CVE Vulnerability Catalog

Podatność CVE-2025-11709 pozwala na wywołanie odczytów i zapisów poza dozwolonym zakresem w bardziej uprzywilejowanym procesie przez skompromitowany proces webowy, wykorzystując zmanipulowane tekstury WebGL. Problem został naprawiony w wersjach Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144 oraz Thunderbird 140.4.

W podatności CVE-2025-11708 występuje błąd use-after-free w funkcji MediaTrackGraphImpl::GetInstance(). Problem ten został naprawiony w wersjach Firefox 144, Firefox ESR 140.4, Thunderbird 144 oraz Thunderbird 140.4.

An Improper Neutralization of Formula Elements in a CSV File vulnerability exists in System Diagnostics Manager (SDM) of B&R Automation Runtime versions before 6.4, enabling a remote attacker to inject formula data into a generated CSV file. Exploitation requires the attacker to create a malicious link, the user to click it, and then the resulting CSV file to be manually opened.

Podatność CVE-2025-10610 dotyczy niewłaściwej neutralizacji specjalnych elementów używanych w poleceniach SQL, co prowadzi do możliwości przeprowadzenia ataku typu Blind SQL Injection w systemie Winsure. Problem ten dotyczy wersji oprogramowania do 21.08.2025.

A security issue exists within the Studio 5000 Logix Designer add-on profile (AOP) for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model (COM) methods.

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this vulnerability allows an attacker to obtain and use valid user passwords. This can lead to unauthorized access to user accounts, data breaches, and potential system compromise.

A vulnerability has been identified in SiPass integrated (All versions < V3.0). The affected server applications contain a broken access control vulnerability. The authorization mechanism lacks sufficient server-side checks, allowing an attacker to execute a specific API request.

A stored Cross-Site Scripting (XSS) vulnerability has been identified in SiPass integrated (all versions < V3.0) server applications. An attacker can inject malicious code that is executed by other users when they visit the affected page.

Zidentyfikowano podatność w urządzeniach SIMATIC CP 1542SP-1, CP 1542SP-1 IRC, CP 1543SP-1 oraz SIPLUS ET 200SP, które są w wersjach poniżej V2.4.24. Problemy dotyczą niewłaściwej autoryzacji połączeń konfiguracyjnych, co może umożliwić nieautoryzowanemu atakującemu zdalny dostęp do danych konfiguracyjnych.

A vulnerability has been identified in TeleControl Server Basic V3.1 (all versions >= V3.1.2.2 < V3.1.2.3). The affected application contains an information disclosure vulnerability that could allow an unauthenticated remote attacker to obtain password hashes of users and to log in and perform authenticated operations of the database service.

A vulnerability in SINEC NMS (all versions before V4.0 SP1) allows SQL injection through the getTotalAndFilterCounts endpoint. An authenticated low-privileged attacker could exploit it to insert data and achieve privilege escalation.

In the WLAN AP driver, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.

In gnss driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

In the GNSS driver, there is a possible out-of-bounds read due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained System privilege. User interaction is not needed for exploitation.

In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

In wlan AP driver, an out-of-bounds write due to incorrect bounds check could lead to remote (proximal/adjacent) privilege escalation without user interaction.

In wlan AP driver, an out-of-bounds write due to incorrect bounds check could lead to remote (proximal/adjacent) privilege escalation without user interaction.

In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00419945; Issue ID: MSV-3581.

In the WLAN AP driver, there is a possible out-of-bounds write due to an incorrect bounds check, which could lead to local escalation of privilege if an attacker already has System privilege. User interaction is not needed.

In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. No user interaction is needed for exploitation.