CVE Vulnerability Catalog

OS command injection vulnerability in PTZOptics PT30X-SDI/NDI-xx cameras before firmware 6.3.40. The camera does not sufficiently validate the ntp_addr configuration value, which may lead to arbitrary command execution when ntp_client is started.

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 has an insufficient authentication issue. The camera does not enforce authentication to /cgi-bin/param.cgi when requests lack an HTTP Authorization header. A remote unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configuration details, and can also update configuration values or overwrite the whole file.

Privilege escalation vulnerability in VMware vCenter Server. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.

vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet, potentially leading to remote code execution.

OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before. A remote authenticated attacker with admin privileges can obtain remote code execution.

A spoofing vulnerability in the Windows MSHTML platform.

Security feature bypass vulnerability in Microsoft Publisher. An attacker could exploit it to bypass security features and run unsafe content.

Security feature bypass vulnerability in Windows Mark of the Web. It allows an attacker to bypass security protections related to files downloaded from the internet.

Elevation of privilege vulnerability in Windows Installer. An attacker could exploit it to gain elevated privileges.

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).

A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential. This vulnerability is due to an undocumented static user credential for an administrative account.

Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz before 18.12.16.

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

In the Versa Director GUI, the 'Change Favicon' option allows a user with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin privileges to upload a malicious file with a .png extension masquerading as an image. This requires prior authentication.

The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page.

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office versions from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-click exploit in the form of a deceptive spreadsheet document.

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing.