What needs attention now.

Use after free in Google Chrome

• Google Chrome
• Memory corruption

Use after free in Google Chrome

• Google Chrome
• Memory corruption

Buffer overflow in Google Chrome

• Google Chrome
• Memory corruption

Heap-based buffer overflow in Google Chrome

• Google Chrome
• Memory corruption

Report Deserialization Code Execution

• Perforce Puppet Enterprise
• Code injection
• Insecure deserialization

Certificate Name Authorization Bypass

• Perforce Puppet Enterprise
• Broken access control
• CWE-697

node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions

• node-opcua
• Broken access control
• CWE-636

Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code Execution

• Hewlett Packard Enterprise (HPE) Fabric Composer

Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code Execution

• Hewlett Packard Enterprise (HPE) Fabric Composer

Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access

• Hewlett Packard Enterprise (HPE) Fabric Composer

fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator

• koxudaxi fastapi-code-generator
• Code injection
• CWE-116

fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict

• koxudaxi fastapi-code-generator
• Code injection
• CWE-116

fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring

• koxudaxi fastapi-code-generator
• Code injection
• CWE-116

Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall

• Docker Desktop
• CWE-424

Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access

• Cross-site scripting (XSS)
• Code injection

<1.0.1 · fixed in 1.0.1

Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels

• Code injection
• CWE-116

<1.0.1 · fixed in 1.0.1

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

• SonicWall Global Management System (GMS)
• CWE-636

SolarWinds Dameware Command Injection Vulnerability

• SolarWinds Dameware
• CWE-20

Ziroom ZHOME A0101 Lua zrUsb.lua loadstring code injection

• Ziroom ZHOME A0101
• Other injection
• Code injection

Ivanti Connect Secure: Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and…

• Ivanti Connect Secure
• CWE-340

FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificate

• FreeRDP
• Weak cryptography or TLS

Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures

• Eclipse Foundation Eclipse Mnestix
• Hard-coded credentials
• Server-side request forgery (SSRF)

Default Administrator Password Change Not Enforced in Axxon One Web Client

• AxxonSoft Axxon One
• CWE-1393

Privilege Escalation via Token Endpoint in WSO2 API Manager (APIM 4.x/IS as Resident Key Manager)

• WSO2 API Manager
• WSO2 API Control Plane
• Broken access control

Improper Access Control vulnerability

• Zohocorp Log360
• Zohocorp EventLog Analyzer
• Broken access control

Advanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field Type

• ACF Extended Advanced Custom Fields: Extended PRO
• Unrestricted file upload

BuddyPress XProfile Image Field <= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation Handler

• kalengi BuddyPress XProfile Custom Image Field
• Path traversal

A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write arbitrary files via uploading a crafted Zip archive.

• Path traversal

An issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS commands via uploading a file with a crafted filename to the /sync endpoint.

• Path traversal
• Command injection

s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter

• clavaque s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions
• Code injection

Authentication bypass in Secure Access Servers

• Absolute Security Secure Access

CSRF in Secure Access Server v14.60

• Absolute Security Secure Access

Double free in Google Android

• Google Android
• Memory corruption

Use after free in Google Android

• Google Android
• Memory corruption

Use after free in Google Android

• Google Android
• Memory corruption

Out-of-bounds write in Google Android

• Google Android
• Memory corruption

Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via CF7 Form Field

• themefic Ultra Addons for Contact Form 7
• Insecure deserialization

Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8

• joomlaboat.com Custom Tables extension for Joomla
• Unrestricted file upload

Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3

• dj-extensions.com DJ-Classifieds extension for Joomla
• SQL injection

Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3

• dj-extensions.com DJ-Classifieds extension for Joomla
• Unrestricted file upload

Template injection in the publishing component of awslabs Virtual Engineering Workbench

• AWS virtual-engineering-workbench
• Code injection

Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy

• SUSE Rancher
• Information disclosure

Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller

• SUSE Rancher
• Privilege escalation

python-jose through 3.5.0 Authentication Bypass via Empty HMAC Key

• mpdavis python-jose
• Weak cryptography or TLS

HotGo 2.8.4 through 2.15.1 Authentication Bypass via Client-Set SMS Verification Code

• bufanyun HotGo
• Authentication bypass

ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication Bypass

• xianhc ape-volo-admin
• CWE-1394

Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway

• Barracuda Networks Barracuda Email Security Gateway (ESG)
• Authentication bypass

@fastify/http-proxy vulnerable to prefix escape via decoded route parameters

• @fastify/http-proxy
• Path traversal
• CWE-436

Broken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative Actions

• WSO2 API Manager
• WSO2 Identity Server as Key Manager
• Broken access control

WAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injection

• WAVLINK WN551X3-A
• Command injection

WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injection

• WAVLINK WN551X3-A
• Command injection

Termix-SSH Termix transferToHost path traversal

• Termix
• Path traversal

Linksys E8450 portal.cgi strcpy stack-based overflow

• Linksys E8450
• Memory corruption

WAVLINK WN536AX6-A protocol.csp host_black os command injection

• WAVLINK WN536AX6-A
• Command injection

WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow

• WAVLINK WN536AX6-A
• Memory corruption

WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection

• WAVLINK WN536AX6-A
• Command injection

WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection

• WAVLINK WN536AX6-A
• Command injection

A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module.

• Memory corruption

WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection

• WAVLINK WN536AX6-A
• Command injection

WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection

• WAVLINK WN536AX6-A
• Command injection