CVE Vulnerability Catalog

A vulnerability in the CLI of Cisco ASA and FTD could allow an authenticated, local attacker to execute arbitrary commands on the underlying OS with root privileges. This is due to insufficient input validation of user-supplied commands.

A vulnerability in the CLI of Cisco FTD Software could allow an authenticated, local attacker to overwrite files on the file system using directory traversal techniques. This is due to insufficient validation of user input for the file path in a specific CLI command. A successful exploit could cause system instability if important system files are overwritten.

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. The vendor does not consider this a vulnerability of Unbound itself, as the script is a community contribution and not part of the Unbound installation.

Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control. The flaw may allow unauthorized access to repository resources.

A race condition in the Linux kernel SCTP sockets implementation (net/sctp/socket.c) before version 5.12-rc8. If sctp_destroy_sock is called without the addr_wq_lock, an element is removed from the auto_asconf_splist list without proper locking. This can be exploited by an attacker with network service privileges to escalate to root or by an unprivileged user if a BPF_CGROUP_INET_SOCK_CREATE is attached that blocks creation of some SCTP sockets.

AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues. This affects at least version 10.8.1 and below, but potentially later versions as well. The affected NetVanta 7060 and NetVanta 7100 appliances are End of Life and will not receive a patch.

AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issue. This affects at least version 10.8.1 and earlier, but potentially later versions as well. The affected NetVanta 7060 and NetVanta 7100 appliances are End of Life and will not receive a patch.

The jose library, used for cryptographic operations, has a vulnerability in the AES_CBC_HMAC_SHA2 algorithm that allows the use of a padding oracle to decrypt data without knowing the key. Observable timing differences during padding errors can enable an attacker to exploit this vulnerability.

Apache Commons IO before version 2.7 has a limited path traversal vulnerability in the FileNameUtils.normalize method. When invoked with an improper input string like "//../foo" or "\\..\foo", the result is the same value, potentially providing access to files in the parent directory, but not further above.

Froala Editor 3.2.6 is vulnerable to persistent XSS. A crafted base64 string in the hyperlink creation module allows injection of malicious scripts.

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.

An arbitrary file write vulnerability in vRealize Operations Manager API prior to 8.4 allows an authenticated malicious actor with network access to write files to arbitrary locations on the underlying Photon OS.

SeedDMS 5.1.x is affected by a cross-site request forgery (CSRF) vulnerability in out.EditFolder.php. An attacker can exploit this flaw to perform unauthorized actions on behalf of an authenticated user.