CVE Vulnerability Catalog

Vulnerability in Cisco ISE allows an unauthenticated, remote attacker to perform SQL injection attacks on an affected device. This is due to improper validation of user-supplied input.

Insufficient validation of user-supplied parameters in API requests in Cisco Identity Services Engine (ISE) allows an authenticated remote attacker to view sensitive information. Exploitation requires valid administrative credentials, and the data obtained may include hashed credentials.

Vulnerability in the EIGRP implementation in Cisco Secure Firewall ASA and FTD Software allows an unauthenticated, adjacent attacker to cause an unexpected device reload, resulting in a DoS condition. This is due to improper resource management when handling EIGRP update messages.

Vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall ASA and FTD Software allows an unauthenticated, remote attacker to cause high CPU utilization, resulting in a DoS condition. This is due to improper rate limiting for syslog message 419002.

A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software is caused by improper buffer management during TLS 1.3 connection handling. An unauthenticated remote attacker can send a crafted TLS 1.3 packet through a TLS 1.3-enabled listening socket, causing the LINA process to crash and the device to reload unexpectedly (DoS).

A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software. It is due to a logic error in populating group access control policies (ACPs) with OGS configured. An unauthenticated, remote attacker could send traffic that should be blocked and bypass configured access controls.

A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software. It is due to a logic error in populating group access control policies (ACPs) with OGS configured. An unauthenticated, remote attacker could send traffic that should be blocked and bypass configured access controls.

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from network users outside the security group the attacker is assigned to. It exists because certain files lack proper authorization enforcement. An attacker with administrative privileges and management rights over network users could export users and view passwords normally not visible to administrators.

A vulnerability in the SSID BYOD onboarding workflow of Cisco ISE is caused by insufficient authentication checks performed while a user is being onboarded. An unauthenticated, adjacent attacker can spoof the legitimate user and trigger a redirection to the guest web portal, hijacking the onboarding session.

MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage. An attacker with physical access to the device can extract this material from an SPI flash dump without authenticating and without knowing the administrative password.

DD-WRT firmware deployed on TP-Link TL-WR740N v1 through v4 hardware stores sensitive authentication credentials in cleartext within non-volatile memory. Exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials, and administrative passwords, which can be extracted from an SPI flash dump with physical access to the device.

A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0. The script accepts an attacker-controlled URL parameter and passes it to curl_setopt(CURLOPT_URL) without host or scheme validation, allowing an unauthenticated remote attacker to make arbitrary HTTP and HTTPS requests from the server to internal networks or cloud metadata services.

A server-side request forgery (SSRF) vulnerability exists in the UnifiedLogin service of Altium Enterprise Server. An unauthenticated network attacker can cause the server to issue outbound HTTP requests to a destination of the attacker's choosing, including internal services reachable only from the server. One such internal service exposes configuration and credential material without authentication, relying on local origin, which is satisfied by forged requests.

A flaw has been found in itsourcecode Leave Management System 1.0 affecting an unknown function of the file /module/leave/index.php. Manipulation of the ID argument leads to SQL injection. The attack may be launched remotely, and the exploit has been published and may be used.

A weakness has been identified in GPAC 26.08-DEV affecting the function wait_for_header_and_parse of the file src/utils/downloader.c. Manipulation of the Content-Range argument causes an out-of-bounds read. The attack requires local access, and the exploit has been made publicly available and could be used for attacks. Upgrading to version abi-16.26 fixes this issue (patch name: c74a3065038ede35c1c7b75fa493a69ef6bcdb84).

A security flaw was discovered in GPAC 26.08-DEV affecting the function gf_inline_get_proto_lib in src/compositor/mpeg4_inline.c (Proto Link Handler component). The manipulation results in a use-after-free condition, and the attack requires local access. The exploit has been publicly released and may be used for attacks.

HP has identified potential security vulnerabilities in HP Advance software that, under certain conditions, may enable privilege escalation, remote code execution, or arbitrary file write. The issue impacts the HP Advance server hosting the software.

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions. These vulnerabilities impact the HP Advance server hosting the software.

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions. These vulnerabilities impact the HP Advance server hosting the software.

kkFileView 4.2.0 and later is vulnerable to Server-Side Request Forgery in the /getCorsFile endpoint. The TrustHostFilter validates the first non-empty parameter in a fixed priority order, while the controller only reads and fetches urlPath, allowing bypass of the trust.host whitelist by supplying both urlPath (real target) and url (whitelisted decoy), with the response body echoed back to the attacker.