CVE Vulnerability Catalog

Integer overflow in the Graphics component. The flaw was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

JIT miscompilation in the JavaScript Engine causes incorrect code execution. The vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, and Thunderbird 158 and 153.5.

JIT miscompilation in the JavaScript: WebAssembly component. The vulnerability was fixed in Firefox 158, Firefox ESR 153.5, and Thunderbird 158 and 153.5.

Incorrect boundary conditions in the JavaScript Engine component. The vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, and Thunderbird 158 and 153.5.

Incorrect boundary conditions in the JavaScript Engine component. The vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, and Thunderbird 158 and 153.5.

Sandbox escape due to uninitialized memory in the Graphics component. The vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, and Thunderbird 158 and 153.5.

An information disclosure and privilege escalation vulnerability in the Security: Process Sandboxing component. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Privilege escalation in the Application Update component. The vulnerability was fixed in Firefox 158, Firefox ESR 153.5, and Thunderbird 158 and 153.5.

A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublishTask.start of the file kafka/src/main/java/com/netflix/conductor/contribs/tasks/kafka/KafkaPublishTask.java. The manipulation of the argument kafka_request.bootStrapServers results in server-side request forgery. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

A vulnerability was found in conductor-oss conductor up to 3.32.5 in the A2AService.getAgentCard function of A2AService.java, within the Agent Card Fetching component. Manipulating the agentUrl argument allows server-side request forgery, exploitable remotely. The exploit has been publicly disclosed and may be utilized.

A SQL injection vulnerability was identified in Payload CMS. Improper neutralization of user input in the "in" and "not_in" query parameters allows an authenticated attacker to perform SQL Injection attacks. The issue was fixed in versions 3.90.0 and 4.0.0-canary.34.

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED) are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC TLS listener can cause the event-loop thread to spin at high CPU with no forward progress, resulting in denial of service.

In RUGGEDCOM CROSSBOW (all versions before V6.0), affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.

A vulnerability in RUGGEDCOM CROSSBOW (versions < V6.0) allows unauthorized access to sensitive configuration items via specific database queries. An authenticated attacker can retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.

A vulnerability in RUGGEDCOM CROSSBOW (versions < V6.0) involves lack of validation and sanitization of firmware filenames during upload. An authenticated attacker with specific privileges can execute arbitrary SQL commands on the underlying database.

A vulnerability in RUGGEDCOM CROSSBOW (versions < V6.0) is due to lack of validation and sanitization of the Value field in notification conditions during Notification Profile configuration. An authenticated attacker with specific privileges can execute arbitrary SQL commands on the underlying database.

A vulnerability in RUGGEDCOM CROSSBOW (versions < V6.0) involves lack of validation and sanitization of facility names in the Bulk Import/Export workflow. An authenticated attacker with specific privileges can execute arbitrary SQL commands on the underlying database.

A vulnerability in .NET Client Library for SIMATIC S7 Webserver API (versions < V3.3.61) is due to lack of validation of filenames received from remote servers during ticket downloads. An attacker who can manipulate the ticket response can write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.

A vulnerability in Industrial Edge App Publisher (versions < V1.27.9) is due to lack of sanitization of data received from the backend before rendering in the user interface. Because the front end is integrated with Node.js, this allows execution of arbitrary JavaScript, which can be leveraged to achieve remote code execution (RCE) on the victim's machine.

A vulnerability in Industrial Edge App Publisher (versions < V1.27.9) is due to lack of server certificate validation when initiating a TLS connection. This allows an attacker to intercept and relay communication (Man-in-the-Middle attack) and to spoof a trusted entity.