CVE Vulnerability Catalog

An OS command injection vulnerability was detected in Wavlink NU516U1 240425 in the WifiBasic function of /cgi-bin/wireless.cgi. Manipulating arguments AuthMethod/EncrypType allows remote command execution. The exploit is publicly available.

A security vulnerability has been detected in Wavlink NU516U1 240425. The function advance in the file /cgi-bin/wireless.cgi is affected by OS command injection via manipulation of arguments wlan_conf, Channel, skiplist, or ieee_80211h. The attack can be launched remotely and the exploit has been disclosed.

An OS command injection vulnerability was identified in Wavlink NU516U1 240425 in the wzdapMesh function of /cgi-bin/adm.cgi. The attack can be performed remotely. The exploit has been made public.

A vulnerability was discovered in Open5GS up to version 2.7.7 in the function ogs_pcc_rule_install_flow_from_media in the library /lib/proto/types.c. Manipulation leads to denial of service. The attack can be launched remotely. The exploit is publicly available.

A vulnerability was discovered in Open5GS up to version 2.7.7 in the function pcf_npcf_smpolicycontrol_handle_delete in the file src/pcf/sm-sm.c in the delete Endpoint component. Manipulation leads to denial of service. The attack can be launched remotely. The exploit is publicly available.

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, a mismatch between encoding lists in Oniguruma and mbfl leads to a NULL pointer dereference and denial of service. Exploitable when user input influences the encoding passed to mb_regex_encoding().

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, an attacker can craft a URL that causes arbitrary JavaScript execution (XSS) on the target's machine when viewing the PHP-FPM status page.

In Open5GS up to version 2.7.7, a vulnerability exists in the function pcf_sess_set_ipv6prefix in file /src/pcf/context.c of the PCF component. Manipulation of the argument SmPolicyContextData.ipv6AddressPrefix can lead to denial of service (DoS). The attack can be launched remotely, and the exploit has been publicly disclosed.

Open5GS up to version 2.7.7 has a vulnerability in the pcf_sess_sbi_discover_and_send function of the sm-policies Endpoint component. Input manipulation can lead to denial of service. The attack is remote, and the exploit is public. The project was notified but has not responded.

Open5GS up to version 2.7.7 has a vulnerability in the pcf_nbsf_management_handle_register function in src/pcf/nbsf-handler.c of the sm-policies Endpoint component. Input manipulation leads to denial of service. The attack is remote, and the exploit is public. The project was notified but has not responded.

A security vulnerability has been found in Industrial Application Software IAS Canias ERP 8.03 in the RMI interface. The Runtime.getRuntime.exec function allows OS command injection via the troiaCode argument. The attack can be performed remotely and the exploit has been made public.

Path traversal vulnerability in the RMI interface of Canias ERP 8.03. Manipulation of the m_strSourceFileName argument in the iasRequestFileEvent function allows remote attack.

Vulnerability in IAS Canias ERP 8.03 in the RMI Interface component, where manipulation of the sessionId argument in the doAction function leads to improper authentication. Remote attack possible, exploit publicly available.

In OSGeo gdal up to version 3.13.0dev-4, a vulnerability exists in the function GDSDfldsrch in file frmts/hdf4/hdf-eos/GDapi.c of the Grid File Handler component. Manipulation leads to a heap-based buffer overflow. The attack must be local. The exploit has been disclosed. Upgrading to version 3.13.0RC1 resolves the issue.

A flaw has been found in OSGeo gdal up to version 3.13.0dev-4. The function SWSDfldsrch in file frmts/hdf4/hdf-eos/SWapi.c is affected. Manipulation can lead to a heap-based buffer overflow. The attack requires local access. The exploit has been published and may be used. Upgrading to version 3.13.0RC1 addresses this issue.

Fess up to version 15.5.1 is vulnerable to code injection in the JSP File Handler component. The update function in AdminDesignAction.java does not sanitize the 'content' argument, allowing remote code injection. Exploit is public.

A vulnerability in Kdenlive before version 26.04.1 allows dangerous proxy parameters when opening an attacker-controlled project file.

Hex-Rays IDA Pro versions 9.2 and 9.3 before 9.3sp2 does not block Clang dependency-file generation (via argument injection), allowing attackers to place their code into a plugins directory if the victim uses an attacker-supplied .i64 file.

In aandrew-me tgpt up to version 2.11.1 on Linux/macOS, a command injection vulnerability exists in the helper.Update function of the helper.go file in the Update Handler component. Local access is required, and the exploit has been publicly disclosed.

JeecgBoot up to version 3.9.1 contains a Cross-Site Scripting vulnerability in the SVG file handler component. An unknown function in CommonController.java allows remote script injection. The exploit is publicly available.