CVE Vulnerability Catalog

Wtyczka `ComputeEngineSSHHook` w Apache Airflow providers-google domyślnie wyłącza weryfikację kluczy hosta SSH, co naraża ruch SSH między pracownikiem Airflow a maszyną wirtualną Compute Engine na ataki w sieci. To może prowadzić do przechwycenia lub modyfikacji sesji.

A vulnerability was identified in Tenda F1202 version 1.2.0.20(408), affecting the function fromPptpUserAdd in the file /goform/PptpUserAdd. Manipulation of the argument opttype leads to stack-based buffer overflow.

A vulnerability was identified in Tenda F1202 version 1.2.0.20(408) affecting the function formGstDhcpSetSer in the file /goform/GstDhcpSetSerof. Manipulating the argument dips can lead to stack-based buffer overflow.

A vulnerability was found in the Tenda F1202 device version 1.2.0.20(408), affecting the function formWrlExtraSet in the file /goform/WrlExtraSet. Manipulating the argument delno results in a stack-based buffer overflow, allowing for remote attack initiation.

A vulnerability has been found in Tenda F1202 version 1.2.0.20(408), affecting the function fromPPTPUserSetting in the file /goform/PPTPUserSetting. Manipulation of the argument delno leads to stack-based buffer overflow.

Some Command Centre Service installers have an issue with the insertion of sensitive information into log files, which could lead to the exposure of Service Account credentials.

A flaw has been found in Edimax EW-7438RPn version 1.31 affecting the function formWlSiteSurvey in the file /goform/formWlSiteSurvey. Manipulation of the argument selSSID/submit-url causes stack-based buffer overflow.

A vulnerability was detected in Edimax EW-7438RPn 1.31 affecting the function formHwSet of the file /goform/formHwSet. Manipulation of the arguments leads to stack-based buffer overflow.

A vulnerability has been identified in Edimax EW-7438RPn version 1.31 that allows for stack-based buffer overflow through manipulation of arguments in the formWlanMP function. An attacker can exploit this vulnerability remotely.

Zidentyfikowano podatność w KLiK SocialMediaWebsite w wersji 1.0, która dotyczy nieznanego przetwarzania komponentu obsługi parametrów żądania HTTP POST. Manipulacja tym komponentem prowadzi do możliwości wstrzyknięcia kodu.

A vulnerability was identified in KLiK SocialMediaWebsite 1.0 affecting the uniqid function in the upload.inc.php file of the File Handler component. This allows unrestricted file uploads.

A command injection vulnerability exists in Aterm. A malicious third party gaining administrator access to the product's web console may execute arbitrary OS commands via adjacent network.

A vulnerability in NitroSense versions 3.x before 3.01.3052 allows local privilege escalation. The program exposes a misconfigured Windows Named Pipe, enabling any authenticated local user to execute arbitrary code with SYSTEM privileges and delete arbitrary files with SYSTEM privileges.

A vulnerability was identified in Edimax BR-6675nD version 1.12, occurring in the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Manipulation of the argument selSSID leads to buffer overflow.

A vulnerability has been found in Edimax BR-6675nD 1.12, affecting the function formWanTcpipSetup in the file /goform/formWanTcpipSetup. Manipulation of the argument pppUserName leads to buffer overflow, which can be exploited remotely.

A vulnerability was detected in Edimax BR-6675nD 1.12, affecting the function formsetPPPoE in the file /goform/formsetPPPoE. Manipulating the argument pppUserName results in buffer overflow, allowing for remote attack.

Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file causes that file to be blindly executed with the permissions of the invoker, allowing escaping Flatpak and Snap sandboxes.

A weakness has been identified in Besen BS20 EV Charging Station up to 20260426, affecting some unknown functionality of the OTA Update Installation Handler. This manipulation causes improper authorization.

A vulnerability was found in H3C Magic B0 up to version 100R002, affecting the function Edit_BasicSSID_5G of the file /goform/aspForm. Manipulating the argument param results in buffer overflow.

A vulnerability has been detected in Tenda F456 version 1.0.0.5, affecting the frmL7ImForm function in the /goform/L7Im file. Manipulation of the page argument leads to buffer overflow, which can be exploited by a remote attacker.