CVE Vulnerability Catalog

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0, including packages react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafely deserializes payloads from HTTP requests to Server Function endpoints.

Ray is an AI compute engine. Prior to version 2.52.0, developers using Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This is due to insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with 'Mozilla'. This defense is insufficient because the fetch specification allows modifying the User-Agent header. Combined with DNS rebinding, the vulnerability is exploitable against a developer who inadvertently visits a malicious website or sees a malicious ad. Patched in version 2.52.0.

GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity (XXE) vulnerability was identified. The application accepts XML input through a specific endpoint /geoserver/wms operation GetMap. However, this input is not sufficiently sanitized or restricted, allowing an attacker to define external entities within the XML request. This issue has been patched in GeoServer 2.25.6, GeoServer 2.26.3, and GeoServer 2.27.0.

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.

A type confusion vulnerability in the V8 engine of Google Chrome prior to version 142.0.7444.175 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. The issue is rated as High severity by the Chromium security team.

A relative path traversal vulnerability in Fortinet FortiWeb versions 8.0.0-8.0.1, 7.6.0-7.6.4, 7.4.0-7.4.9, 7.2.0-7.2.11, and 7.0.0-7.0.11 may allow an attacker to execute administrative commands via crafted HTTP or HTTPS requests.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

Nieprawidłowe rozwiązywanie linków przed dostępem do pliku ('śledzenie linków') w procesie hosta dla zadań systemu Windows umożliwia autoryzowanemu atakującemu lokalne podniesienie uprawnień.

Triofox versions prior to 16.7.10368.56560 are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete.

The Endpoint Manager module in FreePBX, in versions 17.0.2.36 and above before 17.0.3, is vulnerable to post-authentication command injection by an authenticated known user. An attacker can leverage this vulnerability to gain remote access to the system as an asterisk user.

Wykryto problem typu use-after-free, który został rozwiązany poprzez poprawę zarządzania pamięcią. Problem ten został naprawiony w macOS Ventura 13.5, iOS 16.6, iPadOS 16.6, Safari 16.6, iOS 15.8.7 oraz iPadOS 15.8.7.

Serwer deweloperski Metro, uruchamiany przez CLI społeczności React Native, domyślnie wiąże się z interfejsami zewnętrznymi. Serwer udostępnia punkt końcowy, który jest podatny na wstrzykiwanie poleceń systemowych.

Vulnerability in Oracle Fusion Middleware Identity Manager (component: REST WebServices) in versions 12.2.1.4.0 and 14.1.2.1.0 allows an unauthenticated attacker with network access via HTTP to compromise Identity Manager.

Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.

Podatność CVE-2025-53521 dotyczy systemu BIG-IP APM, gdzie skonfigurowana polityka dostępu na serwerze wirtualnym może być wykorzystana przez złośliwy ruch do zdalnego wykonania kodu (RCE).

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. The flaw concerns the access control mechanism within this Windows component.

Microsoft is aware of vulnerabilities in the third-party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of the ltmdm64.sys driver, which has been removed in the October cumulative update, and fax modem hardware dependent on this driver will no longer work on Windows.

A vulnerability in the Linux kernel's af_alg mechanism allowed concurrent writes to the same af_alg socket, causing unpredictable data interleaving and potential inconsistencies in internal socket state.

Vulnerability in Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI) affects versions 12.2.3-12.2.14. It is easily exploitable by an unauthenticated attacker with network access via HTTP, potentially resulting in unauthorized access to critical data or complete access to all Oracle Configurator data. CVSS 3.1 Base Score is 7.5 (Confidentiality impact).