CVE Vulnerability Catalog

A pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

Craft CMS versions 4 and 5 contain a remote code execution (RCE) vulnerability that only affects installations where the security key has already been compromised. The vulnerability has been patched in Craft 5.5.8 and 4.13.8.

Oprogramowanie do zdalnej pomocy SimpleHelp w wersji 5.5.7 i wcześniejszych pozwala użytkownikom z uprawnieniami administratora na przesyłanie dowolnych plików w dowolne miejsce w systemie plików poprzez przesłanie spreparowanego pliku zip (tzw. zip slip). Może to być wykorzystane do wykonania dowolnego kodu na hoście w kontekście użytkownika serwera SimpleHelp.

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.

Oprogramowanie do zdalnej pomocy SimpleHelp w wersji 5.5.7 i wcześniejszych ma podatność, która pozwala technikom o niskich uprawnieniach na tworzenie kluczy API z nadmiernymi uprawnieniami. Klucze te mogą być wykorzystane do eskalacji uprawnień do roli administratora serwera.

A vulnerability in Windows Hyper-V NT Kernel Integration VSP allows for elevation of privilege. Technical details are not provided in the description.

A vulnerability in Windows Hyper-V NT Kernel Integration VSP allows for elevation of privilege. Technical details are not provided in the description.

A vulnerability in Windows Hyper-V NT Kernel Integration VSP allows for elevation of privilege. Technical details are not provided in the description.

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

An authentication bypass vulnerability in FortiOS and FortiProxy using an alternate path or channel. A remote attacker can gain super-admin privileges by sending crafted requests to the Node.js websocket module.

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3. It allows a remote unauthenticated attacker to achieve remote code execution.

An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code by sending shell metacharacters to /v1/api in cloud_type or src_cloud_type.

A critical vulnerability in DrayTek Vigor2960 and Vigor300B version 1.5.1.4 in the web management interface. Manipulation of the 'session' argument in /cgi-bin/mainfunction.cgi/apmcfgupload leads to OS command injection.

In the Linux kernel, the ALSA USB-audio subsystem has a potential out-of-bounds access vulnerability for Extigy and Mbox devices. A malicious device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configuration for allocating dev->config, leading to out-of-bounds accesses.

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

In the Linux kernel, the ALSA USB-audio driver did not check the bLength of each clock descriptor while traversing them, so a device providing a bogus descriptor with a shorter bLength could cause out-of-bounds reads. The fix adds sanity checks to the clock descriptor traversal validators, including extra checks for the UAC2 and UAC3 clock selector descriptor.

Craft CMS is affected by a remote code execution vulnerability if php.ini has register_argc_argv enabled. For these users an unspecified remote code execution vector is present.