CERT/CC Vulnerability Notes
advisoryUScert_cc_vince
CERT Coordination Center (CMU SEI) Vulnerability Notes, multi-vendor coordinated-disclosure advisories (facts only: VU# ids, links, dates, referenced CVEs).
01
advisories (19)
Vendor and ecosystem advisories describing this.
02
CVE links (36)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-82987US | — | — | ||
There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the curre… | ||||
| CVE-2026-109619US | high8.1 | Exploit | ||
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The g… | ||||
| CVE-2026-109618US | critical9.8 | Exploit | ||
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave… | ||||
| CVE-2026-97406US | —OT elevated | — | ||
XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persiste… | ||||
| CVE-2026-16753US | —OT elevated | — | ||
Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organizat… | ||||
| CVE-2026-110005US | — | — | ||
The `periphery` agent's container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with `Execut… | ||||
| CVE-2026-104937US | — | — | ||
Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective security headers, enabling stored cross-site scripting (XSS)… | ||||
| CVE-2026-107248US | — | — | ||
Thelia 3.0.0's back-office Email/Messages feature contains a server‑side template injection (SSTI) flaw that allows any authenticated user with the “Messages” permission to supply… | ||||
| CVE-2026-103537US | — | — | ||
Thelia 2.6.1 contains an absolute path traversal vulnerability in its Smarty template handling that enables SSTI and remote code execution. The `checkTemplate()` validation restric… | ||||
| CVE-2026-103535US | — | — | ||
Thelia v2.6.1 contains path traversal and PHP code injection vulnerabilities in its translation editor that can be chained to achieve remote code execution. The `item_name` paramet… | ||||
| CVE-2026-103529US | — | — | ||
Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code. An attacker can inc… | ||||
| CVE-2026-103528US | — | — | ||
Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions. An authenticated administrator can inject malicious Smarty expressions… | ||||
| CVE-2026-103527US | — | — | ||
Thelia v2.6.0's Smarty templates (address.html and address-update.html) fail to properly escape double quotes in the “next” parameter, enabling reflected Cross‑Site Scripting (XSS)… | ||||
| CVE-2026-103526US | — | — | ||
In Thelia v2.6.0, both the administrative login and forgotten password endpoints return different responses for invalid usernames and incorrect passwords, allowing unauthenticated… | ||||
| CVE-2026-103524US | — | — | ||
Thelia v2.6.0 is vulnerable to multiple stored XSS vulnerabilities within the administrative interface. User-supplied input is stored without sufficient output encoding or sanitiza… | ||||
| CVE-2026-103523US | — | — | ||
Thelia v2.6.0 contains an open redirect vulnerability in its address creation workflow. After a user accesses a crafted URL and successfully submits the “Add New Address” form, the… | ||||
| CVE-2026-103522US | — | — | ||
In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client‑supplied MIME types. An attacker with administrative a… | ||||
| CVE-2026-103521US | — | — | ||
In Thelia v2.6.0, the document upload endpoint properly blocks the upload of executable file types, but the document update endpoint does not perform the same validation. An attack… | ||||
| CVE-2026-82989US | — | — | ||
There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints… | ||||
| CVE-2026-82988US | — | — | ||
There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK install… | ||||
showing 20 of 36