CVE Vulnerability Catalog

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

OpenMeter contains a stored, or second-order, SQL injection vulnerability in the handling of customer usage-attribution values. An attacker who can create or update a customer can store a malicious value in the usageAttribution.key or usageAttribution.subjectKeys fields. When that customer is subsequently used in a meter or event query, OpenMeter inserts the stored value into a ClickHouse WITH map(...) expression using string concatenation. OpenMeter versions from v1.0.0-beta.218 through v1.0.0-beta.231 are affected.

Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system commands by sending a crafted JSON payload to the DebugShell interface exposed on TCP port 34567. Attackers can exploit the lack of authentication and input sanitization in the binary protocol service to pass arbitrary commands directly to the underlying operating system, achieving root-level code execution and complete device compromise.

Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456 without credentials. Attackers can exploit the unvalidated Session field in the proprietary control protocol header to access live video streams, control pan and tilt motors, activate audio functions, and remotely restart the device.

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode passwords as bytes, silently replacing characters outside that charset with '?'.

In HUMANIST Digital Human Resources by Bilin Software and Informatics Consultancy Inc., there is a vulnerability involving cleartext storage of sensitive information that allows SQL Injection. The issue affects versions from 26.0 before 26.1.

HUMANIST Digital Human Resources by Bilin Software contains a hard-coded cryptographic key vulnerability, allowing read of sensitive constants within an executable.

Unrestricted upload of dangerous file types in HUMANIST Digital Human Resources allows uploading a web shell to the server. Affects versions from 26.0 before 26.1.

The product firmware contains an embedded, static RSA private key used by the Lighttpd web server for TLS termination. Exposure of this key allows attackers to breach HTTPS confidentiality and integrity, enabling traffic decryption and server spoofing.

The product firmware contains an embedded, static RSA private key used by the Lighttpd web server for TLS termination. Exposure of this key allows attackers to breach HTTPS confidentiality and integrity, enabling traffic decryption and server spoofing.

In the Linux kernel, a use-after-free vulnerability exists in SCTP's ASCONF processing. An attacker can send a crafted ASCONF packet that frees the transport used for processing, then leverages the dangling pointer, leading to memory corruption and potential code execution.

The Improve SEO WordPress plugin through version 2.0.11 does not properly validate uploaded files, checking only the file content type while writing the file with the attacker-supplied extension into a publicly accessible directory. This allows unauthenticated users to upload executable PHP files and achieve remote code execution.

The Easy Integration for Dropbox WordPress plugin before version 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that are also registered for unauthenticated users. This allows an unauthenticated attacker to list, download, and upload arbitrary files on the connected Dropbox account and to read the connected account and administrator email addresses.

A vulnerability was detected in GL.iNet GL-MT3000 up to version 4.4.5. It affects the nas-web.add_user function in the /cgi-bin/glc file of the nas-web RPC Wrapper component. Manipulation leads to command injection, and the attack can be initiated remotely. The exploit is public and may be used.

A security vulnerability has been detected in GL.iNet GL-MT3000 up to version 4.4.5. It affects the set_upgrade function in the /cgi-bin/glc file of the modem.so component. Such manipulation leads to command injection, and the attack can be launched remotely. The exploit has been publicly disclosed and may be used.

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could lead to privilege escalation. Exploitation does not require user interaction.

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to privilege escalation. Exploitation does not require user interaction, and the scope is changed.

Adobe Campaign Classic (ACC) is affected by an SQL Injection vulnerability that could lead to arbitrary code execution in the context of the current user. An attacker can execute arbitrary SQL commands, potentially gaining elevated access. Exploitation does not require user interaction, and the scope is changed.

Adobe Campaign Classic (ACC) is affected by an SQL Injection vulnerability that could lead to arbitrary code execution in the context of the current user. A low-privileged attacker can exploit this to execute arbitrary code. Exploitation does not require user interaction, and the scope is changed.

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could lead to arbitrary code execution in the context of the current user. An attacker can exploit this to execute arbitrary code. Exploitation does not require user interaction, and the scope is changed.