CVE Vulnerability Catalog

A weakness has been identified in RT-Thread up to version 5.0.2 in the function sys_getaddrinfo in file components/lwp/lwp_syscall.c. Manipulation of the ai_addr argument can lead to memory corruption. The attack requires local access and the exploit is publicly available.

A vulnerability was found in Open Asset Import Library Assimp up to version 6.0.4 in the function Assimp::Exporter::ExportToBlob in file code/AssetLib/Ply/PlyLoader.cpp. Manipulation in PLY model handling leads to a double free. The attack can be initiated remotely, and the exploit has been publicly disclosed.

A vulnerability in webpack-dev-server versions 5.2.5 and earlier crashes the entire Node.js process when an unauthenticated peer sends a malformed Host header in an HTTP request or a malformed Origin header in a WebSocket upgrade. The malformed value triggers an uncaught exception in the host-validation path, crashing the dev server.

A vulnerability in webpack-dev-server versions 5.2.5 and earlier allows an attacker to perform unauthorized actions on the dev server by sending GET requests to internal endpoints. The attack requires no user interaction beyond the developer visiting a malicious website while the dev server is running.

A flaw in Keycloak's Fine-Grained Admin Permissions (FGAP) v2 implementation allows a delegated administrator to view details of child groups they are not authorized to access. The system fails to properly filter child groups based on the caller's permissions when requested through a parent group.

A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions (FGAP) v2 is enabled. This allows a delegated administrator to attach or remove hidden client scopes they are not authorized to manage.

A vulnerability in Keycloak's administrative interface allows restricted administrators to view information about groups they should not have access to. When Fine-Grained Admin Permissions (FGAP v2) are enabled, an administrator who can see a specific role can also see all groups assigned to that role, without proper permission checks. This can expose hidden groups and their details, such as internal names and custom settings, potentially containing sensitive deployment information.

Two off-by-one errors in the FreeIPA ipa-otpd daemon's OAuth2 device authorization handler can cause out-of-bounds memory access when processing an oversized response from a configured external OAuth2/OIDC Identity Provider. An attacker who controls or can man-in-the-middle the IdP endpoint may be able to trigger ipa-otpd to write or read one byte past the end of a fixed-size buffer.

Dell PowerProtect Data Domain in multiple versions contains an OS command injection vulnerability. A high privileged attacker with local access could exploit this flaw to execute arbitrary commands.

The vulnerability in Dell PowerProtect Data Domain involves the use of an externally controlled format string. It allows a high-privileged attacker with remote access to cause information disclosure and denial of service.

Dell PowerProtect Data Domain in multiple versions contains an improper link resolution before file access vulnerability. It allows a high privileged attacker with remote access to disclose sensitive information.

Dell PowerProtect Data Domain in multiple versions contains an integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

A vulnerability in Prospero Flow CRM before version 5.5.3 allows an authenticated attacker to delete arbitrary calendar events of other users by manipulating the {id} parameter in a GET request to /calendar/event/delete/{id}. The lack of ownership check (user_id/company_id) before deletion leads to unauthorized data destruction.

Dell PowerProtect Data Domain in multiple versions contains an OS command injection vulnerability. The flaw is due to improper neutralization of special elements used in OS commands.

A vulnerability in Dell PowerProtect Data Domain allows unauthorized command execution by a local attacker with high privileges due to incorrect authorization.

Dell PowerProtect Data Domain in multiple versions contains an improper link resolution before file access vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

A vulnerability in Dell PowerProtect Data Domain allows insertion of sensitive information into log files. A low-privileged attacker with local access could exploit this to expose confidential data.

Dell PowerProtect Data Domain in multiple versions contains an improper link resolution before file access vulnerability. It allows a high privileged attacker with local access to gain unauthorized access to the system.

Dell PowerProtect Data Domain systems in multiple versions are vulnerable due to incorrect permission assignment for a critical resource. A high-privileged attacker with local access could exploit this to gain unauthorized access.

Dell PowerProtect Data Domain versions 7.7.1.0 through 8.6, LTS2026 release 8.6.1.0 through 8.6.1.10, LTS2025 release 8.3.1.0 through 8.3.1.30, and LTS2024 release 7.13.1.0 through 7.13.1.70 contain an improper access control vulnerability in RBAC. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information tampering.