CVE Vulnerability Catalog

Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privileges.

Zidentyfikowano krytyczną podatność w roli ALPR Manager w systemie Security Center, która może umożliwić atakującym uzyskanie dostępu administracyjnego do systemu Genetec Security Center. Problem został odkryty wewnętrznie przez zespół inżynieryjny Genetec.

Omni-tools w wersji 0.4.0 jest podatny na zdalne wykonanie kodu z powodu niebezpiecznej deserializacji JSON. Atakujący może wykorzystać tę podatność do uruchomienia dowolnego kodu na zdalnym systemie.

Dell Unity versions 5.5 and prior contain an OS command injection vulnerability. A low privileged attacker with local access could execute arbitrary commands with root privileges. This vulnerability only affects systems without a valid license.

Dell Unity versions 5.5 and prior contain an OS command injection vulnerability. A low-privileged attacker with local access could exploit it to execute commands and elevate privileges.

Dell Unity versions 5.4 and prior contain an OS command injection vulnerability. A low-privileged attacker with local access could exploit it to execute commands and elevate privileges.

URVE Smart Office is vulnerable to Stored XSS in report problem functionality. An attacker with a low-privileged account can upload an SVG file containing a malicious payload, which will be executed when a victim visits the URL of the uploaded resource. The resource is available to anyone without any form of authentication. This issue was fixed in version 1.1.24.

Quick.Cart is vulnerable to Cross-Site Request Forgery in product creation functionality. A malicious attacker can craft a special website, which when visited by the admin, will automatically send a POST request creating a malicious product with content defined by the attacker. The software does not implement any protection against this type of attack, and all forms are potentially vulnerable. Only version 6.7 was tested and confirmed as vulnerable.

A user with CREATE but no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action.

API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available.

The example DAG `example_dag_decorator` in Apache Airflow had a non-validated parameter that allowed a UI user to redirect the example to a malicious server and execute code on a worker. This required example DAGs to be enabled in production (not default) or the example code to be copied into a custom DAG.

NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data.

Podatność CVE-2025-54470 dotyczy wdrożeń NeuVector, gdy opcja raportowania anonimowych danych klastra jest włączona. W takich przypadkach NeuVector nie weryfikuje certyfikatów TLS podczas przesyłania anonimowych danych do serwera telemetrycznego.

Zidentyfikowano podatność w NeuVector, gdzie egzekutor używał zmiennych środowiskowych CLUSTER_RPC_PORT i CLUSTER_LAN_PORT do generowania polecenia wykonywanego za pomocą popen, bez wcześniejszej walidacji ich wartości. To może umożliwić złośliwemu użytkownikowi wstrzyknięcie złośliwych poleceń przez te zmienne w kontenerze egzekutora.

A vulnerability in the Linux kernel causes a leak of disconnected dentries during filesystem unmount. When open_by_handle_at() creates a disconnected dentry and reconnection fails, flags become inconsistent, preventing immediate memory reclamation. This leads to a "Busy inodes after unmount" error and potential system instability.

In the Linux kernel, the ixgbevf driver has a mailbox API compatibility issue between PF and VF drivers for Intel 10G network adapters. API versions 1.4 and 1.5 introduced features (IPsec, ESX support) not supported by all drivers, causing crashes and regressions. The patch adds a new mailbox op to query PF for supported features, enabling negotiation of IPsec and ESX-specific support.

In the Linux kernel, a vulnerability in KVM for arm64 allows userspace to set vCPU events before the vCPU is initialized, leading to interpretation of uninitialized data and potentially triggering a BUG() in the exception injection code, causing a kernel crash.

In the Linux kernel, the CIFS module's parse_dfs_referrals function lacks input validation for SMB server replies. A malicious server can send a reply smaller than expected or with an invalid number of referrals, causing an out-of-bounds memory read.

In the Linux kernel, a vulnerability was found in the ALSA HDA cs35l41 driver. The function cs35l41_get_acpi_mute_state() calls acpi_evaluate_dsm() without checking for NULL return, leading to a NULL pointer dereference and potential crash.

In the Linux kernel, the hda_component_manager_init function in the ALSA HDA subsystem does not check the pointer returned by __component_match_add, which may be set to ERR_PTR(-ENOMEM). This pointer is subsequently dereferenced, leading to a kernel oops.