CVE Vulnerability Catalog

Xlight FTP Server before version 3.9.5 contains a pre-authentication stack buffer overflow vulnerability. An unauthenticated attacker can send malformed SSH packets with GCM cipher negotiation, leading to stack corruption and potentially remote code execution.

An XML External Entity (XXE) vulnerability in veraPDF-validation exists in the getdynamicRender() method in GFPDAcroForm.java. A crafted PDF with a malicious XFA stream can cause external entity expansion during PDF/UA-1 validation, leading to local file disclosure or outbound server-side requests.

An XML External Entity (XXE) vulnerability in veraPDF-validation exists in the getRichTextStringOrStreamEntryStringRepresentation() method in DictionaryKeysHelper.java. A crafted PDF with a malicious rich-text /RC or /RV entry can cause external entity expansion and reflect local file contents into the validation report.

A vulnerability in Kong Operator (with embedded KIC) allows a user with namespace-scoped Secret creation privileges to cause a cluster-wide ingress configuration denial of service. KIC collects CA-certificate Secrets using only a label selector, without ingress-class or namespace restrictions. Duplicate CA-certificate IDs cause Kong Gateway to reject the entire configuration document, halting all ingress changes.

A Heap-Based Overflow vulnerability in Autodesk AutoCAD occurs when parsing a maliciously crafted DXF file. An attacker can exploit this to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

A vulnerability in Kong Kubernetes Ingress Controller (KIC) allows a user with namespace-scoped Secret creation privileges to cause a cluster-wide ingress configuration denial of service. KIC collects CA-certificate Secrets using only a label selector, without ingress-class or namespace restrictions. Duplicate CA-certificate IDs cause Kong Gateway to reject the entire configuration document, halting all ingress changes.

A missing authorization vulnerability in MWDB Core (versions >=2.2.0 and <2.19.0) in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated attacker to send arbitrary requests to a remote MWDB instance using the identity and permissions of the configured API key. This affects only deployments with Remote Instances configured.

Joomla Extension Gridbox from balbooa.com versions < 2.20.2 has various CSRF vectors in the admin interface.

Joomla Extension Gridbox below version 2.20.2 has a vulnerability allowing an unauthenticated attacker to read arbitrary files via the photo viewer.

A vulnerability in Gleam allows a man-in-the-middle attacker to substitute forged Hex package contents during dependency resolution due to insufficient verification of data authenticity. The second request to the unsigned Hex API is used instead of verified repository metadata.

A code injection vulnerability in swagger-typescript-api (prior to 13.12.2) occurs during API client generation. The parseRouteName function passes OpenAPI path keys to templates without proper escaping of JavaScript template literal interpolation, allowing an attacker to inject ${...} code in the path that executes when the generated method is called.

A code injection vulnerability in swagger-typescript-api (prior to 13.12.2) occurs when processing enum values in OpenAPI schema components. Enum values are passed to Ts.StringValue without escaping before rendering TypeScript enum declarations, allowing an attacker to inject code that executes when the generated module is imported.

A code injection vulnerability in swagger-typescript-api (prior to 13.12.2) occurs when copying the server URL from OpenAPI to apiConfig.baseUrl. The template interpolates apiConfig.baseUrl without escaping, allowing an attacker to inject TypeScript code that executes when the generated fetch client module is imported.

swagger-typescript-api prior to 13.12.2 does not escape the server URL interpolation in the axios-http-client.ejs template. An attacker can supply a malicious OpenAPI spec that injects JavaScript code executed when HttpClient or Api is instantiated.

swagger-typescript-api prior to 13.12.2 forwards the --authorizationToken to every request fetching remote OpenAPI schemas. An attacker can use a malicious spec to exfiltrate this token to an external endpoint.

TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that allows an authenticated attacker to bypass configured 2FA for connection approval via Unattended Access and establish a remote connection to a macOS host.

cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when applying untrusted RFC 6902 JSON Patch via cJSONUtils_ApplyPatches. An attacker can supply a patch with add and copy operations that amplify document depth, causing a stack overflow and process crash.

Joomla Extension Gridbox below version 2.20.2 has a vulnerability allowing an unauthenticated attacker to recursively delete directories via the generateNewApp method.

open-iscsi has a Double Free vulnerability that allows an unauthenticated MITM attacker to cause DoS. The issue affects versions up to 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

CSRF vulnerability in the Joomla extension RO CSVI versions prior to 9.11.0. CSRF vectors exist in AJAX endpoint handlers, potentially allowing an attacker to perform unauthorized actions in the context of an administrator's session.