CVE Vulnerability Catalog

TOTOLINK A800R version 4.1.2cu.5137_B20200730 has a stack-based buffer overflow vulnerability in the setRadvdCfg function of /cgi-bin/cstecgi.cgi (component ipv6.so). Manipulation of the radvdinterfacename argument can lead to remote code execution.

A flaw has been found in TRENDNET TEW-813DRU 1.01b01 in the file /etc/vsftpd.conf of the vsftpd component. This manipulation causes incorrect default permissions. The attack can be carried out remotely but requires high complexity and is considered difficult to exploit. This vulnerability only affects products no longer supported by the maintainer.

A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. The issue affects the save_doctor function in /save_file.php, allowing unrestricted file upload. The attack can be executed remotely, and the exploit is publicly available.

A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. The issue affects unknown code in /admin/reporting/sales/ of the Backend Reporting Endpoint, leading to authorization bypass. Remote exploitation is possible, and the exploit is publicly disclosed. The vendor confirms that some issues are already addressed, while others are planned for future releases.

Tenable Security Center has a command injection vulnerability. An authenticated administrator can modify application configuration values to achieve arbitrary command execution on the underlying operating system when specific backend operations are triggered.

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in arbitrary code execution with the privileges of the service account.

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. No further information is available.

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could exploit this, leading to information disclosure.

Dell Wyse Management Suite (WMS) before version 2605.0.2 has an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access can exploit this to achieve remote code execution.

Dell Wyse Management Suite (WMS) before version 2605.0.2 has an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access can exploit this to achieve remote code execution.

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could exploit this, leading to unauthorized access.

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could exploit this, leading to privilege escalation.

Dell Wyse Management Suite (WMS) before version 2605.0.2 has an Incorrect Default Permission vulnerability. A low privileged attacker with local access can exploit this to achieve privilege escalation.

A CWE-22 Path Traversal vulnerability was identified in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad version 0.11.0. A local unauthenticated attacker can delete arbitrary files with the privileges of the RevPiPyLoad daemon, leading to loss of configuration integrity and denial of service.

A CWE-22 Path Traversal vulnerability was identified in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad version 0.11.0. A local unauthenticated attacker can read arbitrary files with the privileges of the RevPiPyLoad daemon, including sensitive configuration and credential material.

A CWE-352 Cross-Site Request Forgery (CSRF) vulnerability was identified in the web-based configuration backend of KUNBUS PiCtory version 2.16.0. A remote unauthenticated attacker can perform state-changing operations in the context of an authenticated operator, including deletion of project and configuration files and reset of the control runtime, by inducing the victim's browser to submit crafted requests.

ZeroBrew version 0.3.1 and prior has a missing integrity verification vulnerability in the Ruby compatibility shim. Network attackers can substitute malicious content at formula resource or URL-based patch URLs, executing arbitrary code during source builds.

In Eclipse Theia up to version 1.69.0, opening a folder starts source control integration without first asking the user to trust the folder. Applications built on Theia that include git integration execute git commands (e.g., git status) as soon as a repository is detected. Because git honors repository-local configuration, a folder with an attacker-controlled .git/config containing core.fsmonitor can cause the configured command to be executed. Cloning an attacker-supplied repository and opening it in a Theia-based application is sufficient to execute arbitrary commands with user privileges, without any confirmation prompt.

A weakness has been identified in Webkul Bagisto up to 2.4.4 in the file /admin/customers/search of the Customer Search component. Manipulating the Query argument can lead to information disclosure. The attack can be launched remotely, and the exploit is publicly available. The vendor confirms that the issues are already known and partially addressed.

A security flaw has been discovered in Webkul Bagisto up to 2.4.4. The issue affects unknown functionality in /admin/customers/view of the Backend Customer Detail Feature. Manipulation of the ID argument results in authorization bypass. The attack may be initiated remotely, and the exploit is publicly available. The vendor confirms that some issues are already addressed, while others are planned for future releases.