CVE Vulnerability Catalog

Deserializacja nieufnych danych w Microsoft Office SharePoint umożliwia nieautoryzowanemu atakującemu wykonanie kodu w sieci.

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.

A heap-based buffer overflow vulnerability in Fortinet FortiOS and FortiSwitchManager allows an attacker to execute unauthorized code or commands via specially crafted packets. This affects FortiOS versions from 7.0.0 to 7.6.3 and FortiSwitchManager from 7.0.0 to 7.2.6.

Zimbra Collaboration (ZCS) w wersjach 10 przed 10.0.18 oraz 10.1 przed 10.1.13 umożliwia przeprowadzenie ataku typu stored XSS w Classic UI poprzez dyrektywy @import w arkuszach stylów CSS w wiadomościach e-mail HTML.

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 due to improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.

n8n to platforma automatyzacji procesów roboczych typu open source. Wersje od 0.211.0 do 1.120.4, 1.121.1 i 1.122.0 zawierają krytyczną podatność na zdalne wykonanie kodu (RCE) w systemie oceny wyrażeń procesów roboczych, co może umożliwić atakującym wykonanie dowolnego kodu.

Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue affects all MongoDB Server v7.0 prior to 7.0.28 versions, MongoDB Server v8.0 versions prior to 8.0.17, MongoDB Server v8.2 versions prior to 8.2.3, MongoDB Server v6.0 versions prior to 6.0.27, MongoDB Server v5.0 versions prior to 5.0.32, MongoDB Server v4.4 versions prior to 4.4.30, MongoDB Server v4.2 versions greater than or equal to 4.2.0, MongoDB Server v4.0 versions greater than or equal to 4.0.0, and MongoDB Server v3.6 versions greater than or equal to 3.6.0.

An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. It affects both mobile user VPN with IKEv2 and branch office VPN using IKEv2 when configured with a dynamic gateway peer. Even after deleting those configurations, if a branch office VPN to a static gateway peer remains, the Firebox may still be vulnerable.

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

Roundcube Webmail w wersjach przed 1.5.12 oraz 1.6 przed 1.6.12 jest podatny na atak typu Cross-Site Scripting (XSS) poprzez tag animate w dokumencie SVG.

Wystąpił problem typu use-after-free, który został rozwiązany dzięki poprawie zarządzania pamięcią. Problem ten został naprawiony w wersjach Safari 26.2, iOS 18.7.3, iPadOS 18.7.3 oraz innych systemach Apple.

A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. The issue is due to insufficient validation of HTTP requests by the Spam Quarantine feature.

Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The Live Update client has already reached End-of-Support (EOS) in October 2021, and no currently supported devices are affected.

A remote code execution issue exists in HPE OneView.

A memory corruption issue was addressed with improved memory handling. The vulnerability affected iOS, iPadOS, macOS, tvOS, visionOS, and watchOS and was fixed in the listed versions.

Wykryto problem z uszkodzeniem pamięci, który został rozwiązany poprzez poprawę sprawdzania stanu blokady. Problem ten został naprawiony w wersjach iOS 18.7.2, iPadOS 18.7.2, iOS 26.1, iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1 oraz watchOS 26.1.

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication. This opens the door for future exploitation and can be leveraged with previous vulnerabilities to gain a full system compromise.

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.