CVE Vulnerability Catalog

Dell PowerProtect Data Domain versions 7.7.1.0 through 8.6.0.0, 8.7.0.0, LTS2025 8.3.1.0 through 8.3.1.20, LTS2024 7.13.1.0 through 7.13.1.60 contain an improper neutralization of argument delimiters in a command ('argument injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization of special elements used in an OS command injection vulnerability. A high privileged attacker with local access could exploit this vulnerability, leading to arbitrary command execution with root privileges.

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization of special elements used in an OS command injection vulnerability. A high privileged attacker with local access could exploit this vulnerability, leading to arbitrary command execution with root privileges.

An OS command injection vulnerability in Dell PowerProtect Data Domain. A high privileged attacker with local access can exploit it to execute arbitrary commands with root privileges.

Dell PowerProtect Data Domain with DD OS in Feature Release versions 7.7.1.0 through 8.5, LTS2025 8.3.1.0 through 8.3.1.20, and LTS2024 7.13.1.0 through 7.13.1.50 contains a command injection vulnerability. A high-privileged attacker with local access could exploit it to gain root-level access.

A flaw in the AAP MCP server. An unauthenticated remote attacker can exploit a log injection vulnerability by sending specially crafted input to the toolsetroute parameter. The parameter is not properly sanitized before being written to logs, allowing injection of control characters such as newlines and ANSI escape sequences.

A vulnerability in Sparx Enterprise Architect involves insufficiently protected credentials. The client reveals the plaintext OAuth2 client secret, decoding it and using it to exchange for access and ID tokens as part of the OpenID authentication flow.

A vulnerability in Red Magic 11 Pro (NX809J) allows non-privileged applications to trigger sensitive operations. The lack of validation for applications accessing the service interface enables an attacker to write files to specific partitions and set writable system properties.

Vault's PKI engine ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0, 1.21.5, 1.20.10, and 1.19.16.

In Note Mark versions 0.19.1 and prior, the /api/notes/{noteID}/assets/{assetID} endpoint lacks authentication middleware and the backend query does not verify ownership or book visibility. An unauthenticated user knowing valid note and asset IDs can retrieve full contents of private note assets.

In pypdf versions prior to 6.10.0, manipulated XMP metadata entity declarations can exhaust RAM. An attacker can craft a PDF that causes excessive memory usage when XMP metadata is parsed. This issue is fixed in version 6.10.0.

In @adonisjs/http-server versions prior to 7.8.1 and 8.0.0-next.0 through 8.1.3, and @adonisjs/core prior to 7.4.0, response.redirect().back() reads the Referer header and redirects to that URL without host validation. An attacker who can influence the Referer header can redirect users to a malicious external site.

The Go library spdystream up to version 0.5.0 has a memory exhaustion vulnerability in the SPDY/3 frame parser. The parser does not validate attacker-controlled counts and lengths before allocating memory, affecting three allocation paths. Because SPDY header blocks are zlib-compressed, a small payload can decompress into large values, causing an out-of-memory crash.

Dell PowerScale OneFS versions prior to 9.12.0.0 contain an insertion of sensitive information into log file vulnerability. A low privileged attacker with local access could exploit this to disclose certain user credentials. The attacker may use the exposed credentials to access the application with the privileges of the compromised account.

Dell PowerScale OneFS versions prior to 9.12.0.0 contain an improper resource shutdown or release vulnerability. A high privileged attacker with local access could exploit this to cause a denial of service.

Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in a potential loss of confidential guest integrity.

The Silverstripe Assets Module in versions prior to 2.4.5 and 3.0.0-rc1 through 3.1.2 incorrectly adds an access grant to the current session when images are rendered or accessed via DBFile::getURL()/getSourceURL(), bypassing file permissions. This usually occurs when creating image variants (e.g., ScaleWidth(), Convert()).

Dell PowerScale OneFS versions prior to 9.12.0.0 contain an improper check for unusual or exceptional conditions vulnerability. A high privileged attacker with local access could exploit this to cause a denial of service.

Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication.

In WSO2 Identity Server, active access tokens are not revoked or invalidated when a user account is locked. This allows previously issued valid tokens to remain usable, enabling locked accounts to access protected resources.