CVE Vulnerability Catalog

InfoScale CmdServer before version 7.4.2 mishandles access control, potentially allowing unauthorized access.

A Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force a user with an active session to click a malicious HTML link, triggering unintended modifications on the VIOM web application without the user's knowledge.

Reflected XSS vulnerability in CityPLus before version V24.29750.1.0. An attacker can inject malicious script due to improper input neutralization during page generation.

A buffer overflow vulnerability exists in the EPSON L14150 FL27PB printer's RAW Printing Service (JetDirect) on TCP port 9100. A remote attacker can exploit this to execute arbitrary code.

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

phoenix_storybook before 1.1.0 has an allocation of resources without limits vulnerability allowing unauthenticated denial-of-service via BEAM atom table exhaustion. Multiple LiveView event handlers convert user-supplied parameters to atoms without validation, and BEAM atoms are never garbage-collected, leading to permanent allocation and node abort when the atom table limit (~1,048,576 atoms) is reached.

Twig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass vulnerability when using a SourcePolicyInterface. Attackers with template rendering capabilities can pass arbitrary PHP callables to sort, filter, map, and reduce filters, bypassing sandbox restrictions and executing arbitrary code.

A heap-based buffer overflow vulnerability exists in the Channel Splitting functionality of MediaInfoLib (version 26.01). A specially crafted .riff file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

A use-after-free vulnerability due to a race condition exists in BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 through 9.20.22-S1. During SIG(0) signature validation, if the 'recursive-clients' limit is reached and the message is discarded, validation may attempt to read the discarded message. Versions 9.18.28-9.18.49 and 9.18.28-S1-9.18.49-S1 are not affected.

Multiple flaws in `named` related to handling DNS messages with non-IN classes (e.g., CHAOS, HESIOD) or meta-classes (ANY, NONE). Specially crafted requests can cause assertion failures in `named`.

Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.

A vulnerability in Windows Admin Center due to improper access control. It allows an authorized attacker to elevate privileges over a network.

The YITH WooCommerce Product Add-Ons plugin up to version 4.29.0 contains a blind SQL injection vulnerability due to improper neutralization of special elements in SQL commands.

A use-after-free vulnerability in the DNS-over-HTTPS implementation in BIND 9 versions 9.20.0-9.20.22, 9.21.0-9.21.21, and 9.20.9-S1-9.20.22-S1. Versions 9.18.x are not affected.

Vulnerability in BIND servers configured to use TKEY authentication with GSS-API tokens. Receiving crafted packets can lead to excessive memory consumption, resulting in Denial of Service.

Rsync before version 3.4.3 contains a TOCTOU race condition in daemon file handling, allowing attackers to redirect file writes outside intended directories by replacing parent directory components with symbolic links. Attackers with write access to a module path can exploit this to create or overwrite arbitrary files, potentially modifying sensitive system files and achieving privilege escalation when the daemon runs with elevated privileges. This vulnerability can only be triggered if the chroot setting is false.

A CSRF vulnerability in WISECP from Sitemio Information Technologies Trade Ltd. Co. allows Cross-Site Request Forgery attacks. The vendor did not respond to the disclosure.

An improper access control vulnerability in Mesalvo MEONA (MEONA Client and MEONA Server) allows an authenticated MEONA user to access administrative functions of the MEONA Client (admin panel). The MEONA Server does not independently verify the role asserted by the MEONA Client, enabling a user with valid credentials and a modified client to assume an administrator role.

In 389-ds-base, the get_ldapmessage_controls_ext() function does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a crafted request with hundreds of thousands of minimal controls, causing excessive CPU consumption and heap allocation.