CVE Vulnerability Catalog

A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes.

SAP Cloud Appliance Library Appliances allows an attacker with high privileges to leverage an insecure S/4HANA default profile setting in existing SAP CAL appliances to gain access to other appliances. The impact on confidentiality is low, while integrity and availability are not impacted.

WeGIA prior to version 3.5.1 has a Reflected Cross-Site Scripting (XSS) vulnerability in the /html/atendido/cadastro_atendido_parentesco_pessoa_nova.php endpoint, allowing attackers to inject malicious scripts in the idatendido parameter. This vulnerability is fixed in 3.5.1.

In Mastodon before 4.4.6, 4.3.14, and 4.2.27, when an administrator resets a user account's password via the command-line interface using `bin/tootctl accounts modify --reset-password`, active sessions and access tokens for that account are not revoked. This allows an attacker with access to a previously compromised session or token to continue using the account after the password reset. The issue is patched in 4.2.27, 4.3.14, and 4.4.6; no known workarounds exist.

Mattermost Desktop App versions <= 5.13.0 fail to validate URLs external to the configured Mattermost servers. An attacker on a server the user has configured can send a malformed URL, causing the user's application to crash.

HCL Unica MaxAI Workbench is vulnerable to improper input validation. This allows attackers to exploit vulnerabilities such as SQL Injection, XSS, or command injection, leading to unauthorized access or data breaches, etc.

Tomofun Furbo 360 and Furbo Mini devices use a weak hash in the /etc/shadow file (Password Handler component). The attack requires physical access to the device and is highly complex. The exploit has been publicly disclosed and the vendor did not respond. Affected firmware versions are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074.

A flaw has been found in Tomofun Furbo 360 and Furbo Mini affecting the GATT Service component. Manipulation of the DeviceToken argument causes information disclosure. The attack is only possible within the local network, requires high complexity, and is assessed as difficult to exploit. Affected firmware versions are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074.

A security vulnerability was detected in Tomofun Furbo Mobile App up to 7.57.0a on Android in the Authentication Token Handler component. The manipulation leads to insecure storage of sensitive information. The attack can be launched on the physical device. The exploit has been disclosed publicly and may be used.

A weakness was identified in Tomofun Furbo 360 and Furbo Mini in the UART Interface leading to insecure storage of sensitive information. The attack requires physical access and is highly complex; affected firmware includes Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074.

Hard-coded credentials were discovered in Tomofun Furbo 360 and Furbo Mini in /squashfs-root/furbo_img within the MQTT Client Certificate component. The attack may be initiated remotely but is highly complex; affected firmware includes Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074.

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini in an unknown function of the Trial Restriction Handler component. The manipulation causes improper access controls. The attack requires physical access to the device and is considered highly complex. Affected firmware versions are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074.

Tomofun Furbo 360 and Furbo Mini contain a vulnerability in the Bluetooth Low Energy component resulting in cleartext transmission of sensitive information. The attack requires local network access and is highly complex. Affected firmware versions are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074.

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini in the collect_logs.sh file of the Debug Log S3 Bucket Handler component. Manipulation leads to insecure storage of sensitive information. The attack requires local access, and affected firmware versions are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074.

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users due to client-side enforcement of server-side security.

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security.

A security flaw was discovered in Tomofun Furbo 360 and Furbo Mini in an unknown part of the UART Interface. The manipulation results in information disclosure. The attack requires physical access to the device, and the exploit has been publicly released. Affected firmware versions are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074.

In Tomofun Furbo 360 and Furbo Mini devices, the upload_file_to_s3 function in collect_logs.sh (HTTP Traffic Handler component) leads to improper certificate validation. The attack may be initiated remotely but is considered highly complex and difficult to exploit. Affected firmware versions are Furbo 360 up to FB0035_FW_036 and Furbo Mini up to MC0020_FW_074; the vendor did not respond to the disclosure.

HCL Unica Platform is impacted by misconfigured security related HTTP headers. This can lead to less secure browser default treatment for the policies controlled by these headers.

HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability. A malicious agent may be able to induce this event by feeding a user suitable links, either directly or via another web site.