CVE Vulnerability Catalog

Stack-based buffer overflow vulnerability in ASDA-Soft software. Details are sparse, but it may allow remote code execution or crash.

Stack-based buffer overflow vulnerability in ASDA-Soft software. Details are sparse, but it may allow remote code execution or crash.

YAML::Syck for Perl before version 1.36 has missing null terminators, causing out-of-bounds read and potential information disclosure. The issue is in token.c and occurs with complex YAML files containing a hash of all keys and empty values.

go-witness and witness modules in versions go-witness 0.8.6 and earlier and witness 0.9.2 and earlier improperly verify AWS EC2 instance identity documents. Verification can incorrectly succeed when a signature is missing or empty, and when RSA signature verification fails. An attacker able to supply or intercept instance identity document data can cause a forged document to be accepted, leading to incorrect trust decisions.

A logic issue in macOS was addressed with improved restrictions. The issue affects macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. An app may be able to access sensitive user data.

Problem został rozwiązany poprzez poprawę uwierzytelniania. Wersja macOS Sequoia 15.6 zawiera poprawkę, która eliminuje tę podatność. Lokalny atakujący może być w stanie podnieść swoje uprawnienia.

The issue was resolved by not loading remote images. This issue is fixed in iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in Mail in Lockdown Mode.

Improper certificate validation when connecting to gateways in Devolutions Server 2025.3.2 and earlier allows attackers in MitM position to intercept traffic.

A data corruption vulnerability in the luksmeta utility for LUKS1 allows overwriting encrypted data by writing excessive metadata. Lack of space validation leads to permanent loss of user data.

In versions before 20.0.2, it was found that --disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript in happy-dom. The untrusted script and the rest of the application still run in the same Isolate/process, so attackers can deploy prototype pollution payloads to hijack important references like "process" in the example below, or to hijack control flow via flipping checks of undefined property. This vulnerability is due to an incomplete fix for CVE-2025-61927. The vulnerability is fixed in 20.0.2.

Frigate to rejestrator wideo (NVR) z lokalnym wykrywaniem obiektów w czasie rzeczywistym dla kamer IP. W wersjach przed 0.16.2, proces eksportu Frigate pozwalał uwierzytelnionemu operatorowi na wskazanie dowolnej lokalizacji systemu plików jako źródła miniatury dla eksportu wideo, co mogło prowadzić do odczytu dowolnych plików na hoście.

sveltekit-superforms v2.27.3 and prior are susceptible to a prototype pollution vulnerability in the parseFormData function. An attacker can inject string and array properties into Object.prototype, leading to denial of service, type confusion, and potential remote code execution in downstream applications. Fixed in 2.27.4.

The OpenSearch sink and source plugins in Data Prepper prior to version 2.12.2 trust all SSL certificates by default when no certificate path is provided. This allows attackers to intercept and modify data in transit via man-in-the-middle attacks.

Mailgen (Node.js package) through version 2.0.31 contains an HTML injection vulnerability in plaintext emails generated with the generatePlaintext method when user generated content is supplied. Tags with certain Unicode line separator characters are not removed, allowing unexpected HTML to remain in output.

CommandKit is the discord.js meta-framework for building Discord bots. In versions 1.2.0-rc.1 through 1.2.0-rc.11, a logic flaw exists in the message command handler that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling command aliases. When a message command is invoked using an alias, the ctx.commandName value reflects the alias rather than the canonical command name. This occurs in both middleware functions and within the command's own run function. Although not explicitly documented, CommandKit's examples and guidance around middleware usage implicitly convey that ctx.commandName represents the canonical command identifier. Middleware examples in the documentation consistently use ctx.commandName to reference the command being executed. Developers who assume ctx.commandName is canonical may introduce unintended behavior when relying on it for logic such as permission checks, rate limiting, or audit logging. This could allow unauthorized command execution or inaccurate access control decisions. Slash commands and context menu commands are not affected. This issue has been patched in version 1.2.0-rc.12, where ctx.commandName now consistently returns the actual canonical command name regardless of the alias used to invoke it.

Some Zoom Rooms Clients before version 6.5.1 contain an Authentication bypass vulnerability. It may allow an unauthenticated user to conduct a disclosure of information via network access.

Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.

Creative Cloud Desktop versions 6.7.0.278 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to arbitrary file system write. A low-privileged attacker could exploit the timing between the check and use of a resource, potentially allowing unauthorized modifications to files. Exploitation of this issue does not require user interaction.

A vulnerability in the Snort 3 HTTP Decoder due to a buffer handling error when parsing MIME fields of the HTTP header can result in a buffer under-read. An unauthenticated remote attacker can send crafted HTTP packets to cause information disclosure or a crash of the Snort 3 Detection Engine.

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, IP Phone 7800/8800 Series, and Video Phone 8875 running Cisco SIP Software allows an unauthenticated, remote attacker to conduct XSS attacks against a user of the web UI. The issue exists due to insufficient validation of user-supplied input. Exploitation requires the user to click a crafted link, and the phone must be registered to Cisco Unified Communications Manager with Web Access enabled (disabled by default).