CVE Vulnerability Catalog

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces, resulting in loss of integrity and confidentiality.

A vulnerability in python-socketio versions prior to 5.14.0 allows remote code execution through malicious pickle deserialization. In multi-server deployments using a message queue backend (e.g., Redis), inter-server messages are encoded with the pickle module and deserialized without validation. An attacker who previously gained access to the message queue can send a crafted payload and execute arbitrary Python code with the privileges of the Socket.IO server process.

A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. Manipulation of the fileName argument in the file /aloneReport/index.do/../../aloneReport/download.do;othersusrlogout.do results in path traversal. The attack can be initiated remotely and the exploit is now public.

A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. Manipulation of the fileName argument in the file /stAlarmConfigure/index.do/../../aloneReport/download.do;otherlogout.do leads to path traversal. The attack may be performed remotely and the exploit has been disclosed publicly.

A weakness was identified in D-Link DI-7100G C1 up to 20250928, involving command injection in function sub_46409C of /msp_info.htm?flag=qos in component jhttpd. Manipulation of iface allows remote command execution. The exploit is public.

A vulnerability was found in IdeaCMS up to 1.8 involving command injection in app/common/logic/admin/Config.php of the Website Name Handler component. Manipulating the 网站名称 (website name) argument enables remote attack and the exploit is publicly available.

A SQL injection vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1 in the /admin/sales-reports-detail.php file. Manipulation of the fromdate/todate arguments allows remote exploitation. The exploit has been disclosed.

Podatność CVE-2025-0609 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w Logo Cloud od Logo Software Inc., co umożliwia ataki typu Cross-Site Scripting (XSS). Problem ten dotyczy wersji przed 1.18.

Podatność typu 'Open Redirect' w Logo Cloud firmy Logo Software Inc. umożliwia przekierowanie użytkowników na nieznane, potencjalnie złośliwe strony. Problem ten dotyczy wersji Logo Cloud przed 2025.R6.

W podatności CVE-2025-0607 występuje niewłaściwe kodowanie lub ucieczka danych wyjściowych w oprogramowaniu Logo Cloud firmy Logo Software Inc., co umożliwia ataki phishingowe. Problem dotyczy wersji Logo Cloud przed 2.57.

Podatność CVE-2025-0606 w oprogramowaniu Logo Cloud firmy Logo Software Inc. umożliwia obejście autoryzacji poprzez kontrolowany przez użytkownika klucz, co prowadzi do wymuszonego przeglądania oraz ujawnienia zasobów. Problem dotyczy wersji Logo Cloud przed 0.67.

When decoding an OpenEXR file using DWAA or DWAB compression, the specified raw length of run-length-encoded data is not checked when calculating the output data. This may cause access beyond the rle_raw_size buffer. Upgrading to version 8.0 or beyond is recommended.

When decoding a frame for a SANM file (ANIM v0 variant), the decoded data can be larger than the allocated buffer because codec 48 does not check that the decoded frame fits, leading to a heap-buffer-overflow.

When parsing the header for a DHAV file, an integer underflow in offset calculation leads to reading the duration from before the start of the allocated buffer when the file is larger than MAX_DURATION_BUFFER_SIZE.

The credentials of users stored in the system's local database can be used for login, making it possible for an attacker to gain unauthorized access. This could potentially affect the confidentiality of the application.

JavaScript can be executed inside the address bar via the dashboard "Open in new Tab" button, making the application vulnerable to session hijacking.

A remote, unauthorized attacker can brute force folders and files and read them, such as private keys or configurations, making the application vulnerable to gathering sensitive information.

It is possible to brute force folders and files, which an attacker can use to steal sensitive information.

The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess user credentials.

For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one.