CVE Vulnerability Catalog

A vulnerability in Sonatype Nexus Repository Manager allows a remote attacker to gain unauthorized access to repository operations as a targeted user. Exploitation requires enabling a format-specific API key realm (NuGet API Key, Docker Bearer Token, or npm Bearer Token) and the targeted user having an active API key.

An out-of-bounds read vulnerability in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.2 and all versions of 6.5 may allow a remote unauthenticated attacker to retrieve sensitive information via a specially crafted request.

A denial-of-service vulnerability in 1756-EN2, EN3, and ENBT communication modules stems from improper validation of CIP Implicit Connection packets. An attacker on the network can send crafted packets to continuously disrupt device connections, which recover immediately afterward.

A denial-of-service vulnerability exists in the 1719-AENTR due to improper handling of a UDP unicast network storm. This causes device overload and communication loss, requiring a power cycle to recover.

A vulnerability in Spotfire Enterprise, Spotfire Enterprise with External Consumers, and Spotfire on Kubernetes allows an attacker to perform a buffer overflow or arbitrary code execution. The issue affects multiple versions of Spotfire Server modules.

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path traversal vulnerability that allows attackers with access to the restore functionality to write files to arbitrary locations by uploading crafted JSON backup files with unvalidated keys used to construct file paths. Attackers can exploit the lack of key validation in the JSON restore process, combined with the absence of a required passphrase in the default configuration or the default passphrase 'opendoor', to write arbitrary JSON files outside the intended data directory.

The Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter names in HTTP requests. Attackers can manipulate parameters corresponding to sensitive values such as the passphrase and listening port, and can also achieve the same result through cross-site request forgery due to the absence of adequate request validation.

A CSRF vulnerability in Sustainable Irrigation Platform (SIP) through version 5.2.16 allows remote attackers to perform state-changing administrative actions by tricking a logged-in administrator into visiting a malicious page that issues HTTP GET requests without CSRF token validation or origin verification. The default configuration (no passphrase, default credential 'opendoor') exposes these endpoints to unauthenticated users.

A buffer overflow vulnerability has been discovered in aMule version 2.3.3. A remote attacker can exploit this flaw by sending a specially crafted message to the OP_SERVERMESSAGE Handler, causing the application to crash and resulting in a denial of service.

Snowflake SQLAlchemy versions prior to 1.11.0 contain multiple vulnerabilities: improper handling of column identifiers in MERGE operations allows SQL injection via attacker-controlled keys; improper literal rendering of bound parameters in CREATE TABLE queries allows SQL injection; improper forwarding of connection configuration parameters allows reading arbitrary local files and transmitting their contents to an attacker.

A stack-based buffer overflow vulnerability has been discovered in the Tenda BE12 Pro device running firmware version 16.03.66.23, specifically in the fromVirtualSer function of the /goform/VirtualSer file. An attacker can remotely manipulate the page argument, causing a buffer overflow. The exploit has been publicly disclosed and may be used.

A stack-based buffer overflow vulnerability has been discovered in Tenda BE12 Pro firmware version 16.03.66.23, specifically in the fromDhcpListClient function of the /goform/DhcpListClient file. An attacker can remotely exploit this flaw by manipulating the page argument, potentially leading to arbitrary code execution.

A stack-based buffer overflow vulnerability was found in Tenda BE12 Pro firmware version 16.03.66.23 in the fromSetIpBind function of the /goform/SetIpBind file. An attacker can remotely exploit this by manipulating the page argument, potentially leading to arbitrary code execution.

A path traversal vulnerability in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web root.

A vulnerability in FactoryTalk® Services Platform (FTSP) allows bypassing JWT signature validation during Okta Web Authentication. The application fails to verify that the JWT algorithm is set to RSA, enabling an attacker to set the algorithm to "none" and craft forged tokens.

A vulnerability in the LwM2M library of Zephyr RTOS copies the firmware-update Package URI into a fixed buffer without length validation. An attacker can write a URI of 128-254 characters, causing an out-of-bounds read of adjacent static memory, information disclosure, and potential device crash.

In Zephyr's kernel pipe implementation, the syscall verifier z_vrfy_k_pipe_init() uses K_SYSCALL_OBJ() instead of K_SYSCALL_OBJ_NEVER_INIT(), allowing an unprivileged thread to re-initialize an already-in-use pipe. Re-initialization resets buffers and wait queues without waking blocked threads, leaving them orphaned and corrupting kernel structures.

In Xtensa systems with MPU and userspace enabled, arch_buffer_validate() defaulted to 0 (access permitted), allowing validation bypass when the rounded buffer extent wraps the 32-bit address space. An unprivileged user thread could pass crafted (addr, size) to any syscall validating user buffers, gaining access to kernel or other-partition memory.

A stack-based buffer overflow vulnerability has been detected in Tenda BE12 Pro firmware version 16.03.66.23 in the fromSafeMacFilter function of the /goform/SafeMacFilter file. An attacker can remotely exploit this by manipulating the page argument, potentially leading to arbitrary code execution. The exploit has been publicly disclosed.

A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe (Siman) component. Improper validation of user-supplied data can result in an out-of-bounds write.