CVE Vulnerability Catalog

A vulnerability in Juniper Junos OS on MX Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS) by continuously flapping Micro-BFD sessions. This overloads the PFEMAN process, preventing it from completing event processing, leading to watchdog timer expiry and FPC crash.

An Out-of-bounds Write vulnerability in the SNMP daemon (snmpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to trigger a memory leak by sending specific valid SNMPv3 queries. Continuous receipt of these queries leads to snmpd process memory exhaustion, causing a crash and restart, impacting SNMP-based system monitoring.

A vulnerability in the advanced forwarding toolkit (evo-aftmand) of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated network-based attacker to generate continuous routing updates, causing the evo-aftmand process on the PFE to crash, leading to a Denial-of-Service (DoS). Successful exploitation depends on a sequence of events outside the attacker's direct control.

The Mercusys MW302R device running firmware version MW302R(EU)_V1_1.4.10 Build 231023 contains a buffer overflow vulnerability in the administrative web interface. An authenticated attacker with administrative privileges can send a specially crafted request, causing a system crash.

A NULL pointer dereference vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a local high-privileged attacker to set or deactivate a specific SSH configuration parameter, causing an mgd process crash and Denial of Service (DoS).

An improper certificate validation vulnerability in the Prisma Access Agent for iOS allows an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. Other platforms (Windows, macOS, Linux, Android, ChromeOS) are not affected.

A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser on macOS allows a locally authenticated administrator with access to the local filesystem to perform actions with root privileges.

A vulnerability in Mockoon prior to version 9.7.0 allows an unauthenticated client to read files outside the served directory. The issue stems from an improper path check in the getSafeFilePath function that lacks a path-separator boundary, enabling bypass via ../ sequences.

A vulnerability in ChatterBot prior to version 1.2.14 allows a local attacker to write archive contents to an attacker-chosen directory by pre-planting a symlink at the predictable output path (~/ubuntu_data/ubuntu_dialogs). This is due to a check-then-create pattern followed by tar.extractall() without proper validation.

A vulnerability in the CakePHP Authentication plugin allows bypassing redirect restrictions via backslash characters in the redirect parameter. An attacker can control the target hostname, enabling phishing or other social engineering attacks.

In Kirby CMS before versions 4.9.4 and 5.4.4, with content.fileRedirects enabled, unauthenticated clean file URL requests for files in top-level draft pages are redirected to physical media URLs without checking page access permissions or preview tokens, leading to disclosure of draft file contents.

A vulnerability in Kirby CMS allows HTTP header injection via newline characters in the header value of the headers option in the Http Remote class. An attacker can inject an unintended header into outgoing requests.

A vulnerability in the Kirby content management system allows authenticated users with the pages.access permission disabled to confirm the existence of inaccessible pages and retrieve their titles via the pages field. The issue is fixed in versions 4.9.4 and 5.4.4.

An SSRF vulnerability in Palo Alto Networks PAN-OS software allows an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The risk is minimized when the management interface is restricted to trusted internal IP addresses.

A file deletion vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker with network access to the management web interface to delete files from a temporary directory. This issue affects PA-Series and VM-Series firewalls and Panorama (virtual and M-Series).

Multiple cross-site scripting vulnerabilities in the User-ID Authentication Portal (Captive Portal), GlobalProtect gateway/portal features, and Clientless VPN of Palo Alto Networks PAN-OS software allow an unauthenticated attacker to store or execute malicious JavaScript payloads.

The Superior Court of California Hearing Reminder Service exposes an API endpoint that returns court reminder records containing potentially sensitive information without authentication.

Ghost, a Node.js content management system, from version 6.27.0 before 6.44.0 had a vulnerability in the public donation checkout flow. An unauthenticated attacker could control donation checkout metadata and obtain full paid gift memberships for a minimal payment.

An authenticated administrator may achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1.

A vulnerability was found in TOTOLINK X5000R versions 9.1.0cu.2415_B20250515 and 9.1.0cu.2350_B20230313 in the exportOvpn function of the /web/cgi-bin/cstecgi.cgi file within the OpenVPN Export component. This vulnerability allows remote path traversal attacks.