CVE Vulnerability Catalog

External control of file name or path in some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. An unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege via local access when attack requirements are present, without user interaction.

Uncontrolled search path in Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allow an escalation of privilege. An unprivileged authenticated user with a high-complexity attack can escalate privileges via local access, requiring active user interaction.

Improper input validation in Intel VTune Profiler before version 2025.1 within Ring 3: User Applications may allow an escalation of privilege. An unprivileged authenticated user with a low-complexity attack can manipulate data via local access, without user interaction.

Uncontrolled search path in some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. An unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution via local access when attack requirements are present, requiring active user interaction.

Login credentials are inadvertently recorded in logs if a Syslog Server is configured on NETGEAR WAX610 and WAX610Y (AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points). A user with access to the syslog server can read the logs containing these credentials. The issue affects versions before 10.8.11.4 and is fixed in firmware 11.8.0.10 or later.

A mitigation bypass vulnerability exists in the DOM: Core & HTML component of Firefox and Thunderbird. It was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.

A collision in the MiniFilter driver in Avast Software Avast Free Antivirus before 25.9 on Windows allows a local attacker with administrative privileges to disable real-time protection and self-defense mechanisms. This could lead to further attacks.

Zohocorp ManageEngine OpManager versions 128609 and below are vulnerable to a Stored XSS vulnerability in the SNMP trap processor. Malicious data may be stored and executed in the user's browser.

Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.

Fairsketch RISE CRM Framework v3.8.1 contains an HTML injection vulnerability due to lack of proper validation of user inputs. An attacker can send a POST request with malicious code in the 'first_name' parameter at '/clients/save_contact/'.

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/tickets/save'.

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'custom_field_1' in '/estimate_requests/save_estimate_request'.

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'reply_message' in '/messages/reply'.

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/events/save'.

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/projects/save'.

Podatność CVE-2025-11960 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w systemie KVKNET firmy Aryom Software High Technology Systems Inc. Umożliwia to ataki typu Reflected XSS.

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'rtcl_ajax_add_listing_type', 'rtcl_ajax_update_listing_type', and 'rtcl_ajax_delete_listing_type' functions in all versions up to and including 5.2.0. This allows authenticated attackers with subscriber-level access and above to add, update, or delete listing types.

The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to missing payment verification to unauthenticated payment bypass in all versions up to, and including, 1.1.27. This is due to the plugin accepting client-controlled payment confirmation data in the tfhb_meeting_paypal_payment_confirmation_callback function without server-side verification with PayPal's API. This makes it possible for unauthenticated attackers to bypass payment requirements and confirm bookings as paid without any actual payment transaction occurring.

The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to unauthorized booking cancellation in all versions up to, and including, 1.1.27. This is due to the plugin's "tfhb_meeting_form_submit_callback" function using insufficiently random values to generate booking cancellation tokens, combined with a globally shared nonce. This makes it possible for unauthenticated attackers to cancel arbitrary bookings via brute force attacks against the tfhb_meeting_form_cencel AJAX endpoint.

The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability. This vulnerability can only be exploited after authenticating with a viewer-, operator-, or administrator-privileged service account.