Nixpkgs security tracker

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-22514

updated 3 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months ago
@LeSuisse dismissed (not in Nixpkgs) 3 months, 4 weeks ago

WordPress Unica theme <= 1.4.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Unica unica allows PHP Local File Inclusion.This issue affects Unica: from n/a through <= 1.4.1.

References

https://patchstack.com/database/Wordpress/Theme/unica/vulnerability/wordpress-u… vdb-entry

Affected products

unica

=<<= 1.4.1

Matching in nixpkgs

pkgs.unicap

None

pkgs.libsForQt5.communicator

None

pkgs.plasma5Packages.communicator

None

pkgs.octavePackages.communications

Digital Communications, Error Correcting Codes (Channel Code), Source Code functions, Modulation and Galois Fields

nixos-unstable 11.1.0-communications-1.2.7
- nixpkgs-unstable 11.1.0-communications-1.2.7
- nixos-unstable-small 11.1.0-communications-1.2.7

pkgs.gnomeExtensions.server-communicator

Send API requests to servers or mount them at a click of a button. Copies and shows response in a dialog.

nixos-unstable 6
- nixpkgs-unstable 6
- nixos-unstable-small 6

pkgs.haskellPackages.belgian-structured-communication

parsing, rendering and manipulating the structured communication of Belgian financial transactions

nixos-unstable 0.2.0.0
- nixpkgs-unstable 0.2.0.0
- nixos-unstable-small 0.2.0.0

Package maintainers

@ravenjoad Raven Hallsby <raven@hallsby.com>
@honnip Jung seungwoo <me@honnip.page>

Untriaged

Permalink CVE-2025-62319

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 4 months, 1 week ago Activity log

Created suggestion 4 months, 1 week ago

Boolean-Based SQL Injection in Multiple Unica Components

Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions (TRUE or FALSE) into application input fields. Instead of returning database errors or visible data, the application responds differently depending on whether the injected condition evaluates to true or false. This allows an attacker to inject arbitrary SQL into backend configuration queries executed within the application.