CVE Vulnerability Catalog

Problem w SunOS Omnios v5.11 umożliwia atakującym spowodowanie odmowy usługi (DoS) poprzez wielokrotne wysyłanie spreparowanych pakietów TCP.

VMware Tools dla systemu Windows zawiera lukę w zakresie niewłaściwej autoryzacji, wynikającą z błędnego zarządzania kontrolą dostępu użytkowników. Złośliwy aktor z nieadministracyjnymi uprawnieniami na gościnnej maszynie wirtualnej, który jest już uwierzytelniony przez vCenter lub ESX, może wykorzystać tę lukę do uzyskania dostępu do innych gościnnych maszyn wirtualnych.

The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attacker could intercept the web request handling the login and obtain the credentials.

Zidentyfikowano podatność w REST API Obsidian Scheduler w wersjach 5.0.0 do 6.3.0, która pozwala na użycie podstawowej autoryzacji nawet po zablokowaniu konta z powodu braku rejestracji w MFA. Mimo zablokowania domyślnego konta administratora przez interfejs webowy, możliwe jest jego wykorzystanie przez REST API do tworzenia nowych uprzywilejowanych użytkowników, omijając zabezpieczenia MFA.

The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during email update workflows. An authenticated attacker controlling a user account with a lower user ID can update their email address to that of another user with a higher user ID without proper verification. This results in the victim's email being reassigned to the attacker's account, causing the victim to be locked out immediately and unable to log in. The vulnerability leads to denial of service via account lockout but does not grant the attacker direct access to the victim's private data.

IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions.

W podatności CVE-2024-13150 występuje niewłaściwa neutralizacja specjalnych elementów używanych w poleceniach SQL, co prowadzi do możliwości ataku typu SQL Injection w systemie fayton.Pro ERP. Problem ten dotyczy wersji oprogramowania do 29 września 2025 roku.

In Progress Chef Automate (versions earlier than 4.13.295) on Linux x86, an authenticated attacker can gain access to restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token.

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command.

DataSpider Servista 4.4 and earlier has an improper restriction of XML external entity reference (XXE) issue. Processing a specially crafted request may allow reading arbitrary files on the file system where the server application is installed, or cause a denial-of-service (DoS) condition.

A security flaw in Ruijie NBR2100G-E up to 20250919 affects the listAction function of /itbox_i/branch_passw.php?a=list. Manipulation of the city argument results in OS command injection. The attack can be performed remotely and the exploit is public.

Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox. This issue affects Terra AC wallbox through version 1.8.33.

Zidentyfikowano podatność w systemie ERP Bjskzy Zhiyou do wersji 11.0, dotycząca funkcji openForm komponentu com.artery.richclient.RichClientService. Manipulacja argumentem contentString prowadzi do odniesienia do zewnętrznych jednostek XML.

A vulnerability in Bjskzy Zhiyou ERP up to 11.0 affects the uploadStudioFile function of com.artery.form.services.FormStudioUpdater. Manipulation of the filepath argument causes path traversal. Remote exploitation is possible and the exploit is public.

A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common/common.php. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used.

A vulnerability has been found in GstarCAD (up to version 9.4.0) in an unknown function of the file renaming handler component. The manipulation leads to cross-site scripting (XSS). The attack may be initiated remotely, and the exploit has been publicly disclosed.

YiFang CMS up to 2.0.2 has an unrestricted file upload vulnerability in the webUploader function of app/app/controller/File.php in the Backend component. Manipulating the uploadpath argument allows remote attacks. The exploit has been published.

Wykryto podatność w oprogramowaniu do zarządzania projektami pmTicket do wersji 2ef379da2075f4761a2c9029cf91d073474e7486. Affected element to funkcja loadLanguage w pliku classes/class.database.php komponentu Cookie Handler, która pozwala na deserializację poprzez manipulację argumentem user_id.

A security vulnerability was detected in Cudy TR1200 (version 1.16.3-20230804-164635) in an unknown function of /cgi-bin/luci/admin/network/wireless/config/, within the wireless settings component. Manipulation of the SSID argument leads to cross-site scripting (XSS). Remote exploitation is possible, and the exploit has been publicly disclosed.