CVE Vulnerability Catalog

An authentication bypass in Palo Alto Networks PAN-OS software allows an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges. Affects PAN-OS 10.2, 11.0, 11.1, and 11.2. Risk can be reduced by restricting access to the management interface to trusted IPs.

An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag, which could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window.

Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this to inject and execute arbitrary system commands on the device. This vulnerability has already been exploited.

In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server.

Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain.

Windows Task Scheduler Elevation of Privilege Vulnerability.

NTLM Hash Disclosure Spoofing Vulnerability allows for the disclosure of NTLM hashes. An attacker could exploit this to impersonate a user or system.

The upgrademysqlstatus function in databases/views.py in CyberPanel before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.

getresetstatus in dns/views.py and ftp/views.py in CyberPanel before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.

Unrestricted file upload and download in Cleo Harmony, VLTrader, and LexiCom before 5.8.0.21, potentially leading to remote code execution.

A vulnerability in the Remote Access VPN (RAVPN) service of Cisco ASA and FTD Software allows an unauthenticated, remote attacker to cause a denial of service (DoS) of the RAVPN service. The issue is due to resource exhaustion. A successful exploit could exhaust resources, resulting in DoS of the RAVPN service, and a device reload may be required to restore service.

A missing authentication for critical function in FortiManager and FortiManager Cloud allows an attacker to execute arbitrary code or commands via specially crafted requests.

A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack due to insufficient input validation. Successful exploit could allow unauthorized access, enabling viewing, corrupting, or deleting users' data and system configurations.

ScienceLogic SL1 is affected by an unspecified vulnerability involving a third-party component. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+, with remediations for older versions.

An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal database contents, such as password hashes, usernames, device configurations, and API keys. Attackers can also create and read arbitrary files on the system.

An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

A spoofing vulnerability exists in the Windows MSHTML Platform. It could allow an attacker to display fake content or interfaces to the user.

Remote code execution vulnerability in Microsoft Management Console (MMC). An unauthenticated attacker could potentially execute arbitrary code in the context of the user running the MMC console.