CVE Vulnerability Catalog

DCIM dcTrack umożliwia atakującemu nadużycie niektórych funkcji zdalnego dostępu. Uwierzytelniony użytkownik z dostępem do wirtualnej konsoli urządzenia może wykorzystać te funkcje do przekierowania ruchu sieciowego, co może prowadzić do uzyskania dostępu do zastrzeżonych usług lub danych na maszynie gospodarza.

Mechanizm resetowania hasła w aplikacji klienckiej Pivot jest słaby, co może umożliwić atakującemu przejęcie konta użytkownika.

The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative user to escalate privileges to NT AUTHORITY/SYSTEM on the machine where the VPN client is installed.

A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's certificate request command. Allows an authenticated privileged user to execute arbitrary code via specially crafted CLI commands.

An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an exposed authentication or management web interface. Only affects systems with at least one authentication hotspot configured.

An Expected Behavior Violation vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the boot time system integrity check and prevent the Firebox from shutting down in the event of a system integrity check failure. The on-demand check in the Web UI will correctly show a failure message.

A stored XSS vulnerability in the Gateway Wireless Controller module of WatchGuard Fireware OS allows injection of malicious scripts that execute in the administrator's browser.

Stored XSS vulnerability in WatchGuard Fireware OS in the Autotask Technology Integration module. Improper input neutralization during web page generation allows persistent injection of malicious script.

Stored XSS vulnerability in WatchGuard Fireware OS in the ConnectWise Technology Integration module. Improper input neutralization during web page generation allows persistent injection of malicious script.

Stored XSS vulnerability in WatchGuard Fireware OS in the Tigerpaw Technology Integration module. Improper input neutralization during web page generation allows persistent injection of malicious script.

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.

Out-of-bounds write vulnerability in WatchGuard Fireware OS's CLI. An authenticated privileged user can execute arbitrary code via specially crafted IPSec configuration commands.

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands.

A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.

Remote Keyboard Desktop 1.0.1 enables remote attackers to execute system commands via the rundll32.exe exported function export, allowing unauthenticated code execution.

VeeVPN 1.6.1 contains an unquoted service path vulnerability in the VeePNService that allows remote attackers to execute code during startup or reboot with escalated privileges. Attackers can exploit this by providing a malicious service name, allowing them to inject commands and run as LocalSystem.

UNA CMS versions 9.0.0-RC1 through 14.0.0-RC4 contain a PHP object injection vulnerability in BxBaseMenuSetAclLevel.php where the profile_id POST parameter is passed to PHP unserialize() without proper handling, allowing remote, unauthenticated attackers to inject arbitrary PHP objects and potentially write and execute arbitrary PHP code.

DCIM dcTrack platforms utilize default and hard-coded credentials for access. An attacker could use these credentials to administer the database, escalate privileges on the platform, or execute system commands on the host.

A vulnerability in the Bluetooth HID module of JXL 9 Inch Car Android Double Din Player running Android 12.0 allows an attacker to inject arbitrary keystrokes by spoofing a Bluetooth HID device.

Wtyczka PostGallery dla WordPressa jest podatna na nieautoryzowane przesyłanie plików z powodu błędnej walidacji typu pliku w funkcjach klasy 'PostGalleryUploader' we wszystkich wersjach do i włącznie z 1.12.5. Umożliwia to uwierzytelnionym atakującym, posiadającym uprawnienia na poziomie subskrybenta i wyżej, przesyłanie dowolnych plików na serwer dotkniętej witryny.