CVE Vulnerability Catalog

A vulnerability in Anviz CX7 firmware allows an authenticated attacker to upload a CSV file with path traversal, overwriting arbitrary files such as /etc/shadow. Combined with debug-setting changes, this can lead to unauthorized SSH access.

Improper neutralization of argument delimiters in the volume handling component of AWS EFS CSI Driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection.

In Firebird, an open-source relational database management system, versions prior to 5.0.4, 4.0.7 and 3.0.14 have a flaw in ClumpletReader::getClumpletSize() that can overflow totalLength when parsing a Wide clumplet, causing an infinite loop. An authenticated user with INSERT privileges on any table can exploit this via a crafted Batch Parameter Block to cause a denial of service against the server. The issue is fixed in 5.0.4, 4.0.7 and 3.0.14.

In Giskard, an open-source AI testing framework, versions prior to 1.0.2b1 pass a user-supplied regex pattern directly to re.search() without timeout or complexity guard. A crafted pattern can trigger catastrophic backtracking and hang the process; exploitation requires write access to a check definition.

A vulnerability was determined in prasathmani TinyFileManager up to 2.6 affecting an unknown functionality of /filemanager.php?p= ajax=true&type=upload in the File Upload Handler component. Manipulation of the uploadurl argument causes server-side request forgery, exploitable remotely. The exploit has been publicly disclosed and may be used; the vendor did not respond.

A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.

In prasathmani TinyFileManager up to 2.6, manipulation of the file[] argument in /filemanager.php results in path traversal. The attack can be performed remotely and the exploit has been publicly disclosed. The vendor was contacted but did not respond.

In JetBrains Junie before 252.549.29 command execution was possible via a malicious project file.

A vulnerability was found in the Hotel Booking Management System in the /api/health/detailed file of the Health Check Endpoint component. Manipulation leads to information disclosure. Remote exploitation is possible and the exploit is public.

STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes protected by a third-party implementation. This is caused by insufficient caller validation in the driver's IOCTL handler, enabling unauthorized processes to perform those actions in kernel space. Successful exploitation can lead to denial of service by disrupting critical third-party services or applications.

A security flaw has been discovered in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593. This issue affects some unknown processing of the file admin/addteacher.php of the Background Management Page component. Manipulation of the image argument results in unrestricted upload. The attack can be launched remotely and the exploit has been released to the public. The vendor was contacted but did not respond.

A vulnerability was identified in QueryMine sms in admin/editcourse.php where manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely and a public exploit is available. The product uses rolling releases, so no specific affected or fixed versions are available.

A path traversal vulnerability was found in Qihui jtbc5 CMS 5.0.3.6 in the file /dev/code/common/diplomat/manage.php. Manipulation of the path argument allows remote exploitation, and a public exploit may be used.

Dell PowerProtect Data Domain with DD OS contains a cross-site scripting vulnerability. A high-privileged attacker with remote access could exploit it to inject scripts.

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) in Feature Release versions 7.7.1.0 through 8.5, LTS2025 8.3.1.0 through 8.3.1.20, and LTS2024 7.13.1.0 through 7.13.1.50 contains an exposure of sensitive information to an unauthorized actor vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

Dell PowerProtect Data Domain with DD OS Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could exploit it for unauthorized access.

Dell PowerProtect Data Domain with DD OS Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could exploit this, leading to unauthorized access.

Dell PowerProtect Data Domain with DD OS Feature Release versions 8.4 through 8.5 contain an improper restriction of excessive authentication attempts vulnerability. A high privileged attacker with remote access could exploit this, leading to unauthorized access.

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain a session fixation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists are misconfigured. An attacker can communicate with the stream and upload arbitrary XML or JSON files processed with the service user's privileges, enabling Server-Side Request Forgery to Windows systems via SMB or WebDAV.