CVE Vulnerability Catalog

SQL injection vulnerability in InfoScale VIOM before version 9.1.3 allows remote attackers to escalate privileges.

Cisco ThousandEyes Enterprise Agent has a vulnerability in the BrowserBot component that allows an authenticated remote attacker to execute arbitrary commands in the BrowserBot container as the node user. The vulnerability is due to insufficient input validation of command arguments.

A vulnerability in Cisco ThousandEyes Virtual Appliance allows an authenticated remote attacker with admin privileges to execute arbitrary code as root by uploading a crafted SSL certificate.

Cisco Nexus 3000 and 9000 Series Switches in standalone NX-OS mode have a vulnerability in the BGP enforce-first-as feature. Incorrect parsing of a transitive BGP attribute allows an unauthenticated, remote attacker to trigger BGP session flaps, leading to denial of service.

MISP’s OIDC authentication plugin allowed automatic linking of an OIDC identity to an existing local user account based on the email claim when the local account had no stored sub value. Under insecure or untrusted IdP configurations where email ownership is not enforced, an attacker with a valid OIDC token could assert a victim’s email address and authenticate as that user, leading to account takeover.

Progress Software MOVEit Automation has a resource allocation vulnerability without limits or throttling, leading to excessive allocation. This affects versions before 2025.0.11 and from 2025.1.0 before 2025.1.7.

Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7.

Resource allocation without limits or throttling vulnerability in Progress Software MOVEit Automation allows flooding attacks. Affects versions before 2025.0.11 and from 2025.1.0 before 2025.1.7.

Kieback & Peter DDC building controllers are vulnerable to cross-site scripting (XSS), enabling JavaScript execution in the victim's browser, allowing the attacker to control the browser.

Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting improper handling of miniscript policies containing the 'a:' fragment. Attackers can craft malicious miniscript policies that cause the device to derive and display incorrect receiving addresses, potentially leading to funds being sent to unintended addresses.

Uncontrolled memory allocation in Progress Software MOVEit Automation allows excessive allocation, potentially leading to resource exhaustion.

The HCL DominoIQ RAG feature is affected by a Broken Access Control vulnerability. Under certain circumstances, document-level access restrictions are ignored when determining what data to return from an AI query. An authenticated attacker can view sensitive data.

An unbounded resend loop in the BIND 9 resolver state machine during bad-server handling. A remote unauthenticated attacker can cause severe resource exhaustion by sending queries that trigger specific retry conditions.

Missing authorization in PDF for Elementor Forms + Drag And Drop Template Builder (up to 5.5.1) allows exploiting incorrectly configured access control security levels.

BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver queries a specially crafted zone, it will consume disproportionate resources. Affects multiple BIND 9 versions.

The Image Photo Gallery Final Tiles Grid WordPress plugin up to version 3.6.11 has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

Missing authorization vulnerability in the WpBookingly plugin for WordPress allows exploiting incorrectly configured access control security levels.

The WordPress plugin Visualizer before version 4.0.0 contains a Stored Cross-Site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation.

HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'. Using outdated or insecure base images may introduce known vulnerabilities, potentially increasing the risk of exploitation in the application environment.