CVE Vulnerability Catalog

StreamVault to rozwiązanie do integracji pobierania wideo. Przed wersją 251126 występuje podatność na zdalne wykonanie kodu (RCE) w aplikacji stream-vault (SpiritApplication), która pozwala administratorom na konfigurowanie argumentów yt-dlp bez odpowiedniej walidacji.

In n8n prior to version 2.0.0, when the Code node runs in legacy (non-task-runner) JavaScript execution mode, authenticated users with workflow editing access can invoke internal helper functions. This allows reading and writing files on the host filesystem with the privileges of the n8n process. The issue is patched in version 2.0.0.

n8n from version 1.0.0 to before 2.0.0 has a sandbox bypass vulnerability in the Python Code Node that uses Pyodide. An authenticated user with permission to create or modify workflows can exploit this to execute arbitrary commands on the host system running n8n, using the same privileges as the n8n process.

LMDeploy prior to version 0.11.1 has an insecure deserialization vulnerability because torch.load() is called without the weights_only=True parameter when loading model checkpoint files. This allows an attacker to execute arbitrary code on the victim's machine when they load a malicious .bin or .pt model file.

n8n prior to version 1.114.0 has a stored XSS vulnerability in the "Respond to Webhook" node. When the node responds with HTML content containing executable scripts, the payload may execute in the top-level window, outside the sandbox. This allows an attacker with workflow creation permissions to execute arbitrary JavaScript in the context of the n8n editor interface. The issue is patched in version 1.114.0.

Yealink T21P_E2 Phone version 52.84.0.15 is vulnerable to directory traversal. A remote attacker with normal privileges can read arbitrary files via a crafted request to the diagnostic component's result read function.

Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbookadvanced/search in the qsoresults parameter.

Incorrect access control in Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 allows attackers to change the Administrator password and escalate privileges via sending a crafted POST request to /Forms/admin_access_1.

Incorrect access control in DEV Systemtechnik GmbH DEV 7113 RF over Fiber Distribution System 32-0078 H.01 allows unauthenticated attackers to access an administrative endpoint. This can lead to unauthorized system management.

The web management interface in ETL Systems Ltd DEXTRA Series Digital L-Band Distribution System v1.8 does not implement CSRF protection mechanisms on critical configuration endpoints.

An issue in Yealink T21P_E2 Phone version 52.84.0.15 allows a remote attacker with normal privileges to execute arbitrary code via a crafted request to the ping function of the diagnostic component.

Cola Dnslog v1.3.2 is vulnerable to Directory Traversal. When processing a DNS query for a TXT record, the application concatenates the requested URL with a base path using os.path.join, allowing bypass and potential exposure of sensitive information.

Prototype pollution vulnerability in apidoc-core versions 0.2.0 and all subsequent versions allows remote attackers to modify JavaScript object prototypes via malformed data structures, including the 'define' property, potentially leading to denial of service or unintended behavior.

A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3. After logging in as an admin and navigating to the "Add Page" function, the application fails to properly sanitize input in the <head> section, allowing remote attackers to inject arbitrary script tags.

An issue was discovered in Delight Custom Firmware for Nokia Symbian Belle devices allowing local attackers to inject startup scripts via crafted .txt files in the :\Data directory.

IBM Concert 1.0.0 through 2.1.0 could allow a local user to escalate their privileges due to a race condition of a symbolic link.

IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

IBM Aspera Faspex 5 versions 5.0.0 through 5.0.14.1 allow authenticated users to enumerate package identifiers, leading to disclosure of sensitive data information. The vulnerability enables information leakage through identifier guessing.

IBM Aspera Faspex 5 versions 5.0.0 through 5.0.14.1 may have inconsistent permissions between the user interface and backend API, allowing users to access features that appeared disabled. This could lead to misuse.

A vulnerability exists in libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service (DoS).