CVE Vulnerability Catalog

An integer underflow vulnerability exists in FRRouting (FRR) versions stable/10.0 through stable/10.6. Attackers can cause a Denial of Service (DoS) by sending a crafted BGP UPDATE message.

The Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains a hardcoded authentication bypass vulnerability in the QR code scanning functionality. Attackers can exploit this flaw by supplying 'test' as the hash parameter, allowing access to sensitive order details.

BusyBox before commit 42202bf has a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler. A network-adjacent attacker can send a crafted DHCPv6 response with a malformed D6_OPT_DNS_SERVERS option to trigger memory corruption.

In the adbd_tls_verify_cert function of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote code execution as the shell user with no additional execution privileges needed.

In Apache OpenNLP before versions 1.9.5, 2.5.9, and 3.0.0-M3, a denial-of-service vulnerability exists due to unbounded array allocation in AbstractModelReader. The methods getOutcomes(), getOutcomePatterns(), and getPredicates() allocate arrays based on a 32-bit integer from the model file without validation, allowing an attacker to set the value to Integer.MAX_VALUE and trigger an OutOfMemoryError.

D-Link DIR-605L Hardware Revision A1 contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot with the username 'Alphanetworks' and the static password 'wrgn35_dlwbr_dir605l'.

PPTAgent is a framework for generating PowerPoint presentations. Prior to commit 418491a, PPTAgent was vulnerable to arbitrary code execution via Python eval() of LLM-generated code with builtins in scope.

Evolver is an AI engine that prior to version 1.69.3 had a path traversal vulnerability in the skill download command. Attackers could write files to arbitrary locations on the filesystem, posing a risk of overwriting critical system files.

An out-of-bounds read in the ParseIP6Extended function in gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) by supplying a crafted BGP UPDATE message.

NetBox versions 4.3.5 through 4.5.4 contain a remote code execution vulnerability in the RenderTemplateMixin.get_environment_params() method. It allows authenticated users with exporttemplate or configtemplate permissions to execute arbitrary code by specifying malicious Python callables in the environment_params field.

Memory corruption occurs when copying data from a freed source during a performance counter deselect operation. The flaw arises when data is copied from a memory area that has already been freed, potentially leading to unpredictable system behavior.

CVE-2025-47408 vulnerability involves memory corruption when another driver calls an IOCTL with an invalid input/output buffer.

CVE-2025-47407 is a vulnerability related to memory corruption when creating a process on the digital signal processor due to allocation failure at the kernel level.

CVE-2025-47405 involves memory corruption when processing camera sensor input/output control codes with invalid output buffers.

Apache Atlas has a code injection vulnerability that allows an attacker to alter Gremlin traversal logic by supplying malicious query strings. This can lead to unauthorized access to data.

An issue in Lymphatus caesium-image-compressor in all versions up to and including commit 02da2c6 allows a local attacker to execute arbitrary code via the shutdownMachine and putMachineToSleep functions in PostCompressionActions.cpp.

A double free vulnerability in Apache HTTP Server when handling HTTP/2 protocol may lead to remote code execution (RCE). This issue affects version 2.4.66.

A flaw was found in the AAP gateway where the user auto-link strategy, introduced in AAP 2.6, automatically links an external Identity Provider (IDP) identity to an existing AAP user account based on email matching without verifying email ownership. This allows a remote attacker to potentially hijack a victim's account or gain unauthorized access to other accounts, including administrative accounts, by manipulating the IDP-provided email.

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial() method.

Istnieje podatność na eskalację uprawnień podczas instalacji Norton Secure VPN za pośrednictwem Microsoft Store. Użytkownik z niskimi uprawnieniami może zastąpić pliki w trakcie procesu instalacji, co może prowadzić do usunięcia dowolnych plików i eskalacji uprawnień.