CVE Vulnerability Catalog

An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 before 1.7.1 Build 20260213 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed.

An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 before 1.7.1 Build 20260213 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed.

Default cryptographic keys are used in the hardware of some Intel Pentium Silver, Celeron J, and Celeron N processors. An adversary with hardware reverse engineering skills and privileged access can escalate privileges via a complex physical attack. The attack requires special internal knowledge but no user interaction.

The Advanced Contact form 7 DB plugin for WordPress up to version 2.0.9 lacks proper capability checks in the 'vsz_cf7_export_to_excel' function. This allows authenticated attackers with Subscriber-level access or higher to export form submissions to an Excel file.

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.9 due to missing or incorrect nonce validation on the 'vsz_cf7_save_setting_callback' function, allowing unauthenticated attackers to delete form entries via a forged request if they trick a site administrator into clicking a link.

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root. This affects systems with Linux-based line cards including various MPC, LC, MX, SRX, EX, and PTX models.

Kibana has an uncontrolled resource consumption vulnerability (CWE-400) leading to denial of service via excessive allocation (CAPEC-130). An authenticated user with access to the automatic import feature can submit specially crafted requests with excessively large input values. When multiple such requests are sent concurrently, backend services become unstable, causing service disruption and deployment unavailability for all users.

Kibana One Workflow has an SSRF vulnerability (CWE-918). An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.

In Red Hat Quay, the proxy cache configuration feature does not verify that the specified upstream registry hostname points to a legitimate external service. An organization administrator can supply a crafted hostname, forcing the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.

An eval() injection vulnerability in the Rapid7 Insight Agent beaconing logic for Linux versions could theoretically allow an attacker to achieve remote code execution as root via a crafted beacon response. Because the Agent uses mutual TLS (mTLS) to verify commands from the Rapid7 Platform, exploitation is unlikely without prior, highly privileged access to the backend platform.

Incorrect authorization in Kibana allows a user with Fleet management privileges in one space to retrieve Fleet Server policy details from other spaces via an internal enrollment endpoint that bypasses space-scoped access controls.

A Server-Side Request Forgery (SSRF) vulnerability was found in Red Hat Quay and mirror registry for Red Hat OpenShift in the log export feature. An authenticated user can specify an arbitrary callback URL, and a backend process makes server-side HTTP requests to that URL. An attacker could use this to send requests from the application's internal network, potentially leading to disclosure of sensitive information.

Urządzenia Siklu EtherHaul 8010 z oprogramowaniem siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b mają statyczne hasło dla konta root.

A flaw in OpenShift Mirror Registry allows an unauthenticated remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.

The rfc3161-client library prior to version 1.0.6 contains an authorization bypass vulnerability in signature verification. An attacker can impersonate a trusted Time-Stamping Authority (TSA) by exploiting a flaw in extracting the leaf certificate from an unordered PKCS#7 certificate bag.

A vulnerability in Axios from version 1.13.0 to 1.13.1. The HTTP/2 session cleanup logic contains a state corruption bug that allows a malicious server to crash the client through concurrent session closures.

Hono, a web framework supporting any JavaScript runtime, prior to version 4.12.12 has a vulnerability due to a discrepancy between browser cookie parsing and the parse() function, allowing cookie prefix protections to be bypassed and attacker-controlled cookies to override legitimate ones.

Hono prior to version 4.12.12 does not canonicalize IPv4-mapped IPv6 client addresses before applying IPv4 allow/deny rules in ipRestriction().

In Hono prior to version 4.12.12, a path handling inconsistency in serveStatic allows access to protected static files by using repeated slashes (//) in the request path. This can lead to a bypass of route-based authorization.

@hono/node-server before version 1.19.13 has a path handling inconsistency in serveStatic that allows protected static files to be accessed by using repeated slashes (//) in the request path. Route-based middleware may not match paths with repeated slashes, while serveStatic resolves them as normalized paths, leading to a middleware bypass.