CVE Vulnerability Catalog

A double-free and use-after-free vulnerability was found in the `IntoIter::drop` and `ThinVec::clear` functions of the thin_vec crate. A panic in `ptr::drop_in_place` skips resetting the length to zero.

Fudo Enterprise versions 5.5.0 through 5.6.2 allow low-privileged users to access administrator-only resources via improperly protected API endpoints, including sensitive information such as system logs and configuration settings. The vulnerability is fixed in version 5.6.3.

A server-side request forgery (SSRF) vulnerability has been discovered in the RAGAS library up to version 0.4.3 in the Collections module. The functions _try_process_local_file/_try_process_url in util.py improperly validate the retrieved_contexts argument, allowing a remote attacker to make requests to internal resources. The exploit has been published, and the vendor did not respond.

In OpenFGA versions 0.1.4 through 1.13.1, when configured with preshared-key authentication and the built-in playground enabled, the local server includes the preshared API key in the HTML response of the /playground endpoint. This endpoint is enabled by default and does not require authentication, potentially leading to sensitive data exposure.

A vulnerability in Anviz CX7 firmware allows an authenticated attacker to upload a CSV file with path traversal, overwriting arbitrary files such as /etc/shadow. Combined with debug-setting changes, this can lead to unauthorized SSH access.

W składniku obsługi wolumenów w AWS EFS CSI Driver (aws-efs-csi-driver) przed wersją v3.0.1 występuje niewłaściwe neutralizowanie ograniczników argumentów, co pozwala zdalnym uwierzytelnionym użytkownikom z uprawnieniami do tworzenia PersistentVolume na wstrzykiwanie dowolnych opcji montowania za pomocą wstrzyknięcia przecinka.

A vulnerability was found in the Hotel Booking Management System in the /api/health/detailed file of the Health Check Endpoint component. Manipulation leads to information disclosure. Remote exploitation is possible and the exploit is public.

Dell PowerProtect Data Domain with DD OS Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could exploit it for unauthorized access.

Dell PowerProtect Data Domain with DD OS Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could exploit this, leading to unauthorized access.

Dell PowerProtect Data Domain with DD OS Feature Release versions 8.4 through 8.5 contain an improper restriction of excessive authentication attempts vulnerability. A high privileged attacker with remote access could exploit this, leading to unauthorized access.

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain a session fixation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

Argument injection vulnerability in Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.6.0.0, 8.7.0.0, LTS2025 8.3.1.0-8.3.1.20, and LTS2024 7.13.1.0-7.13.1.60. A high privileged attacker with local access can execute arbitrary commands with root privileges.

Dell PowerProtect Data Domain products in certain versions contain an OS command injection vulnerability due to improper neutralization of special elements. A high privileged attacker with local access could exploit this to execute arbitrary commands with root privileges.

Dell PowerProtect Data Domain products in certain versions contain an OS command injection vulnerability due to improper neutralization of special elements. A high privileged attacker with local access could exploit this to execute arbitrary commands with root privileges.

Dell PowerProtect Data Domain products in certain versions contain an OS command injection vulnerability due to improper neutralization of special elements. A high privileged attacker with local access could exploit this to execute arbitrary commands with root privileges.

A vulnerability in Sparx Enterprise Architect involves insufficiently protected credentials. The client reveals the plaintext OAuth2 client secret, decoding it and using it to exchange for access and ID tokens as part of the OpenID authentication flow.

A vulnerability in Red Magic 11 Pro (NX809J) allows non-privileged applications to trigger sensitive operations. The lack of validation for applications accessing the service interface enables an attacker to write files to specific partitions and set writable system properties.

The Go library spdystream up to version 0.5.0 has a memory exhaustion vulnerability in the SPDY/3 frame parser. The parser does not validate attacker-controlled counts and lengths before allocating memory, affecting three allocation paths. Because SPDY header blocks are zlib-compressed, a small payload can decompress into large values, causing an out-of-memory crash.

Dell PowerScale OneFS versions prior to 9.12.0.0 contain an insertion of sensitive information into log file vulnerability. A low privileged attacker with local access could exploit this to disclose certain user credentials. The attacker may use the exposed credentials to access the application with the privileges of the compromised account.

Dell PowerScale OneFS versions prior to 9.12.0.0 contain an improper resource shutdown or release vulnerability. A high privileged attacker with local access could exploit this to cause a denial of service.