CVE Vulnerability Catalog

A vulnerability has been identified in Teamcenter affecting versions V2312, V2406, V2412, V2506, and V2512. The issue involves a hardcoded key used for obfuscation, which could allow an attacker to obtain these keys and misuse them.

A vulnerability has been identified in Teamcenter that affects versions earlier than V2312.0014, V2406.0012, V2412.0009, V2506.0005, and V2512. The issue is due to improper encoding or filtering of user-supplied data, which could allow an attacker to inject malicious code.

Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser.

The vulnerability in affected devices is due to improper validation and sanitization of filenames on the Firmware Update page. A remote attacker can use social engineering to trick an authenticated user into selecting a modified firmware file, resulting in malicious JavaScript execution in the context of the user's session without requiring file upload, potentially leading to session hijacking or credential theft.

A vulnerability in SIMATIC CN 4100 (versions prior to V5.0) allows resource exhaustion via a high volume of TCP SYN packets. An attacker can cause service unavailability and denial-of-service conditions.

A vulnerability in RUGGEDCOM ROX devices allows an authenticated remote attacker to inject arbitrary commands during feature key installation. Insufficient input sanitization leads to remote code execution with root privileges.

Zidentyfikowano podatność w urządzeniach blueplanet, która pozwala na wykorzystanie algorytmu opartego na CRC16 do generowania poświadczeń serwisowych. Atakujący może wyprowadzić te poświadczenia z numeru seryjnego urządzenia, co prowadzi do nieautoryzowanego dostępu.

A null pointer dereference vulnerability in network devices when processing specially crafted IPv4 requests. An attacker can cause a denial of service condition, requiring a manual restart to recover.

The LifePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the 'n' parameter of the lp_update_mds AJAX action in all versions up to and including 2.2.2. This is due to the `wp_ajax_nopriv_lp_update_mds` action being registered without nonce verification or capability checks, combined with insufficient input sanitization and output escaping when the series name is rendered in the admin settings page.

CVE-2026-39432 in Arraytics Timetics has a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels.

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.4.17 due to insufficient escaping on user supplied parameters and lack of sufficient preparation on the existing SQL query in the getListForTbl() function.

An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus TCP Server stack if a race condition in connection handling is successfully exploited, preventing legitimate clients from establishing new connections.

The 'Kura Sushi Official App' provided by EPG, Inc. is vulnerable to improper certificate validation. A man-in-the-middle attack may allow eavesdropping on, or altering, the communication on push notifications between the affected application and the relevant server.

The Zyxel NWA1100-N firmware version contains a buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formUpgradeCert(), and formDelcert() functions. An attacker can exploit this flaw by sending a crafted HTTP request, potentially leading to a denial-of-service (DoS) condition.

A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to execute operating system (OS) commands on a vulnerable device by sending a crafted HTTP request.

The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter, exposing the authorization flow to CSRF attacks.

Due to an OS Command Execution vulnerability in SAP Forecasting & Replenishment, an authenticated attacker with administrative authorizations could abuse a non-remote-enabled function to execute arbitrary operating system commands. Successful exploitation could allow the attacker to read or modify any system data or shut down the system.

A vulnerability chain in Cribl Edge for Windows before version 4.17.1 allows a local authenticated user to escalate privileges to NT AUTHORITY\SYSTEM. Incorrect default permissions on the Windows installer's authentication directory expose a cryptographic secret used for JWT signing and password-hash derivation.

W Cribl Stream przed wersją 4.17.1 występuje podatność typu DOM-based cross-site scripting (XSS), która pozwala zdalnemu atakującemu na wykonanie dowolnego kodu JavaScript w przeglądarce uwierzytelnionego użytkownika, który zostanie oszukany do odwiedzenia spreparowanego URL-a i interakcji z stroną.

W Cribl Edge dla systemu Linux w wersjach od 3.2.0 do 4.17.0 występuje podatność na wstrzykiwanie poleceń, która pozwala lokalnemu użytkownikowi bez uprawnień na wykonywanie dowolnych poleceń w kontekście konta usługi Cribl Edge.