CVE Vulnerability Catalog

A vulnerability in Windows Hyper-V allows for elevation of privilege. The NVD description does not provide technical details or required user interaction.

In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-number data, as exploited in the wild in June 2024.

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user with Administrator credentials to execute arbitrary commands as root on the underlying operating system. This is due to insufficient validation of arguments passed to specific configuration CLI commands.

GeoServer versions prior to 2.22.6, 2.23.6, 2.24.4, and 2.25.2 allow unauthenticated remote code execution (RCE) through specially crafted OGC requests. The vulnerability stems from unsafely passing property names to the commons-jxpath library, which executes arbitrary code when evaluating XPath expressions. This affects all GeoServer instances, and exploitation has been confirmed via WFS, WMS, and WPS requests.

In WhatsUp Gold versions before 2023.1.3, an unauthenticated Remote Code Execution vulnerability exists. The WhatsUp.ExportUtilities.Export.GetFileWithoutZip function allows execution of commands with iisapppool\nmconsole privileges.

VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.

vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

The vulnerability is due to a logic error in the code that allows bypassing security controls. It could lead to local escalation of privilege with no additional execution privileges needed, but user interaction is required for exploitation.

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation does not require user interaction.

A vulnerability in the Windows kernel-mode driver allows elevation of privilege. This flaw can be exploited by a local attacker to gain system-level privileges.

A vulnerability in the Windows kernel allows elevation of privilege. This flaw can be exploited by a local attacker to gain higher privileges on the system.

A race condition in the Linux kernel's __dst_negative_advice() function fails to enforce proper RCU rules when clearing sk->dst_cache, potentially leading to a use-after-free (UAF). The issue primarily affects UDP sockets and requires the correct order of operations: first reset sk_dst_cache, then release the old dst.

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

A Use-After-Free vulnerability in Arm Ltd Bifrost and Valhall GPU kernel drivers allows a local non-privileged user to perform improper GPU memory operations and access already freed memory. Affects versions from r34p0 through r40p0.

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes. This could lead to execution of malicious JavaScript in the victim's browser.

SolarWinds Serv-U był podatny na lukę typu traversal katalogu, która umożliwiała dostęp do odczytu wrażliwych plików na maszynie hosta.

An unspecified SQL Injection vulnerability in the Core server of Ivanti EPM 2022 SU5 and earlier allows an unauthenticated attacker within the same network to execute arbitrary code.

Rejetto HTTP File Server up to version 2.3m is vulnerable to template injection. A remote, unauthenticated attacker can execute arbitrary commands on the system by sending a specially crafted HTTP request. Version 2.3m is no longer supported.

In Progress Telerik Report Server version 2024 Q1 (10.0.24.305) or earlier on IIS, an authentication bypass vulnerability exists. An unauthenticated attacker can gain access to restricted functionality.