CVE Vulnerability Catalog

The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges.

In MISP before version 2.4.193, the menu_custom_right_link_html parameters can be set via the UI, allowing attackers with admin privileges to conduct XSS attacks on every page.

In MISP before version 2.4.193, the menu_custom_right_link parameters can be set via the UI, allowing attackers with admin privileges to conduct XSS attacks through a global menu link.

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API.

In the Linux kernel, an issue was found in the f2fs filesystem where locks are not initialized before use. The f2fs_fill_super() function calls spin_lock on an uninitialized lock, causing a lockdep warning. The fix moves lock and structure initialization to immediately after memory allocation.

A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.

A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.

A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.

A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.

A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.

A flaw was found in Keycloak where JWT tokens used for authentication are cached until expiration. If a client uses JWT tokens with excessively long expiration times (e.g., 24 or 48 hours), the cache can grow indefinitely, leading to an OutOfMemoryError.

Mbed TLS w wersjach przed 2.28.10 oraz 3.x przed 3.6.3 w niektórych przypadkach nieudanej alokacji pamięci lub błędów sprzętowych wykorzystuje niezainicjowaną pamięć stosu do tworzenia wiadomości TLS Finished, co może prowadzić do obejścia uwierzytelnienia, takiego jak ataki powtórzeniowe.

Mbed TLS w wersjach przed 2.28.10 oraz 3.x przed 3.6.3 na stronie klienta akceptuje serwery z zaufanymi certyfikatami dla dowolnych nazw hostów, chyba że aplikacja kliencka TLS wywoła funkcję mbedtls_ssl_set_hostname.

A stack overflow vulnerability was discovered in the Tenda W18E v2.0 running firmware v16.01.0.11, specifically in the wifiSSID parameter at the /goform/setModules endpoint. Attackers can cause a Denial of Service (DoS) by sending a crafted POST request.

Podatność CVE-2025-1496 w BG-TEK Coslat Hotspot umożliwia przeprowadzenie ataku typu brute force na hasła oraz nadużycie uwierzytelnienia. Problem dotyczy wersji przed 6.26.0.R.20250227.

A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.go#L112. Because of this unsafe filepath construction, an authenticated user can manipulate the path to retrieve any JSON files on the console's pod by using sequences of ../ and valid directory paths.

W podatności CVE-2024-12136 w urządzeniu Elfatek Elektronics ANKA JPD-00028, przed wersją V.01.01, występuje brak krytycznego kroku w procesie uwierzytelniania, co umożliwia ominięcie uwierzytelnienia.

A flaw in the 389-ds-base LDAP Server occurs when the return value of a function is not checked during a Modify DN operation, leading to a NULL pointer dereference. A privileged user performing a MODDN operation after a failed operation can cause a Denial of Service (DoS) or system crash.

In Keylime 7.12.0, strict type checking prevents the registrar from reading database entries created by older versions (e.g., 7.11.0). Older versions store agent registration data as bytes, while the updated registrar expects str. This causes an exception when processing agent registration requests, making the agent fail.

A vulnerability in the SoundCloud iOS application version 7.65.2 allows a local attacker to escalate privileges and obtain sensitive information through the session handling component.