CVE Vulnerability Catalog

HyperScale contained a path traversal issue affecting information disclosure. The vendor recommends upgrading to the resolved maintenance release.

A denial-of-service security issue exists in the affected product and version. The issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to its normal state.

A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeover or unauthorized modification of device configuration.

An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability applies only when the Block Sites feature is turned on.

An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device's management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.

Listed NETGEAR Extender models have insufficient session randomness. A network-adjacent attacker with network access (such as WiFi credentials) can predict valid session identifiers and hijack an authenticated administrator session on the web management portal.

A SQL injection vulnerability was found in girishsaraf Online-Appointment-Booking-System in the file Admin/getclinic.php of the AJAX Endpoint component. Manipulation of the city/cid argument allows remote exploitation, and the exploit has been made public. The project uses a rolling release model, so version information is unavailable, and the issue report has not been responded to.

A SQL injection vulnerability was found in girishsaraf Online-Appointment-Booking-System in the file Admin/deleteclinic.php of the Admin CRUD Endpoint component. Manipulation of the cid/did argument allows remote exploitation, and the exploit has been disclosed to the public. The project follows a rolling release approach, so version details are not provided, and the issue report has not been responded to.

A SQL injection vulnerability was detected in girishsaraf Online-Appointment-Booking-System in the file changebookingstatus.php. Manipulation of the dateselected argument allows remote exploitation, and the exploit is now public. The product uses a rolling release model, so specific version information is not available, and the issue report has not been responded to.

Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access.

NETGEAR R7300 router has insufficient input validation in the LAN Setup feature. An authenticated administrator connected to the local network can perform unauthorized actions on the router. This was identified in a controlled research environment using a simulated version of the router software and has not been confirmed on physical production devices.

An insufficient input validation vulnerability exists in the PPPoE Setup feature of the NETGEAR R7300 router, allowing authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.

Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. The converter checks the hostname's resolved IP addresses and then opens a separate connection that can resolve the hostname again, allowing an attacker to bypass validation.

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/app-vite SSG page definitions returned by getSsgPages() could supply dir and filename values that were joined to build.distDir without verifying the final destination. Parent traversal or an existing symlink below the distribution directory could create new HTML files or directories outside the output tree with the build user's permissions.

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::CreateStream in src/server/rdb_load.cc can associate one streamNACK with a consumer group's global PEL and a consumer-local PEL, then free the shared object when a duplicate consumer entry is rejected. Cleanup subsequently frees the same object again. In the default configuration, where Dragonfly ships with authentication disabled, an unauthenticated client can trigger the double-free by sending a crafted serialized stream to RESTORE, causing allocator corruption, denial of service, and potentially attacker-controlled code execution as the Dragonfly service account.

SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by denied_patterns or outside allowed_patterns to an allowed destination name because file-pattern filters are evaluated only on the destination. The user can then read the denied file contents.

Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the password change endpoint (POST /current/user/password) accepts a valid client token without requiring the account's current password or another elevated authentication step. An attacker who obtains a client token can set a new password for the associated user, taking control of password authentication and forcing account recovery through an administrator or direct database access.

ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.3, 4.0.3, and 4.1.4, applications that allow the SVG animate or set elements can retain an animation whose attributeName targets href and whose value uses the javascript scheme. The sanitized SVG can therefore create a script-bearing link, and a user who clicks the link can execute attacker-controlled script in the application's origin, enabling stored cross-site scripting.

CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure, which could result in control over the device.