CVE Vulnerability Catalog

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild.

Vulnerability in Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration) affects versions 12.2.3-12.2.14. It is easily exploitable by an unauthenticated attacker with network access via HTTP, potentially leading to full takeover of Oracle Concurrent Processing. CVSS score 9.8.

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

A vulnerability in the VPN web server of Cisco Secure Firewall ASA and FTD Software allows an unauthenticated, remote attacker to access restricted URL endpoints related to remote access VPN that should be inaccessible without authentication. The issue is due to improper validation of user-supplied input in HTTP(S) requests. A successful exploit could allow access to a restricted URL without authentication.

A vulnerability in the VPN web server of Cisco Secure Firewall ASA and FTD Software allows an authenticated, remote attacker to execute arbitrary code on the device. The issue is due to improper validation of user-supplied input in HTTP(S) requests. A successful exploit could allow the attacker to execute code as root, potentially leading to full device compromise.

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition, and an authenticated, remote attacker with high privileges to execute code as the root user. The vulnerability is due to a stack overflow condition in the SNMP subsystem and affects all versions of SNMP.

A type confusion vulnerability in the V8 engine in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The issue is rated as high severity.

SolarWinds Web Help Desk jest podatny na nieautoryzowaną deserializację AjaxProxy, co może prowadzić do zdalnego wykonania kodu. W przypadku wykorzystania tej podatności, atakujący może uruchomić polecenia na maszynie gospodarza. Jest to obejście poprawek dla CVE-2024-28988, które z kolei jest obejściem dla CVE-2024-28986.

Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. Fixes are available for versions 5.0.31, 5.1.20, 5.2.31, 5.4.8, and 5.5.7.

CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known.

A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.

Out-of-bounds write vulnerability in the iked process of WatchGuard Fireware OS. A remote unauthenticated attacker can execute arbitrary code. Affects mobile user VPN with IKEv2 and branch office VPN using IKEv2 when configured with a dynamic gateway peer. If configurations were deleted but a branch office VPN to a static peer remains, the device may still be vulnerable.

Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. The vulnerability affects image processing within this library.

Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. The vulnerability affects image processing within this library.

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, significantly impacting confidentiality and integrity.

In the Linux kernel TLS, handling of zero-length records on the rx_list is flawed. When the initial record comes from rx_list and is zero-length, it can break processing logic as zero-length records should not be zero-copied.

In multiple locations, there is a possible way to escape the Chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed and no user interaction required for exploitation.

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection. This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.

An authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9. This issue affects Archer C7(EU) V2 before 241108 and TL-WR841N/ND(MS) V9 before 241108, and both products have reached end-of-life (EOL) status.

Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, and WhatsApp for Mac v2.25.21.78 could have allowed an unrelated user to trigger processing of content from an arbitrary URL on a target's device. This vulnerability, combined with an OS-level vulnerability on Apple platforms (CVE-2025-43300), may have been exploited in a sophisticated attack against specific targeted users.