CVE Vulnerability Catalog

In the Modem module, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are needed for exploitation.

In the Modem module, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are needed for exploitation.

In the vdec module, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege without needing additional execution privileges. User interaction is not required for exploitation.

In the vdec module, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege without needing additional execution privileges. User interaction is not required for exploitation.

In the Modem module, there is a possible system crash due to improper input validation. This could lead to local denial of service, but requires user execution privileges and user interaction.

An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet.

A vulnerability was found in projectworlds Online Examination System 1.0 in the Feedback Form component, in the feedback.php file. Manipulating the Name/Subject arguments leads to cross-site scripting (XSS). The attack can be launched remotely, and the exploit has been publicly disclosed.

A vulnerability was found in openagents up to version 0.8.19/0.9.3.post20 in the test_default_model function of the file sdk/src/openagents/sdk/transports/http.py. Manipulating the base_url argument results in server-side request forgery (SSRF). The attack can be initiated remotely, and the exploit has been made public.

A vulnerability was found in itsourcecode Sales and Inventory System 1.0 in the file /pages/pro_transac.php?action=add. Manipulating the Name argument leads to SQL injection. The attack can be launched remotely, and the exploit has been disclosed.

A vulnerability was found in itsourcecode Sales and Inventory System 1.0 in the file /pages/pos_transac.php?action=add. Manipulating the Customer argument leads to SQL injection. The attack can be initiated remotely, and the exploit has been published.

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0 in the file /pages/cust_transac.php?action=add. Manipulating the firstname argument results in SQL injection. The attack can be launched remotely, and the exploit is now public.

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0 in the file /pages/us_del.php?type=user. Manipulating the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit has been disclosed publicly.

A vulnerability in MojoX::Authentication for Perl before version 0.006 allows SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust anchor. An attacker can sign a response with their own certificate and authenticate any NameID.

Vulnerability in itsourcecode Sales and Inventory System 1.0. An unknown functionality in /pages/sup_del.php?type=supplier is vulnerable to SQL injection via the ID argument. The attack can be performed remotely, and the exploit is publicly available.

Vulnerability in mwiede jsch up to version 2.28.5. The getRevokedKeys function in KnownHosts.java is vulnerable to improper check for certificate revocation via the known_hosts argument. The attack can be performed remotely but has high complexity and is difficult to exploit. Upgrading to version 2.28.6 is recommended.

Vulnerability in JeecgBoot up to version 3.9.3. The exportXls function in AiragModelController.java is vulnerable to improper access controls via the credential argument. The attack can be performed remotely, and the exploit is publicly disclosed. Upgrading to version 3.9.5 is recommended.

A vulnerability has been identified in valkey-io valkey up to 9.0.5/9.1.1, involving an out-of-bounds read in the kvstoreGetHashtable function of src/kvstore.c via manipulation of the didx argument. The attack can be initiated remotely but requires cluster mode and attacker-controlled dump.rdb at startup, making exploitation difficult. The exploit has been made public, and a patch is available.

A cross-site scripting (XSS) vulnerability has been discovered in Projectworlds Online Attendance System 1.0, in the profile.php file via manipulation of the email argument. The attack can be performed remotely, and the exploit has been released publicly.

Vulnerability in SourceCodester Class and Exam Timetabling System 1.0. The mysqli_query function in /admin/modal_add_room.php is vulnerable to SQL injection via the room_name argument. The attack can be performed remotely, and the exploit is publicly available.

Vulnerability in SourceCodester Class and Exam Timetabling System 1.0. The mysqli_query function in /admin/modal_add_product.php is vulnerable to SQL injection via the fname argument. The attack can be performed remotely, and the exploit has been publicly disclosed.