CVE Vulnerability Catalog

kas is a setup tool for bitbake based projects. In versions from 4.8 to before 5.3, kas checks out and processes repositories and configuration includes prior to validating signatures of those repositories. Under very specific conditions, this may allow an attacker to replace the original repository with one under their control.

kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID (SHA-1 or SHA-256) to verify repository integrity, users may be tricked into checking out a branch of the same name from a compromised repository. This primarily affects SHA-256 commit IDs, as SHA-1 may be vulnerable to hash collisions.

A flaw has been found in TRENDNET TEW-813DRU 1.01b01 in the file /etc/vsftpd.conf of the vsftpd component. This manipulation causes incorrect default permissions. The attack can be carried out remotely but requires high complexity and is considered difficult to exploit. This vulnerability only affects products no longer supported by the maintainer.

A weakness has been identified in Webkul Bagisto up to 2.4.4 in the file /admin/customers/search of the Customer Search component. Manipulating the Query argument can lead to information disclosure. The attack can be launched remotely, and the exploit is publicly available. The vendor confirms that the issues are already known and partially addressed.

A vulnerability was identified in Webkul Bagisto up to 2.4.4 in the Customer Item Deletion Endpoint component. The manipulation leads to improper access controls. The attack can be launched remotely, and the exploit is publicly available. The vendor confirms that the issues are already known and partially addressed.

A vulnerability was determined in DTStack Taier version 1.4.0, affecting the FileUtils.deleteDirectory function in ClusterController.java. Manipulation of the clusterName argument causes path traversal. Remote exploitation is possible.

A vulnerability was detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. The RTSP/ONVIF component has missing authentication, allowing remote attacks, though the attack is considered difficult.

A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. The function CWebSessionManager_ParseSession in /user/bin/Kylin of the Kylin Web Service component has insufficient entropy in the SESSION argument, allowing remote attacks, though difficult.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management.

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal.

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to delete arbitrary files due to path traversal.

Webhook Authorization Header Returned in Plaintext via API.

Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API.

Null pointer dereference in the AddTime API causes authenticated denial of service.

Blind SSRF vulnerability in OAuth2 avatar synchronization via unvalidated OIDC picture claim.

In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collaboration (ZCS) due to insufficient validation of request content types. An attacker can exploit this vulnerability by causing an authenticated user to submit a crafted request, potentially allowing unauthorized actions to be performed on behalf of the victim.

In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorized disclosure of protected files, such as WEB-INF/web.xml, within the web application directory. This occurs in the Forward servlet.

In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase document editing functionality due to improper validation of the packages parameter. An authenticated attacker can exploit this vulnerability by supplying a crafted path traversal sequence, potentially allowing unauthorized disclosure of sensitive files within the web application directory.

An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without possessing the required delegation or send-as permissions. This occurs in the SaveDraftRequest SOAP handler.

HCL AION is affected by a vulnerability where JavaScript responses containing data could be referenced by external pages, potentially allowing sensitive information to be captured by an attacker-controlled page (JavaScript hijacking) under certain conditions.