CVE Vulnerability Catalog

Bitwarden Server prior to v2026.4.1 contains a missing authorization vulnerability that allows any authenticated user to write ciphers into an arbitrary organization via POST /ciphers/import-organization by submitting an empty collections array, which causes the server-side permission check to be skipped.

A Cross-Site Scripting (XSS) vulnerability has been discovered in IoTGateway version 3.0.1 within the Log Record Function. This allows a remote attacker to execute arbitrary JavaScript code in the victim's browser.

W Casdoorze występuje podatność na zapis dowolnych plików w dostawcy lokalnego systemu plików. Z powodu niewystarczającej sanitizacji ścieżek, uwierzytelniony atakujący z uprawnieniami administratora może przeprowadzić atak typu Path Traversal, aby tworzyć lub nadpisywać dowolne pliki w systemie plików hosta.

In Zephyr, sockets created with `IPPROTO_TLS_1_3` can negotiate a TLS 1.2 connection when both TLS versions are enabled in Kconfig, because the socket-level protocol selection is not propagated to mbedTLS. Applications assuming `IPPROTO_TLS_1_3` enforces TLS 1.3 may silently use TLS 1.2 and remain exposed to TLS 1.2-specific weaknesses.

Open5GS up to version 2.7.7 has a vulnerability in the OpenAPI_list_create function of the SMF component, leading to denial of service (DoS). The attack can be remote. Exploit has been disclosed.

Open5GS up to version 2.7.7 has a vulnerability in the smf_nsmf_handle_created_data_in_vsmf function of the SMF component, leading to denial of service (DoS). The attack can be remote. Exploit has been published.

In Open5GS up to version 2.7.7, a vulnerability in the gsm_build_pdu_session_establishment_accept function of the SMF component allows manipulation leading to denial of service (DoS). The attack can be launched remotely, and the exploit is publicly available.

A security vulnerability has been detected in Tenda AC6 15.03.06.23. The function get_log_file in the file /goform/getLogFile of the httpd component is affected by OS command injection via manipulation of the argument wans.flag. The attack can be launched remotely and the exploit has been disclosed.

An OS command injection vulnerability was found in Tenda AC6 router version 15.03.06.23 in the formWifiApScan function of the /goform/WifiApScan file. Manipulating the wl2g.public.country or wl5g.public.country arguments allows remote command execution. The exploit is publicly available.

A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. The function fromSetWirelessRepeat in the file /goform/WifiExtraSet of the httpd component is affected by OS command injection via manipulation of arguments mac or ssid. The attack can be launched remotely and the exploit has been released.

A heap-based buffer overflow vulnerability was found in Squirrel up to version 3.2 in the SQFunctionProto::Load function in squirrel/sqobject.cpp. The attack requires local access and is publicly disclosed, but the project has not responded.

A vulnerability has been found in Tenda AC6 2.0/15.03.06.23. An unknown function in the file /goform/telnet of the httpd component is affected by OS command injection via manipulation of the argument lan.ip. The attack can be launched remotely and the exploit has been disclosed.

In the Squirrel library up to version 3.2, a stack-based buffer overflow vulnerability exists in the validate_format function in sqstdlib/sqstdstring.cpp. The attack can only be executed locally. The exploit has been published and may be used. The project was informed but has not responded.

In Open5GS up to version 2.7.7, the SMF component's smf_nsmf_handle_create_data_in_hsmf function is vulnerable to a null pointer dereference. The attack can be performed remotely and the exploit has been publicly disclosed.

In Open5GS up to version 2.7.7, a vulnerability in the update_authorized_pcc_rule_and_qos function of the SMF component allows manipulation leading to denial of service (DoS). The attack can be launched remotely, and the exploit is publicly available.

Open5GS up to version 2.7.7 has a vulnerability in the smf_n4_build_qos_flow_to_modify_list function in /src/smf/n4-build.c of the SMF component, leading to denial of service (DoS). The attack can be remote. Exploit has been disclosed.

Open5GS up to version 2.7.7 has a vulnerability in the update_authorized_pcc_rule_and_qos function in /src/smf/npcf-handler.c of the SMF component, leading to denial of service (DoS). The attack can be remote. Exploit has been published.

A vulnerability was detected in Open5GS up to version 2.7.7 in the function update_authorized_pcc_rule_and_qos in the SMF component. Manipulation leads to denial of service. The attack can be launched remotely, and the exploit is publicly available.

In Net::CIDR::Lite for Perl (versions before 0.24), extraneous zero characters in CIDR mask values are not properly considered, which may allow IP ACL bypass. Masks like "/00" and "/01" pass validation and parse to the same prefix as their unpadded value.

Net::CIDR::Lite for Perl before version 0.24 does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs with trailing newline or non-ASCII digit characters pass validators but are re-encoded to a different address, causing incorrect matches.