CVE Vulnerability Catalog

Vulnerability in Cisco Crosswork related to external control of file system (CWE-73). Discovered during internal security review, fixed in hardening release.

Vulnerability in Cisco Crosswork due to missing authentication for critical functions (CWE-306). Discovered during internal security review, fixed in hardening release.

Vulnerability in Cisco Secure Workload related to improper input validation (CWE-20). Discovered during internal security review, fixed in hardening release.

Vulnerability in Cisco Secure Workload related to improper authentication (CWE-287). Discovered during internal security review, fixed in hardening release.

Vulnerability in Cisco Secure Workload related to improper access control (CWE-284). Discovered during internal security review, fixed in hardening release.

Vulnerability in Cisco Secure Workload related to improper neutralization of special elements (CWE-74). Discovered during internal security review, fixed in hardening release.

Vulnerability in Cisco Crosswork related to improper neutralization of special elements used in a SQL command (CWE-89), i.e., SQL injection. Discovered during internal security review, fixed in hardening release.

Vulnerability in Grav API Plugin (plugin for Grav CMS) before version 1.0.6. WebhookController.php accepts webhook URLs after only FILTER_VALIDATE_URL syntax validation, and WebhookDispatcher.php initializes cURL without CURLOPT_PROTOCOLS or CURLOPT_REDIR_PROTOCOLS restrictions. An account with api.webhooks.write can submit file, dict, gopher, private-network, or link-local targets, retrieve local files and delivery response bodies, and pivot requests to internal services or cloud metadata endpoints. Fixed in version 1.0.6.

SQL injection vulnerability in Joomla extension J-BusinessDirectory (cmsjunkie.com) before version 6.2.3. In trips search, search keywords and ORDER BY were concatenated into SQL. Version 6.2.3 quotes keywords and allow-lists the sort clause.

The J-BusinessDirectory extension for Joomla before version 6.2.3 contains a vulnerability allowing arbitrary file upload/deletion via path traversal. The _path_type parameter can point to component site/admin trees, and the extension check is weak. CSRF token is also missing on upload/remove.

Cudy WR3000 2.0 with firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret in the Mosquitto MQTT broker's authentication plugin. An unauthenticated attacker can extract the secret from the firmware image and forge valid JWT tokens, gaining unauthorized access to the device's mesh networking interface.

Ground Station before version 0.4.13 contains a vulnerability in the unauthenticated save-waterfall-snapshot Socket.IO command. An attacker can control the snapshotName input, allowing file writes outside the data directory via path traversal. It is possible to write a YAML logging configuration file that, during service restart, executes arbitrary code (RCE) with service privileges.

Formie, a Craft CMS plugin for creating forms, before version 3.1.27 passes request-derived Hidden field defaults (e.g., User Agent, URL, query parameters) to Craft's Twig rendering layer. An unauthenticated attacker can place Twig syntax in these values, leading to server-side template evaluation (SSTI), potentially resulting in information disclosure, application state modification, or remote code execution.

SSHFS before version 3.7.6 contains a vulnerability where a rogue SFTP server can return arbitrary symlink targets (absolute or with parent-directory components). SSHFS passes them to the kernel via FUSE, and the transform_symlinks mitigation does not block relative paths. A victim or tool (e.g., cp, rsync, editor) following such a link can disclose local files to the server or write server-controlled content to local files.

MyBooks (Talebook) in version 3.41.2 and earlier contains a vulnerability in the handling of SOCIAL_AUTH key names in the AdminSettings.post handler. These names are concatenated without proper escaping into the auto.py file, allowing an administrator to inject arbitrary Python code. The code is executed during module import, enabling command execution with service privileges.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to improper authentication.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file.

stigmem-node contains an insecure default configuration that allows federation traffic to traverse networks without mTLS protection when non-loopback endpoints are enabled. Operators who explicitly disabled mTLS while binding federation to non-loopback addresses expose federation traffic to cleartext interception and man-in-the-middle attacks.