CVE Vulnerability Catalog

An out-of-bounds write issue exists in Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS), addressed with improved bounds checking. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.

bash-git-prompt versions 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file with a predictable name. The predictable filename may allow an attacker to interfere with data.

VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit this vulnerability to disclose credentials of other users of Aria Operations.

The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attacker could intercept the web request handling the login and obtain the credentials.

IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions.

Reflected cross-site scripting (XSS) exists in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts to be executed via "/html/<filename>.html".

Reflected cross-site scripting (XSS) exists in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts in the web management application due to improper handling of GET inputs in "/acng-report.html".

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'subject' at the endpoint 'knowledge_base/article'.

Perfex CRM v3.2.1 contains a stored HTML injection vulnerability due to lack of proper validation of user input. The injection occurs by sending a POST request with the 'name' and 'address' parameters to the 'admin/leads/lead' endpoint.

Perfex CRM v3.2.1 contains a stored HTML injection vulnerability due to lack of proper validation of user input. The injection occurs by sending a POST request with the 'name' and 'clientid' parameters to the '/projects/project/x' endpoint.

Perfex CRM v3.2.1 contains a stored HTML injection vulnerability due to lack of proper validation of user input. The injection occurs by sending a POST request with the 'expense_name' parameter to the '/expenses/expense' endpoint.

Perfex CRM v3.2.1 contains a stored HTML injection vulnerability due to lack of proper validation of user input. The injection occurs by sending a POST request with the 'name' parameter to the '/subscriptions/create' endpoint.

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'company' at the endpoint '/clients/client/x'.

The Postie WordPress plugin before 1.9.71 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

A security flaw in Ruijie NBR2100G-E up to 20250919 affects the listAction function of /itbox_i/branch_passw.php?a=list. Manipulation of the city argument results in OS command injection. The attack can be performed remotely and the exploit is public.

Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox. This issue affects Terra AC wallbox through version 1.8.33.

A vulnerability in Bjskzy Zhiyou ERP up to 11.0 affects the uploadStudioFile function of com.artery.form.services.FormStudioUpdater. Manipulation of the filepath argument causes path traversal. Remote exploitation is possible and the exploit is public.

A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common/common.php. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used.

YiFang CMS up to 2.0.2 has an unrestricted file upload vulnerability in the webUploader function of app/app/controller/File.php in the Backend component. Manipulating the uploadpath argument allows remote attacks. The exploit has been published.