CVE Vulnerability Catalog

Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration. This issue affects Command Centre Mobile Client versions prior to 9.40.123.

In MediaProvider.java, a missing permission check in isRedactionNeededForOpenViaContentResolver may allow revealing the location of media files. This could lead to local information disclosure with no additional execution privileges needed and no user interaction required.

In multiple locations of AppOpsService.java, improper input validation allows a possible persistent denial of service. Exploitation requires only local access, with no additional execution privileges and no user interaction.

In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

In multiple locations, a possible persistent denial of service exists due to improper input validation. A local attacker can trigger denial of service without additional privileges and without user interaction.

In jump_to_payload of payload.rs, a logic error may lead to information disclosure. This could lead to local information disclosure with no additional execution privileges needed and no user interaction required.

In multiple functions of ProfilingService.java, improper input validation may lead to a persistent denial of service. This could lead to local denial of service with no additional execution privileges needed and no user interaction required.

W ExtremeCloud IQ – Site Engine (XIQ‑SE) przed wersją 26.2.10 występuje podatność w interfejsie administracyjnym NAC, która pozwala uwierzytelnionemu administratorowi NAC na odzyskanie zamaskowanych wrażliwych parametrów z odpowiedzi HTTP. Mimo że dane uwierzytelniające wydają się być zredagowane w interfejsie użytkownika, aplikacja zwraca rzeczywiste wartości tych danych w odpowiedzi HTTP.

Vim versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) in the swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file.

Vim, an open-source command-line text editor, prior to version 9.2.0076 contains a heap-based buffer overflow write and an out-of-bounds read in its terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.

Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding the allocated buffer.

Vim is vulnerable to a heap-based buffer overflow out-of-bounds read in its Emacs-style tags file parsing logic prior to version 9.2.0074. When processing a malformed tags file, Vim can read up to 7 bytes beyond the allocated memory boundary. Version 9.2.0074 fixes the issue.

An OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the scp:// protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.

pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.4, an attacker can craft a PDF that leads to large memory usage when parsing the content stream using the RunLengthDecode filter. This has been fixed in pypdf 6.7.4.

Podatność CVE-2025-11950 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w EduAsist przed wersją 2.1, co pozwala na ataki typu Reflected XSS.

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash (//) prefix in the gateway_path. A malicious or socially engineered administrator can configure a honey-pot route to intercept and exfiltrate user credentials, potentially maintaining persistent access or creating a backdoor even after their permissions are revoked.

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams. This vulnerability allows an authenticated user to gain access to sensitive internal infrastructure headers (such as X-Trusted-Proxy and X-Envoy-*) and event stream URLs via crafted requests and job templates. By exfiltrating these headers, an attacker could spoof trusted requests, escalate privileges, or perform malicious event injection.

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API. This vulnerability allows exposure of sensitive client credentials and internal infrastructure headers via the test_headers field when an event stream is in test mode. The possible outcome includes leakage of internal infrastructure details, accidental disclosure of user or system credentials, privilege escalation if high-value tokens are exposed, and persistent sensitive data exposure to all users with read access on the event stream.

A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP archives that exploit parsing differentials, requiring user interaction to install an attacker-controlled package.