Authentication bypass

EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication

• EFM ipTIME T16000M
• Authentication bypass

exceljs through 4.4.0 Prototype Pollution via deepMerge Reached From Note Serialization

• exceljs
• Prototype pollution

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

• Code injection

DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float

• Memory corruption

Untrusted Search Path in StackGres

• OnGres StackGres
• CWE-426

RestrictMate < 1.3.0 - Unauthenticated Privilege Escalation to Administrator

• RestrictMate
• Privilege escalation

Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow

• Comfast CF-N1-S
• Memory corruption

NFS: Pin the 'struct nfs_server' during a FREE_STATEID call

• Linux kernel

ovpn: skip rehash for peers already removed from by_id

• Linux kernel

btrfs: lzo: reject inline extents without valid headers

• Linux kernel

vdpa/mlx5: Fix buffer length in create_direct_keys()

• Linux kernel

udp: fix potential use-after-free in tunnel segmentation

• Linux kernel

sctp: clear control chunk transport if it is being removed

• Linux kernel

ipvs: clear IPv4 options after rebasing tunnel ICMP errors

• Linux kernel

net: fix skb length accounting after generic XDP frag adjustment

• Linux kernel

inet: frags: publish queues before arming timer

• Linux kernel

net/x25: fix use-after-free of the socket by its timers

• Linux kernel

dibs: initialise dibs->lock in dibs_dev_alloc()

• Linux kernel

xdp: reject clones that overrun skb_shared_info tailroom

• Linux kernel

veth: fix skb length accounting after XDP frag adjustment

• Linux kernel

tls: rx: restore msg_iter before TLS 1.3 optimistic retry

• Linux kernel

smb: client: Fix use-after-free in cifs_try_adding_channels()

• Linux kernel

ip6_tunnel: clear skb2->cb[] in ip6ip6_err()

• Linux kernel

mm/filemap: __filemap_add_folio() restore index before retrying

• Linux kernel

sctp: keep chunk->transport in step with the list it is queued on

• Linux kernel

sctp: fix use-after-free of cached ASCONF chunk

• Linux kernel

sctp: clear new_transport when removing a peer

• Linux kernel

WS Form LITE <= 1.10.80 - Unauthenticated PHP Object Injection via Form Submission

• westguard WS Form LITE – Drag & Drop Contact Form Builder
• Insecure deserialization

Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2

• fabrikar.com Fabrik extension for Joomla
• Path traversal

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2

• fabrikar.com Fabrik extension for Joomla
• SQL injection

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2

• fabrikar.com Fabrik extension for Joomla
• SQL injection

Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2

• fabrikar.com Fabrik extension for Joomla
• Code injection

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2

• fabrikar.com Fabrik extension for Joomla
• Code injection

Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2

• fabrikar.com Fabrik extension for Joomla
• Code injection

Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2

• fabrikar.com Fabrik extension for Joomla
• Broken access control

Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them

• Broken access control

Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret

• CWE-1394

TRENDnet TEW-821DAP NTP Timezone Configuration apply_time.cgi uci_safe_get stack-based overflow

• TRENDnet TEW-821DAP
• Memory corruption

Mailgun for WordPress <= 2.2.0 - Unauthenticated Server-Side Request Forgery (SSRF) via 'addresses' Array Keys

• Mailgun for WordPress
• Server-side request forgery (SSRF)

Missing Authorization in Application Integration QueryEngineTask

• Google Cloud Application Integration
• Broken access control