CVE Vulnerability Catalog

TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can append an onboarding-scoped object to a JSON request to bypass session verification and invoke privileged actions without authentication.

A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive extractor validates member paths using lexical path normalisation (os.path.abspath) instead of resolving symbolic links (os.path.realpath), and it performs no containment check on symlink-typed directory members before creating them. A crafted collection tarball can chain symlink directory entries so that a subsequent file member is written outside the intended destination directory.

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map.

IBM Guardium Data Protection versions 12.2.2 and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.

IBM Guardium Data Protection versions 12.2.2 and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a stack-based buffer overflow vulnerability. A remote attacker could exploit this flaw to execute arbitrary code within the application context.

IBM Guardium Data Protection versions 12.2.2 and 12.1 improperly limit pathnames to a restricted directory, allowing a remote attacker to delete arbitrary files. The flaw stems from inadequate path validation.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 is vulnerable to a buffer overflow. A remote attacker could exploit this flaw to execute arbitrary code.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements to view, add, modify, or delete information in the back-end database.

Hazelcast is a unified real-time data platform. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization checks in the IMap Predicates API allow a malicious client with limited privileges to execute arbitrary code on a Hazelcast cluster member.

fast-jwt is a fast JSON Web Token implementation. In 6.2.4, it can misclassify raw serialized public JWK or JWKS JSON as an HMAC secret because performDetectPublicKeyAlgorithms treats non-PEM strings as symmetric key material. If HS256 is explicitly allowed or inferred, an attacker who knows the exact serialized public-key bytes can use them as an HMAC key and create a token with arbitrary claims.

fast-jwt is a fast JSON Web Token implementation. Prior to 6.3.0, createVerifier accepts a validly signed JWT whose payload is a JSON array because the decoder does not reject arrays, causing the claim validator loop to silently skip configured checks. An attacker who can produce or influence a validly signed token may bypass expiry, issuer, audience, subject, revocation, and replay protections.

fast-jwt is a fast JSON Web Token implementation. Prior to 6.3.1, createVerifier accepts an unsigned JWT when key is an empty string or null and algorithms is a non-empty allowlist. Falsy synchronous keys bypass prepareKeyOrSecret and the empty signature avoids the verifySignature gate, allowing an attacker to submit a token with arbitrary claims without possessing a signing key.

Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, DirectoryPromptRegistry does not reject symbolic links for index.json or .jinja prompt files, so in applications where untrusted users can influence a prompt directory, it can follow a link outside the registry root and disclose, read, or overwrite external files.

An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c.