CVE Vulnerability Catalog

In SIMATIC CN 4100 (all versions < V4.0.1), the application exhibits inconsistent SNMP behavior, such as unexpected service availability and unreliable configuration handling across protocol versions. This could allow an attacker to access sensitive data.

In the SIMATIC CN 4100 device (all versions below V4.0.1), the USB port allows unauthenticated connections. An attacker with physical access can trigger a reboot causing a denial of service condition.

Multiple RUGGEDCOM devices (RMC8388, RS416Pv2, RS416v2, RS900, RS900G, RSG2100, RSG2100P, RSG2288, RSG2300, RSG2300P, RSG2488, RSG907R, RSG908C, RSG909R, RSG910C, RSG920P, RSL910, RST2228, RST2228P, RST916C, RST916P) in V5.X versions prior to V5.10.1 do not properly validate input during the TLS certificate upload process of the web service. An authenticated remote attacker could trigger a device crash and reboot, leading to a temporary Denial of Service.

In SINEC Security Monitor (all versions < V4.10.0), there is a lack of input validation of the date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause a denial of service condition of the report functionality.

Vulnerability in SINEC Security Monitor (versions < V4.10.0) due to missing proper authorization checks for the file_transfer feature in ssmctl-client command. Allows an authenticated low-privileged local attacker to read or write any file on server or sensor.

In SINEMA Remote Connect Server (versions < V3.2 SP4), the application does not properly validate license restrictions against the database, allowing direct modification of the system_ticketinfo table to bypass license limitations without proper enforcement checks. Someone with database access could circumvent licensing restrictions by directly modifying database values and potentially enabling unauthorized use beyond the permitted scope.

Gridscale X Prepay (all versions < V4.2.1) is vulnerable to capture-replay of authentication tokens. This could allow an authenticated but already locked-out user to establish still valid user sessions.

A vulnerability in Gridscale X Prepay (versions before 4.2.1) allows user enumeration through distinguishable responses. A remote unauthenticated attacker can determine if a user is valid, enabling brute force attacks.

MongoDB Server has a post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions, which may lead to logical data inconsistencies under specific conditions. This can cause the transaction coordination logic to misinterpret the transaction as committed, resulting in inconsistent state on those shards, impacting integrity and availability.

Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

A vulnerability was determined in Tenda AC9 15.03.05.14_multi. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/DownloadCfg.jpg of the Configuration File Handler component. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

The ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to and including 4.16.7 due to insufficient input sanitization on the `type` parameter in the form preview functionality. Authenticated attackers with Subscriber-level access and above can execute arbitrary shortcodes via the `pp_preview_form` endpoint.

The CSV to SortTable WordPress plugin through version 4.2 does not validate some shortcode attributes before using them to generate paths passed to include functions, allowing authenticated users such as contributors to perform LFI attacks.

The WPeMatico RSS Feed Fetcher WordPress plugin before version 2.8.13 does not sanitize and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks.

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via the 'get_attachment_sizes' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the path and meta data of private attachments, which can be used to view the attachments.

Podatność CVE-2025-10876 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w oprogramowaniu Talent Software e-BAP Automation, co umożliwia ataki typu Cross-Site Scripting (XSS). Problem ten dotyczy wersji e-BAP Automation od 1.8.96 do przed v.41815.

EDK2 contains a vulnerability in BIOS where an attacker may cause 'Exposure of Sensitive Information to an Unauthorized Actor' by local access. Successful exploitation may lead to information disclosure or privilege escalation and impact confidentiality.

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are subject to an XSS vulnerability through the ui.interactive_image component, which renders SVG content using Vue's v-html directive without any sanitization. An attacker can inject malicious HTML or JavaScript via the SVG <foreignObject> tag whenever the image component is rendered or updated.

Astro is a web framework. Versions 5.15.7 and below have a double URL encoding bypass which allows any unauthenticated attacker to bypass path-based authentication checks in Astro middleware, granting unauthorized access to protected routes. While the original CVE-2025-64765 was fixed in v5.15.8, the fix is insufficient as it only decodes once, so attackers can still bypass authentication using double-encoded URLs.

Vulnerability in Tuleap (Community Edition before 17.0.99.1763803709 and Enterprise Edition before 17.0-4 and 16.13-9) due to missing CSRF protections in tracker field dependencies, allowing attackers to modify tracker fields.