CVE Vulnerability Catalog

A vulnerability in the Windows Projected File System allows an authorized attacker to elevate privileges locally. The issue is caused by an out-of-bounds read.

A Cross-site Scripting (XSS) vulnerability in Fortinet FortiSandbox versions 5.0.0 through 5.0.2, 4.4.0 through 4.4.7, 4.2 all versions, and 4.0 all versions may allow an attacker to perform an XSS attack via crafted HTTP requests.

Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.

An OS Command Injection vulnerability in Fortinet FortiSandbox versions 5.0.0 through 5.0.2, 4.4.0 through 4.4.7, 4.2 all versions, and 4.0 all versions may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests.

W Fortinet FortiSandbox występuje podatność na wstrzykiwanie poleceń systemowych (OS Command Injection) w wersjach 5.0.0 do 5.0.2, 4.4.0 do 4.4.7, oraz we wszystkich wersjach 4.2 i 4.0, a także w FortiSandbox Cloud 24.1 i 23. Umożliwia to zdalnemu atakującemu z uprawnieniami wykonanie nieautoryzowanego kodu lub poleceń poprzez odpowiednio skonstruowane żądania HTTP lub HTTPS.

Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A local malicious user could potentially exploit this vulnerability, leading to Elevation of privileges.

Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

Entrust Instant Financial Issuance (IFI) On Premise software (formerly CardWizard) versions 5.x, prior to 6.10.5, and prior to 6.11.1 contain an insecure .NET Remoting exposure in the Legacy Remoting Service that is enabled by default. The service registers a TCP remoting channel with SOAP and binary formatters configured at TypeFilterLevel=Full and exposes default ObjectURI endpoints such as logfile.rem, photo.rem, cwPhoto.rem, and reports.rem on a network-reachable remoting port. A remote, unauthenticated attacker who can reach the remoting port can invoke exposed remoting objects to read arbitrary files from the server and coerce outbound authentication, and may achieve arbitrary file write and remote code execution via known .NET Remoting exploitation techniques.

The vulnerability in Legality WHISTLEBLOWING by DigitalPA is a protection mechanism failure where critical HTTP security headers are not emitted by default, including Content-Security-Policy, Referrer-Policy, Permissions-Policy, Cross-Origin-Embedder-Policy, Cross-Origin-Opener-Policy, and Cross-Origin-Resource-Policy. CSP delivered via HTML meta elements is inadequate. The absence of these headers weakens browser-side defenses and increases exposure to client-side attacks such as cross-site scripting, clickjacking, referer leakage, and cross-origin data disclosure.

NVIDIA NVTabular dla systemu Linux zawiera podatność w komponencie Workflow, która może prowadzić do problemów z deserializacją. Skuteczne wykorzystanie tej podatności może skutkować wykonaniem kodu, odmową usługi, ujawnieniem informacji oraz manipulacją danymi.

NVIDIA Merlin Transformers4Rec dla systemu Linux zawiera podatność w komponencie Trainer, która może prowadzić do problemów z deserializacją. Skuteczne wykorzystanie tej podatności może skutkować wykonaniem kodu, odmową usługi, ujawnieniem informacji oraz manipulacją danymi.

The Advanced Product Fields (Product Addons) for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.17. This is due to missing or incorrect nonce validation on the 'maybe_duplicate' function. This makes it possible for unauthenticated attackers to duplicate and publish product field groups, including draft and pending field groups, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

A vulnerability in FortiOS, FortiProxy, FortiPAM, and FortiSRA involves insertion of sensitive information into log files. A read-only administrator can retrieve API tokens of other administrators by observing REST API logs, if REST API logging is enabled (non-default configuration).

SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information, including administrator accounts, password hashes, database structure, and other critical data via the shouji and userid parameters.

LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability due to lack of proper validation for uploaded files. An authenticated attacker can exploit this by uploading a specially crafted ZIP/PHP file to execute arbitrary code.

Vulnerability in the speedtest feature of NETGEAR Nighthawk routers, caused by improper input validation, allows attackers on the WAN side using man-in-the-middle techniques to manipulate DNS responses and execute commands during speedtests. Affects multiple models including RS700, RAX54Sv2, RAX50, RAXE500, and others.

The NETGEAR Nighthawk R7000P (end of service) router has an improper input validation vulnerability that allows an authenticated administrator with local network access to execute OS command injections and make unauthorized modifications to the router software.

A denial of service vulnerability in NETGEAR C6220 and C6230 allows an authenticated local WiFi user to reboot the router.

Podatność CVE-2025-6924 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w oprogramowaniu Talent Software e-BAP Automation, co pozwala na wystąpienie ataków typu Reflected XSS.

Podatność CVE-2025-6923 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w oprogramowaniu Talent Software UNIS, co pozwala na ataki typu Reflected XSS.