CVE Vulnerability Catalog

In macrozheng mall 1.0.3 dcaa93b, the OmsOrderServiceImpl.updateMoneyInfo function in /order/update/moneyInfo (mall-admin/mall-portal component) leads to incorrect calculation. The attack can be initiated remotely. The vendor deleted the GitHub issue for this vulnerability without explanation.

A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function child_process.exec of the file src/routes/setting/fileManagement/openFolder.ts of the component Open Folder Endpoint. Executing a manipulation of the argument path can lead to command injection. The attack needs to be launched locally. The exploit has been published and may be used. Upgrading to version 2.0.0 is sufficient to fix this issue. You should upgrade the affected component. The vendor explains: "The report targets ToonFlow version 1.1.8. The current release is 2.0.4, which is the result of a substantial architectural refactor; the code paths referenced in the report do not apply to the current version. The report does not describe a vulnerability in any supported release."

In fastify versions 5.12.2 through 5.12.5, the routine that lowercases header names declared in a route schema does not lowercase the enum or const header names nested inside a propertyNames subschema. As a result, a header allow-list or deny-list written with canonical (non-lowercase) casing never matches the incoming lowercased header, so a restricted header passes validation and reaches the route handler. An attacker can therefore bypass a case-sensitive header validation rule and smuggle a forbidden header past the schema, affecting the integrity of request handling. The issue is fixed in fastify 5.12.6.

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption.

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause "Exposure of Sensitive Information to an Unauthorized Actor" by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality, Integrity, and Availability.

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write" by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

AMI APTIOV contains a BIOS vulnerability that allows a local user to trigger a classic buffer overflow. Successful exploitation could lead to buffer overflows, memory corruption, and arbitrary code execution.

AMI APTIOV contains a BIOS vulnerability that allows a local user to trigger an integer overflow or wraparound. Successful exploitation could lead to buffer overflows, memory corruption, and arbitrary code execution.

NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading that allows an attacker to cause RCE by convincing a user to load a maliciously crafted file. Successful exploitation may lead to code execution, privilege escalation, information disclosure, and data tampering.

NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.

NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API that allows an unauthenticated remote attacker to access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy. Successful exploitation may lead to information disclosure and unauthorized start or stop operations.

NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend that allows an unauthenticated remote attacker to cause server-side request forgery by supplying a crafted original URL. Successful exploitation may lead to information disclosure.

NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component that allows a remote attacker to bypass pathname restrictions by supplying crafted archive member names to a dSort job. Successful exploitation may lead to arbitrary file creation or overwrite, code execution, information disclosure, data tampering, and denial of service.

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.

NVIDIA AIStore for Linux contains a vulnerability in the Promote API that allows an unauthenticated remote attacker to read files accessible to the target process by supplying a crafted absolute source path. Successful exploitation may lead to information disclosure.

NVIDIA DALI contains a vulnerability that allows an attacker to cause an uncontrolled out-of-bounds read. Successful exploitation may lead to information disclosure, data tampering, and denial of service.

NVIDIA DALI contains a vulnerability that allows an attacker to cause an uncontrolled out-of-bounds write. Successful exploitation may lead to denial of service, information disclosure, and data tampering.

NVIDIA DALI contains a vulnerability that allows an attacker to cause a stack-based buffer overflow. Successful exploitation may lead to code execution, information disclosure, data tampering, and denial of service.