CVE Vulnerability Catalog

FUXA version 1.3.2 and earlier improperly handled session refresh, allowing an attacker with a previously issued privileged refresh cookie or access token to continue minting privileged JWTs even after account deletion, disablement, role removal, or demotion. This enabled continued unauthorized access to user management, project manipulation, runtime configuration, and backdoor-account creation. The issue is fixed in version 1.3.3.

Dell Alienware Command Center (AWCC) versions prior to 6.14.20.0 contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

ZEBRA (Zcash node) before version 4.5.0 has a vulnerability allowing an unauthenticated IPv4 peer to deterministically terminate a synced node. By completing a P2P handshake and advertising an invalid mempool transaction, the attacker can trigger an assertion in the code, causing a panic/abort that stops the node. The issue is fixed in version 4.5.0.

ZEBRA before version 4.5.0 has a vulnerability allowing a remote unauthenticated P2P peer to stall a node by racing an invalid block body against the valid canonical body for the same block header hash. This causes the node to reject the valid body and remain stuck one height behind until restart or reorganization. The issue is fixed in version 4.5.0.

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcp_actions() function.

FUXA before version 1.3.2 has a vulnerability allowing a remote unauthenticated attacker to perform SSRF (Server-Side Request Forgery) via the DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY Socket.IO handlers. By manipulating property.address or endpoint connection data, the attacker can make the server call axios.get against arbitrary HTTP/HTTPS destinations, including internal services, cloud metadata, OPC UA, or ODBC services. The issue is fixed in version 1.3.2.

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. A successful exploit might lead to denial of service.

NVIDIA Triton Inference Server for Linux contains a vulnerability that allows an attacker to cause unlimited resource allocation. Successful exploitation may lead to denial of service.

NVIDIA NVOS for network switches contains a vulnerability in the SSH server configuration when PKA-only mode is enabled. An administrator may inadvertently enable an alternative authentication path, which, if default passwords are not changed, could lead to unauthorized access and privilege escalation.

NVIDIA Cumulus Linux contains a vulnerability in the LLDP daemon, where an unauthenticated attacker on an adjacent network could cause a buffer overflow by sending crafted LLDP frames. Successful exploitation may lead to code execution.

NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could exploit improper privilege management. Successful exploitation may lead to privilege escalation.

The tar extraction routines in moby/go-archive do not confine filesystem operations to the destination directory. An attacker who controls the contents of an archive can create or overwrite files at arbitrary paths writable by the extracting process.

Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System before version 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs.

Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows unauthenticated remote attackers to cause denial of service by enrolling an agent with a dot-sequence name such as ".." through the enrollment port. Attackers exploit insufficient validation in OS_IsValidName() and unsafe path concatenation in delete_diff() to resolve the traversal to the parent queue directory, causing its subdirectories to be removed and stopping all Wazuh services requiring manual recovery.

Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit before version 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection.

Super Productivity prior to 18.13.0 contains a vulnerability in the EXEC IPC handler that accepts a command string from the renderer and executes it with child_process.exec(). The preload.js bridge exposes window.ea.exec() to renderer code, including community plugins, without requiring nodeExecution permission. A confirmation dialog protects only the first execution, and approved commands are stored in ALLOWED_COMMANDS for silent later execution with the desktop account's privileges.

An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl.MigrationServiceImpl.restoreWorkdir(), and org.springframework.util.FileSystemUtils.copyRecursively() components.

Berkeley Out-of-Order Machine (BOOM) commit 5223e44cfeb26f41380057a2eb4d651197475f69 contains a potential incorrect privilege assignment issue in the v3 and v4 NBDTLB implementations. The raw mstatus.SUM value participates in the read and write permission logic without an explicit local satp.MODE validity check at the use site.

Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authorized to access, bypassing per-initiator LUN access controls.

The sh library before version 2.2.4 incompletely drops privileges when using the _uid option on Linux and Unix systems. A process running with elevated privileges can retain the parent's supplementary groups, allowing the child to access files and resources reserved for privileged groups such as root, docker, disk, shadow, or sudo.