CVE Vulnerability Catalog

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux).

Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.

A race condition in the Palo Alto Networks GlobalProtect client on macOS allows a locally authenticated low-privileged attacker to escalate privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.

A privilege escalation vulnerability in the Palo Alto Networks Prisma Access Agent on Windows and macOS devices allows a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected.

A vulnerability in Palo Alto Networks Prisma Access Agent on Windows allows a local attacker with administrator privileges to bypass anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.

An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma Access Agent on Windows allows a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected.

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma Browser enables a local attacker to view sensitive data.

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma Browser enables a user to bypass intended security controls.

In NortheBridge/luminalshine, a Sunshine-compatible game stream host for Moonlight, prior to version 26.05.0-rc4, a latent gap exists on a default install, but under certain conditions may lead to privilege escalation. Version 26.05.0-rc4 contains a patch.

UpSnap, a wake on lan web app, versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-escalation chain in pb.HandlerInitSuperuser. An unauthenticated network-adjacent attacker can register the initial superuser account, receive a long-lived JWT, and pivot to root remote code execution.

A vulnerability in @cedar-policy/authorization-for-expressjs (versions prior to 0.3.0) causes a mismatch between Cedar authorization and Express routing. The middleware uses req.originalUrl (including query string) to match Cedar actions, while Express routes based on the path only. An attacker can append a query parameter (e.g., /users/?x=1) to bypass a more restrictive policy and gain access to a protected resource.

Version 2.0.0 of the sigstore-java library erroneously removed verification of the integrated (Rekor entry) time against the Fulcio certificate. Version 2.1.0 re-added this verification with enhancements adhering to the Sigstore verification spec. The vulnerability affects only users verifying bundles with dev.sigstore:sigstore-java:2.0.0.

The Meeting Room Booking System (MRBS) prior to version 1.12.2 contains an open redirect vulnerability that allows an unauthenticated attacker to redirect users to an arbitrary location after clicking a specially crafted URL. Version 1.12.2 contains a fix.

Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be fetched without checks. Version 1.12.2 contains a fix; no known workarounds are available.

PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and of stylesheet paths in _style_tag_for. Values beginning or ending with a pipe (|) are executed as commands, and those with a redirect (>) open the path for write or append.

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. Meta tags named pdf-webkit-KEY are converted to wkhtmltopdf command line options without an allow list, allowing override of module defaults and options passed to new.

In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the handler to return REFUSED for all DNS queries through that path. The _handle_notify path is exploitable via a single unauthenticated UDP packet. This is independently reachable through the cross-tenant zone overlap described in a different recent CVE, and also affects legitimate same-tenant cross-pool configurations. BIND9 views do not mitigate this issue as mDNS is a shared service upstream of any view configuration.

In OpenStack Designate before 22.0.1, zone creation checks are scoped to the target pool only. An authenticated user can bypass them by scheduling a zone to a different pool via the AttributeFilter scheduler, creating an overlapping zone that conflicts with another tenant's zone. This enables cross-tenant DNS hijack and DNS denial of service.