CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.23)
The Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup.
COMFAST CF-XR11 version V2.7.2 has a command injection vulnerability detected at function sub_4143F0. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter timestr.
Version 2.7.2 of the COMFAST CF-XR11 device contains a vulnerability that allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub_410074 function in the bin/webmgnt file.
Version 2.7.2 of the COMFAST CF-XR11 device contains a vulnerability that allows an attacker to execute arbitrary code via the destination parameter of the sub_431F64 function in the bin/webmgnt file.
An issue in Wavlink WL_WNJ575A3 v.R75A3_V1410_220513 allows a remote attacker to execute arbitrary code via the username parameter of the set_sys_adm function in adm.cgi.
Versions of llama_index up to 0.7.13 contain a vulnerability that allows a remote attacker to execute arbitrary code via the `exec` parameter in the PandasQueryEngine function.
An issue in pandas-ai versions 0.9.1 and earlier allows a remote attacker to execute arbitrary code via the _is_jailbreak function.
Versions of langchain langchain-ai up to 0.0.232 contain a vulnerability that allows a remote attacker to execute arbitrary code via a crafted script in the PythonAstREPLTool._run component.
File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbitrary code via the upload type function.
Versions of Harrison Chase langchain up to 0.0.194 contain a vulnerability that allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_prompt functions.
An issue in Alluxio v.2.9.3 and before allows an attacker to execute arbitrary code via a crafted script to the username parameter of lluxio.util.CommonUtils.getUnixGroups(java.lang.String).
Version 0.0.231 of LangChain contains a vulnerability that allows a remote attacker to execute arbitrary code via the prompt parameter.
CVE-2023-35082 is an authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allowing unauthorized users to access restricted functionality or resources of the application without proper authentication.
PrivateUploader is an image hosting server that in affected versions did not correctly verify whether the user was an administrator or moderator. This led to processing requests even when the response indicated insufficient permissions.
The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitize and escape several parameters before using it in a SQL statement as part of its exportation feature, allowing unauthenticated attackers to conduct SQL injection attacks.
A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands within the context of the system.
A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through version 1.2.5.23, which could allow a malicious actor to access sensitive information and execute arbitrary database and management operations.
xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), leading to a pointer/overflow issue. This can only occur for xterm installations configured at compile time to use a certain experimental feature.
A heap-based buffer overflow vulnerability exists in the GitHub repository radareorg/radare2 prior to version 5.9.0.
An out-of-bounds memory access vulnerability in ONLYOFFICE DocumentServer versions 4.0.3 through 7.3.2. A remote attacker can execute arbitrary code using a crafted JavaScript file.