CVE Vulnerability Catalog

A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit which results in excessive memory and CPU consumption of Vault. This may lead to a timeout in Vault's auditing subroutine, potentially resulting in the Vault server to become unresponsive.

A vulnerability was detected in Comfast CF-N1 2.6.0 affecting the multi_pppoe function of the file /usr/bin/webmgnt. Manipulation of the phy_interface argument results in command injection. The attack may be initiated remotely and the exploit is now public.

A security vulnerability has been detected in LB-LINK BL-X26 1.2.8 affecting an unknown function of the file /goform/set_blacklist (HTTP Handler component). Manipulation of the mac argument leads to OS command injection. The attack can be launched remotely and the exploit has been publicly disclosed.

A weakness has been identified in LB-LINK BL-X26 1.2.8. The impacted element is an unknown function of the file /goform/set_hidessid_cfg of the component HTTP Handler. This manipulation of the argument enable causes os command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0 in the Administrative Interface component, where manipulation of the file /etc/shadow.sample results in use of default credentials. Attacking locally is a requirement and the attack is highly complex. The exploit has been released to the public and may be exploited.

An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP packet.

A vulnerability was identified in seeedstudio ReSpeaker LinkIt7688, affecting an unknown function of the file /etc/shadow (Administrative Interface component). Manipulation leads to the use of default credentials. The attack requires local access and is highly complex. The exploit is publicly available and the vendor did not respond to the disclosure.

Improper input validation in firmware of some Solidigm DC Products may allow an attacker with local access to cause a Denial of Service.

Valtimo to platforma do automatyzacji procesów biznesowych. W wersjach przed 12.16.0.RELEASE oraz od 13.0.0.RELEASE do przed 13.1.2.RELEASE, administratorzy mogą uzyskać dostęp do wrażliwych danych lub zasobów, co może prowadzić do uruchamiania programów na hoście aplikacji oraz przeglądania i wydobywania danych z środowiska hosta.

XWiki Platform stores sensitive cookies unencrypted in job statuses for PDF export. Access to a backup of the data directory can reveal plain text passwords. Patched in versions 16.4.8, 16.10.7, and 17.4.0-rc-1.

Paymenter to darmowe i otwarte rozwiązanie sklepu internetowego dla hostingów. W wersjach przed 1.2.11 funkcjonalność załączników biletów pozwalała złośliwemu uwierzytelnionemu użytkownikowi na przesyłanie dowolnych plików, co mogło prowadzić do wycieku wrażliwych danych z bazy danych oraz uruchamiania dowolnych poleceń systemowych w kontekście użytkownika serwera WWW.

Volto, frontend oparty na React dla systemu zarządzania treścią Plone, ma podatność w wersjach od 19.0.0-alpha.1 do przed 19.0.0-alpha.4, 18.0.0 do przed 18.24.0, 17.0.0 do przed 17.22.1 oraz przed 16.34.0. Użytkownik anonimowy może spowodować, że serwer NodeJS Volto zakończy działanie z błędem po odwiedzeniu określonego URL.

Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the security_5g parameter in the function sub_46284C.

In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, 243.284.50 information disclosure was possible via search_project function.

In JetBrains IDE Services before 2025.5.0.1086 and 2025.4.2.2164, users without appropriate permissions could assign high-privileged roles for themselves.

A File Upload Validation Bypass vulnerability has been identified in HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload process. An attacker may exploit this flaw to upload malicious or unauthorized files, such as scripts, executables, or web shells, by bypassing client-side or server-side validation mechanisms.

HCL BigFix SM is affected by a cryptographic weakness due to weak or outdated encryption algorithms. An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions.

HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components.

Meitrack T366G-L GPS Tracker devices contain an SPI flash chip (Winbond 25Q64JVSIQ) accessible without authentication or tamper protection. An attacker with physical access can use a standard SPI programmer and flashrom to extract the firmware. This exposes sensitive configuration data such as APN credentials, backend server information, and network parameters.