CVE Vulnerability Catalog

Pega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface component. Exploitation requires a high privileged user with a developer role.

A buffer overflow vulnerability exists in the Tenda F3 router version V12.01.01.48_multi and later. The issue is triggered via the wifiTimeClose parameter in the goform/setWifi function.

A buffer overflow vulnerability exists in the Tenda F3 device version V12.01.01.48_multi and later, in the onlineList parameter of the goform/setParentControl function. An attacker can remotely cause a crash or potentially take control of the device.

A buffer overflow vulnerability exists in Tenda F3 router version V12.01.01.48_multi and later. The issue is triggered via the macFilterList parameter in the goform/setNAT request.

A buffer overflow vulnerability exists in the Tenda F3 router version V12.01.01.48_multi and later via the QosList parameter in the goform/setQoS function. An attacker can remotely crash the device or potentially gain control over it.

A buffer overflow vulnerability has been discovered in the Tenda F3 router version V12.01.01.48_multi and later. The issue resides in the portList parameter of the /goform/setNAT endpoint.

Podatność w implementacji protokołu ARP w oprogramowaniu Cisco IOS XR może pozwolić nieautoryzowanemu, sąsiedniemu atakującemu na wywołanie burzy broadcastowej, co prowadzi do stanu odmowy usługi (DoS) na dotkniętym urządzeniu. Problem wynika z przetwarzania wysokiej, ciągłej ilości ruchu ARP na interfejsie zarządzania.

A vulnerability in the installation process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass image signature verification and load unsigned software. This is due to incomplete validation of files during .iso installation.

A vulnerability in the management interface access control list (ACL) processing feature in Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass configured ACLs for the SSH, NetConf, and gRPC features. This occurs because management interface ACLs are not supported on Packet I/O infrastructure platforms for Linux-handled features.

W mcp-neo4j w wersji 0.3.0 odkryto problem, który pozwala atakującym na uzyskanie wrażliwych informacji lub wykonanie dowolnych poleceń za pośrednictwem usługi SSE. Producent twierdzi, że uwierzytelnianie nie jest obowiązkowe dla serwerów MCP, które są przeznaczone do użytku w lokalnym środowisku.

Incorrect file handling permission bug in N-central Windows Agent and Probe allows a local low-level user to run commands with elevated permissions under certain circumstances.

Wtyczka Resideo dla motywu WordPress Real Estate jest podatna na eskalację uprawnień poprzez przejęcie konta we wszystkich wersjach do 2.5.4 włącznie. Problem wynika z niewłaściwej walidacji tożsamości użytkownika przed aktualizacją jego danych, takich jak adres e-mail.

Missing Encryption of Sensitive Data (CWE-311) in the Object Archive component in AxxonSoft Axxon One (C-Werk) before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at rest.

Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session module in AxxonSoft Axxon One (C-Werk) 2.0.6 and earlier on Windows allows a remote attacker under high load conditions to cause application crashes or unpredictable behavior via memory reallocation errors when handling expired session keys.

Insufficient Session Expiration in the Web Admin Panel in AxxonSoft Axxon One (C-Werk) prior to 2.0.3 on Windows allows an authenticated attacker to retain access with removed privileges via continued use of an unexpired session token until natural expiration.

A vulnerability in the diagnostic component of AxxonSoft Axxon One VMS (C-Werk) versions 2.0.0 through 2.0.1 on Windows allows a local attacker to obtain licensing-related information such as timestamps, license states, and registry values by reading diagnostic export files created by the built-in troubleshooting tool.

Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows allows a local attacker to obtain plaintext credentials by reading TRACE log files containing serialized JSON with passwords.

Use of unmaintained third-party components (CWE-1104) in NuGet dependencies in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via vulnerable packages such as Google.Protobuf, DynamicData, System.Runtime.CompilerServices.Unsafe, and others.

DLL search order hijacking vulnerability in wave.exe for Windows 11, version 1.27.8. Attackers with local access can execute arbitrary code by placing a file in the 'C:\Users<user>\AppData\Local\Temp' directory, leading to code execution and persistence. This affects only Windows 11, not earlier versions.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in Azon Dominator. An attacker can execute JavaScript code in the victim's browser by sending them a malicious URL using the “q” parameter in /search via GET. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.