CVE Vulnerability Catalog

Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulnerability when loading .gdt files. A crafted .gdt file can trigger a buffer overflow, allowing an attacker to crash the application or execute malicious code.

Dräger SC monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain hard-coded plaintext credentials in source code and a denial-of-service vulnerability, allowing local and remote attackers to compromise device integrity across all software versions. A local attacker with direct device access can use hard-coded credentials to access service and clinical accounts and alter device configuration, while a remote attacker can send malformed network packets to cause repeated device reboots, resulting in loss of network connectivity and disruption of patient monitoring.

Dell ThinOS 10 versions prior to 2602_10.0765 contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.

NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

NVIDIA NVTabular has a vulnerability allowing improper deserialization of untrusted data. Successful exploitation may lead to code execution, data tampering, and information disclosure.

A vulnerability was determined in DedeCMS 5.7.88. The affected element is the function TrimMsg of the file /plus/feedback.php of the component Feedback Handler. Executing a manipulation of the argument msg can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability in the Mint library for Elixir allows an attacker-controlled HTTP/2 server to exhaust client memory via a CONTINUATION frame flood. There is no limit on the header accumulator size, leading to memory exhaustion and BEAM process death.

A vulnerability in the Mint library for Elixir allows an attacker-controlled HTTP/2 server to exhaust client memory via PUSH_PROMISE flooding. The server can create an unlimited number of stream entries without checking the max_concurrent_streams limit, leading to memory exhaustion.

In OpenTelemetry eBPF Instrumentation versions 0.7.0 to 0.8.9, a remotely reachable integer overflow in the memcached text protocol parser can crash the OBI process and cause denial of service.

In OpenTelemetry eBPF Instrumentation versions 0.1.0 to before 0.9.0, malformed MongoDB wire messages can trigger uncaught panics in the MongoDB TCP parser, allowing a remote unauthenticated attacker to crash the telemetry agent and cause a denial of service.

OpenTelemetry eBPF Instrumentation before version 0.9.0 has a bug in the Postgres protocol parser that assumes BIND message payloads contain a valid NUL-terminated portal name. A crafted empty or unterminated payload can cause OBI to slice beyond the buffer end and panic.

NiceGUI prior to version 3.12.0 has a vulnerability in ui.restructured_text() that renders reStructuredText server-side without disabling file insertion directives. An attacker can read local files accessible to the NiceGUI server process.

Authentication bypass using an alternate path or channel vulnerability in WP Swings Wallet System for WooCommerce. Allows password recovery exploitation. This issue affects versions up to and including 2.7.5.

BookIt by Liquid Web / StellarWP before version 2.5.4.1 contains an authentication bypass vulnerability via an alternate path or channel, allowing password recovery exploitation.

A high severity vulnerability in Security Center main server allows a local attacker with OS privileges to access Server Admin credentials. The issue is associated with specific installation builds rather than just the product version.

NamelessMC version 2.2.4 has a vulnerability in modules/Forum/pages/forum/get_quotes.php that allows low-privileged authenticated users to read content from hidden, private, or staff-only forums by enumerating post IDs. The backend does not enforce forum or topic ACLs.

A remote buffer overflow vulnerability in the /cgi-bin/dido/setdo.cgi endpoint of Vivotek FD8136 cameras (firmware FD8136-VVTK-0300a) allows an authenticated attacker to execute arbitrary code as root.

A post-authentication buffer overflow vulnerability in the /cgi-bin/admin/eventtask.cgi endpoint of the Vivotek FD8136 camera with firmware FD8136-VVTK-0300a allows an authenticated attacker to execute arbitrary code as root remotely.

A buffer overflow vulnerability in the VIVOTEK FD8136-VVTK-0300a camera allows a remote attacker to execute arbitrary code via the set_getparam.cgi component.

The SIP signaling stack in Verizon IMS implements SIP signaling without IPsec integrity protection. This allows an on-path attacker to compromise confidentiality, integrity, and authenticity of VoLTE signaling.