CVE Vulnerability Catalog

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service.

In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to unsafe calls to an execl function.

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation.

A vulnerability in the Portal Generator addon to Priority ERP (Soft Solutions) involves use of hard-coded credentials, exposure of sensitive information, and improper access control. All versions without Priwall v3 are affected.

A vulnerability in the Portal Generator addon to Priority ERP (Soft Solutions) involves missing authentication for critical functions. All versions without Priwall v3 are affected.

Improper Access Control vulnerability in the Portal Generator addon to Priority ERP (developed by Soft Solutions). Affects all versions without Priwall v3.

A vulnerability in the Portal Generator addon to Priority ERP (Soft Solutions) involves client-side enforcement of server-side security. All versions without Priwall v3 are affected.

A vulnerability in the Portal Generator addon to Priority ERP (Soft Solutions) exposes sensitive personal information to unauthorized actors. All versions without Priwall v3 are affected.

Observable discrepancy vulnerability in the Portal Generator addon to Priority ERP (developed by Soft Solutions). Affects all versions without Priwall v3.

Improper Access Control vulnerability in the Portal Generator addon to Priority ERP (developed by Soft Solutions). Affects all versions without Priwall v3.

A vulnerability in the Portal Generator addon to Priority ERP (Soft Solutions) involves improper authentication. All versions without Priwall v3 are affected.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the Portal Generator addon to Priority ERP (developed by Soft Solutions). Affects all versions without Priwall v3.

@fastify/busboy versions 3.1.0 through 3.2.0 are vulnerable to a DoS attack that stalls the Node.js event loop by sending a multipart request with a boundary of a specific length. A single small request can keep one core busy and deny service to other requests. The issue is fixed in version 3.2.1.

This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758.

Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows.

Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service.

TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service.

@fastify/busboy versions 1.0.0 through 3.2.0 are vulnerable to a parser crash by sending a part header whose name is a prototype-inherited property such as __proto__ or constructor. This can trigger a TypeError and potentially terminate the Node.js process, causing an unauthenticated denial of service. The issue is fixed in version 3.2.1.

Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.

Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.0.0 and prior to 4.0.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.