CVE Vulnerability Catalog

The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized access. This represents a high risk to the integrity of the system.

Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations.

W oprogramowaniu konfiguracyjnym ThinkPlus zgłoszono podatność, która może pozwolić lokalnemu uwierzytelnionemu użytkownikowi na ominięcie uwierzytelniania urządzenia ThinkPlus i zarejestrowanie nieautoryzowanego odcisku palca.

Wtyczka Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin dla WordPress jest podatna na ślepą injekcję SQL poprzez parametry `order` i `append_where_sql` w wersjach do 1.6.9.9 włącznie. Problem wynika z niewystarczającego zabezpieczenia parametrów dostarczanych przez użytkownika oraz braku odpowiedniego przygotowania istniejącego zapytania SQL.

SumatraPDF to czytnik wielu formatów dla systemu Windows. W wersji 3.5.2 i wcześniejszych występuje podatność na niezaufaną ścieżkę wyszukiwania, gdy aktywowane są ustawienia zaawansowane. Aplikacja uruchamia notepad.exe bez określenia ścieżki bezwzględnej, co pozwala na wykonanie złośliwego notepad.exe umieszczonego w katalogu instalacyjnym aplikacji.

Shopware is an open commerce platform. From 6.7.0.0 to before 6.7.6.1, a regression of CVE-2023-2017 leads to an array and array crafted PHP Closure not checked being against allow list for the map(...) override. This vulnerability is fixed in 6.7.6.1.

Pimcore is an Open Source Data & Experience Management Platform. Prior to 12.3.1 and 11.5.14, an incomplete SQL injection patch in the Admin Search Find API allows an authenticated attacker to perform blind SQL injection. Although CVE-2023-30848 attempted to mitigate SQL injection by removing SQL comments (--) and catching syntax errors, the fix is insufficient. Attackers can still inject SQL payloads that do not rely on comments and infer database information via blind techniques. This vulnerability affects the admin interface and can lead to database information disclosure. This vulnerability is fixed in 12.3.1 and 11.5.14.

Rocket.Chat is an open-source, secure, fully customizable communications platform. In Rocket.Chat versions up to 6.12.0, the API endpoint GET /api/v1/oauth-apps.get is exposed to any authenticated user, regardless of their role or permissions. This endpoint returns an OAuth application, as long as the user knows its ID, including potentially sensitive fields such as client_id and client_secret. This vulnerability is fixed in 6.12.0.

NVIDIA NSIGHT Graphics dla systemu Linux zawiera podatność, która umożliwia atakującemu wstrzyknięcie poleceń. Udany atak może prowadzić do wykonania kodu, eskalacji uprawnień, manipulacji danymi oraz odmowy usługi.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to execute stored cross-site scripting through improper input validation in the Kubernetes proxy functionality.

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race in the serial channel IRP thread tracking allows a heap use‑after‑free when one thread removes an entry from serial->IrpThreads while another reads it. This vulnerability is fixed in 3.20.1.

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename. This vulnerability is fixed in 5.15.2.

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access or data manipulation.

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access or data manipulation.

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access or data manipulation.

Podatność w BLUVOYIX wynika z niewłaściwej implementacji przechowywania haseł oraz ich ujawnienia przez nieautoryzowane API. Zdalny atakujący bez autoryzacji może wykorzystać tę podatność, wysyłając specjalnie skonstruowane żądania HTTP do API użytkowników, aby uzyskać hasła w postaci niezaszyfrowanej.

Lokalny użytkownik może spowodować, że klient Harmony SASE dla systemu Windows zapisze lub usunie pliki poza zamierzonym katalogiem roboczym certyfikatów.

In the adv7842 driver in the Linux kernel, a possible out-of-bounds array access was found in the adv7842_cp_log_status() function. The cp_read() and hdmi_read() functions may return -EIO, which is then used as an array index.