CVE Vulnerability Catalog

A vulnerability in the GatesAir Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to obtain LDAP and SMTP credentials, potentially leading to privilege escalation.

IDSecure version 4.7.26.0 and prior uses a hardcoded cryptographic key to sign and verify JWT session tokens, allowing attackers to sign arbitrary session tokens and bypass authentication.

A path traversal vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to delete arbitrary files on IDSecure filesystem, causing a denial of service.

User enumeration is found in PHP Jabbers Time Slots Booking Calendar v3.3. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.

Improper input validation of the password parameter in PHP Jabbers Time Slots Booking Calendar v 3.3 results in insecure passwords.

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter.

The Ajaxmanager File and Database explorer module for PrestaShop through version 2.3.0 has an Unrestricted Upload of File with Dangerous Type vulnerability. This allows remote attackers to upload dangerous files without restrictions.

Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

Memory safety bugs exist in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs may lead to memory corruption, potentially allowing arbitrary code execution.

Memory safety bugs are present in Firefox and Thunderbird that may lead to memory corruption. Some of these bugs could potentially be exploited to run arbitrary code.

A command injection vulnerability in the wsConvertPpt component of Chamilo versions 1.11.* through 1.11.18. An attacker can execute arbitrary system commands via a SOAP API call with a crafted PowerPoint filename.

BMC Control-M versions up to 9.0.20.200 are vulnerable to SQL injection via the report-id parameter in the /RF-Server/report/deleteReport request. This issue is fixed in version 9.0.21 and also by a patch for version 9.0.20.200.

Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter at /agms/product.php.

Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via phpcgi_main. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin. This vulnerability only affects products that are no longer supported by the maintainer.

Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. This vulnerability only affects products that are no longer supported by the maintainer.

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin.

Remote Code Execution vulnerability in DedeCMS through version 5.7.109 allows an attacker to execute arbitrary code via a crafted POST request to /dede/tpl.php.

The vulnerability allows remote code execution in Ruijie Networks products, such as RG-EW home routers, RG-NBS and RG-S1930 switches, RG-EG VPN routers, and EAP and RAP access points. Attackers can gain the highest privileges via a crafted POST request to /cgi-bin/luci/api/auth.

Wifi Soft Unibox versions 3.0 and 3.1 are vulnerable to SQL Injection. The vulnerability occurs due to the lack of validation or sanitization of user input in the username field on the login page.