CVE Vulnerability Catalog

HCL BigFix Mobile version 3.3 and earlier have insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.

HCL BigFix Modern Client Management (MCM) version 3.3 and earlier have insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.

In NetX Duo before version 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out-of-bounds read issue in the _nx_ip_packet_receive() function when receiving an Ethernet frame with IP type but no IP data.

Mattermost versions 10.5.x <= 10.5.12 and 10.11.x <= 10.11.2 fail to properly validate guest user permissions when accessing channel information. This allows guest users to discover active public channels and their metadata via the /api/v4/teams/{team_id}/channels/ids endpoint.

Sergestec Exito v8.0 contains a Stored Cross-Site Scripting (XSS) vulnerability due to a lack of proper validation of user input by sending a POST request using the 'obs' parameter in '/admin/index.php?action=product_update'.

In NetX Duo before version 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out-of-bounds read issue in the _nx_ipv4_packet_receive() function when receiving an Ethernet frame with less than 4 bytes of IP packet.

In NetX Duo versions before 6.4.4 (Eclipse Foundation ThreadX component), there is an incorrect bound check in _nx_secure_tls_proc_clienthello_supported_versions_extension() in the extension version field.

The Felan Framework plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check in the 'process_plugin_actions' function called via AJAX, allowing unauthenticated attackers to activate or deactivate arbitrary plugins. Affects versions up to 1.1.4.

HCL BigFix Mobile 3.3 and earlier have improper access control, allowing unauthorized users to access a small subset of endpoint actions, potentially enabling access to select internal functions.

The Ultimate Addons for WPBakery plugin for WordPress up to version 3.21.1 (exclusive) is vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts that execute when a user accesses an injected page.

HCL BigFix Modern Client Management (MCM) 3.3 and earlier have improper access control, allowing unauthorized users to access a small subset of endpoint actions, potentially enabling access to select internal functions.

The Ally – Web Accessibility & Usability plugin for WordPress in versions up to and including 3.8.0 is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on the enable_unfiltered_files_upload function. An unauthenticated attacker can enable unfiltered file upload and add SVG files to the upload list via a forged request if they can trick a site administrator into clicking a link.

YAML::Syck for Perl before version 1.36 has missing null terminators, causing out-of-bounds read and potential information disclosure. The issue is in token.c and occurs with complex YAML files containing a hash of all keys and empty values.

go-witness and witness modules in versions go-witness 0.8.6 and earlier and witness 0.9.2 and earlier improperly verify AWS EC2 instance identity documents. Verification can incorrectly succeed when a signature is missing or empty, and when RSA signature verification fails. An attacker able to supply or intercept instance identity document data can cause a forged document to be accepted, leading to incorrect trust decisions.

A logic issue in macOS was addressed with improved restrictions. The issue affects macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. An app may be able to access sensitive user data.

Apple addressed a double free issue with improved memory management in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. The flaw allows an app to cause unexpected system termination.

The issue was resolved by not loading remote images. This issue is fixed in iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in Mail in Lockdown Mode.

A data corruption vulnerability in the luksmeta utility for LUKS1 allows overwriting encrypted data by writing excessive metadata. Lack of space validation leads to permanent loss of user data.

CommandKit is the discord.js meta-framework for building Discord bots. In versions 1.2.0-rc.1 through 1.2.0-rc.11, a logic flaw exists in the message command handler that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling command aliases. When a message command is invoked using an alias, the ctx.commandName value reflects the alias rather than the canonical command name. This occurs in both middleware functions and within the command's own run function. Although not explicitly documented, CommandKit's examples and guidance around middleware usage implicitly convey that ctx.commandName represents the canonical command identifier. Middleware examples in the documentation consistently use ctx.commandName to reference the command being executed. Developers who assume ctx.commandName is canonical may introduce unintended behavior when relying on it for logic such as permission checks, rate limiting, or audit logging. This could allow unauthorized command execution or inaccurate access control decisions. Slash commands and context menu commands are not affected. This issue has been patched in version 1.2.0-rc.12, where ctx.commandName now consistently returns the actual canonical command name regardless of the alias used to invoke it.

Some Zoom Rooms Clients before version 6.5.1 contain an Authentication bypass vulnerability. It may allow an unauthenticated user to conduct a disclosure of information via network access.