CVE Vulnerability Catalog

An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a platform and version-specific diagnostic package and executing a leftover diagnostic command.

GN4 Publishing System versions prior to 2.6 contain an insecure direct object reference (IDOR) vulnerability via the API. Authenticated requests to the API's object endpoints allow an authenticated user to request arbitrary user IDs and receive sensitive account data for those users, including the stored password and the account's security question and answer. The exposed recovery data and encrypted password may be used to reset or take over the target account.

FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.23.2, any authenticated user can create sessions and have them collect QoS messages. When not sent to a client, these are then not released upon (eventual) session expiration. Version 1.23.2 fixes the issue.

Oprogramowanie do zarządzania projektami Plane przed wersją 1.1.0 zawierało podatność na otwarte przekierowanie w parametrze zapytania ?next_path, co umożliwiało atakującym wstrzykiwanie dowolnych schematów, takich jak javascript:. To prowadziło do podatności na ataki XSS, pozwalających na wykonanie dowolnego kodu JavaScript w przeglądarce ofiary.

A vulnerability was found in the NDIS Usermode IO driver (RtkIOAC60.sys, version 6.0.5600.16348) that allows a local authenticated attacker to send a crafted IOCTL request, causing a denial of service (DoS).

PerfreeBlog version 4.0.11 has a file upload vulnerability in the installPlugin function. This allows an attacker to upload a malicious file to the server.

PerfreeBlog version 4.0.11 has a file upload vulnerability in the installTheme function. This flaw allows an attacker to upload a malicious file to the server.

PerfreeBlog version 4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function. An attacker can exploit this flaw to delete arbitrary files on the server.

PerfreeBlog version 4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function. It allows an attacker to read arbitrary files on the server.

Karmada Dashboard prior to version 0.2.0 has an authentication bypass vulnerability in the API. The backend API endpoints (e.g., /api/v1/secret, /api/v1/service) did not enforce authentication, allowing unauthenticated users to access sensitive cluster information such as Secrets and Services directly. Although the web UI required a valid JWT for access, the API itself remained exposed to direct requests without any authentication checks.

Antabot White-Jotter w wersji do commita 9bcadc zawiera podatność na zdalne wykonanie kodu (RCE) bez uwierzytelnienia, która występuje w komponencie /api/aaa;/../register.

A SQL injection vulnerability has been identified in DobryCMS. Improper neutralization of user input in the language functionality allows SQL Injection attacks. This affects older branches of the software.

A vulnerability in the firmware update mechanism of Nous W3 Smart WiFi Camera version 1.33.50.82 allows unauthenticated attackers with physical proximity to escalate privileges to root by supplying a crafted update.tar archive stored on a FAT32-formatted SD card.

Dell Storage Manager version 20.1.21 contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Authentication Bypass in DSM Data Collector allows access to APIs exposed by ApiProxy.war in DataCollectorEar.ear using a special SessionKey and UserId.

Dell Storage Center - Dell Storage Manager, version(s) DSM 20.1.21, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

W podatności CVE-2025-11145 w oprogramowaniu EnVision firmy CBK Soft występuje problem z ujawnieniem wrażliwych informacji osobistych osobom nieuprawnionym. Umożliwia to atakującym zbieranie informacji o kontach użytkowników.

Dell Storage Manager version 20.1.20 contains an improper restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could exploit it, leading to unauthorized access.

Funkcja Utils.deserialize w pgCodeKeeper w wersji 10.12.0 przetwarza zserializowane dane z nieufnych źródeł. Atakujący może dostarczyć specjalnie przygotowany plik .ser, co może prowadzić do niezamierzonego wykonania kodu lub innego złośliwego zachowania w systemie docelowym.

In the Linux kernel, the vhost subsystem lacks a reference to the task_struct. A task may exit early, and an attempt to wake it via vhost_task_wake() could access freed memory.

In the Linux kernel's cryptographic subsystem (af_alg), a bug was found where incorrect boolean values were assigned to 1-bit bitfields of type u32. The 'more' and 'merge' fields received values greater than 1, which were truncated modulo 2 in 1-bit bitfields, resulting in 0 being set instead of the intended 1.