CVE Vulnerability Catalog

Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file.

A non-privileged user can install and remove arbitrary packages via composer in a composer-based installation, even if the flag in update settings for enabling composer-based updates is unticked. A low-privileged user of the platform can install malicious code to obtain higher privileges.

A vulnerability in Entrust nShield Connect XC, nShield 5c, and nShield HSMi devices (up to 13.6.11 or 13.7) allows an attacker to gain access to the BIOS menu because it has no password.

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11 or 13.7 (patched in 13.6.12 LTS and 13.9.0 STS) allow a physically proximate attacker to access internal components of the appliance without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws without damaging the device. This is called an F14 attack.

A vulnerability was detected in nocobase up to 1.9.4/2.0.0-alpha.37. An unknown function in the file nocobase\packages\core\auth\src\base\jwt-service.ts of the JWT Service component allows manipulation of the API_KEY argument, resulting in the use of a hard-coded cryptographic key. The attack can be launched remotely but requires high complexity and is difficult to exploit. The exploit is now public.

The Upload.am WordPress plugin before 1.0.1 is vulnerable to arbitrary option disclosure due to a missing capability check on its AJAX request handler. Users such as contributors can view site options.

A vulnerability in Entrust nShield Connect XC, nShield 5c, and nShield HSMi devices (up to 13.6.11 or 13.7) allows a physically proximate attacker to escalate privileges by inserting a probe into the chassis during system boot, enabling the USB interface. This is fixed in versions 13.6.12 (LTS) and 13.9.0 (STS).

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker with elevated privileges to falsify tamper events by accessing internal components.

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker (with elevated privileges) to read and modify the Appliance SSD contents (because they are unencrypted).

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker with root access to modify the Recovery Partition (because of a lack of integrity protection).

A vulnerability in Entrust nShield Connect XC, nShield 5c, and nShield HSMi devices (up to 13.6.11 or 13.7) allows a physically proximate attacker to escalate privileges by booting from a USB device with a valid root filesystem. This occurs due to insecure default settings in the Legacy GRUB Bootloader.

A vulnerability in Entrust nShield Connect XC, nShield 5c, and nShield HSMi devices (up to 13.6.11 or 13.7) might allow a physically proximate attacker to gain access to the EOL legacy bootloader.

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker to escalate privileges by editing the Legacy GRUB bootloader configuration to start a root shell upon boot of the host OS. This is called F06.

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker to modify or erase tamper events via the Chassis management board.

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11 or 13.7 (patched in 13.6.12 LTS and 13.9.0 STS) allow a user with OS root access to alter firmware on the Chassis Management Board without authentication. This is called F04.

A vulnerability in the Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi devices (up to 13.6.11 or 13.7) allows a physically proximate attacker to persistently modify firmware and influence the (insecurely configured) appliance boot process. To exploit this, the attacker must modify the firmware via JTAG or perform an upgrade to the chassis management board firmware.

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11 or 13.7 (patched in 13.6.12 LTS and 13.9.0 STS) allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis without leaving evidence, and accessing the JTAG connector. This is called F02.

A weakness has been identified in Yohann0617 oci-helper up to 3.2.4. This issue affects the function addCfg of the file src/main/java/com/yohann/ocihelper/service/impl/OciServiceImpl.java of the component OCI Configuration Upload. Executing manipulation of the argument File can lead to path traversal. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.

Podatność CVE-2025-13505 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych, co prowadzi do ataków typu Cross-site Scripting (XSS). Dotyczy to wersji Datactive od 2.13.34 do przed 2.14.0.6, umożliwiając przechowywane XSS.

User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetUserQuestionAndAnswer' in '/WS/PDAWebService.asmx'.