CVE Vulnerability Catalog

Improper input validation in Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege. An unauthenticated user with low complexity attack can achieve privilege escalation via adjacent access without user interaction.

The vulnerability related to improper handling of case sensitivity in LockOutRealm in Apache Tomcat may lead to unauthorized access. It affects versions from 11.0.0-M1 to 11.0.21, from 10.1.0-M1 to 10.1.54, from 9.0.0.M1 to 9.0.117, from 8.5.0 to 8.5.100, and from 7.0.0 to 7.0.109.

A vulnerability in Apache Tomcat related to the exposure of the HTTP Authentication Header to unexpected hosts during WebSocket authentication. It affects versions from 11.0.0-M1 to 11.0.21, 10.1.0-M1 to 10.1.54, 9.0.2 to 9.0.117, 8.5.24 to 8.5.100, and 7.0.83 to 7.0.109.

There is a vulnerability in Apache Tomcat related to resource allocation without limits or throttling. This affects versions from 11.0.0-M1 to 11.0.21, from 10.1.0-M1 to 10.1.54, and from 9.0.0.M1 to 9.0.117.

The superduper project up to version 0.10.0 contains a critical remote code execution vulnerability in its query parsing component. The _parse_op_part() function in query.py uses the unsafe eval() function to dynamically evaluate user-supplied query operands without proper sanitization.

The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability in the MultitaskClassifier.load() method. This method loads model weight files without enabling the security-restrictive weights_only=True parameter, allowing the deserialization of arbitrary Python objects.

The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability in the BaseLabeler.load() method. This method loads serialized labeler models using the unsafe pickle.load() function on user-supplied file paths without any validation.

The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability in the Trainer.load() method. This method loads model checkpoint files without enabling the security-restrictive weights_only=True parameter, allowing deserialization of arbitrary Python objects.

PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method calls torch.load() without setting the security-restrictive weights_only=True parameter, allowing deserialization of arbitrary Python objects.

The _load_model() function in the neural_magic_training.py script of the optimate project is vulnerable to insecure deserialization. This allows a malicious attacker to execute arbitrary code on the victim's system by providing a crafted model file.

The _load_model() function in the neural_magic_training.py script of the optimate project is vulnerable to insecure deserialization. The lack of enabling the weights_only=True security parameter when loading the state_dict.pt file allows for the deserialization of arbitrary Python objects, potentially leading to arbitrary code execution.

Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension. This issue affects Pandora FMS from versions 777 to 800.

Session Fixation vulnerability allows Session Hijacking via crafted session ID. This issue affects Pandora FMS: from 777 through 800.

The Cross-Site Request Forgery (CSRF) vulnerability allows an attacker to perform unauthorized actions via a crafted web page. This issue affects Pandora FMS versions from 777 to 800.

An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file.

SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution.

In Ivanti Endpoint Manager before version 2024 SU6, incorrect permissions assignment in the agent allows a local authenticated attacker to escalate their privileges.

Ivanti Virtual Traffic Manager before version 22.9r4 has an OS command injection vulnerability that allows a remote authenticated attacker with admin privileges to achieve remote code execution.

A race condition in Ivanti Secure Access Client before version 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM.

A vulnerability related to the initialization of a resource with an insecure default setting exists, which could lead to unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances.