CVE Vulnerability Catalog

A code injection vulnerability in the parse_model function of Ultralytics could lead to remote code execution. The flaw results from lack of proper validation of a user-supplied string before using it to execute Python code. User interaction is required (visiting a malicious page or opening a malicious file).

A command injection vulnerability in the torch_safe_load function of Ultralytics could lead to remote code execution. The flaw results from lack of proper validation of a user-supplied string before using it to execute a system call. User interaction is required (visiting a malicious page or opening a malicious file).

A code injection vulnerability in the check_det_dataset function of Ultralytics allows remote code execution. The flaw stems from lack of validation of a user-supplied string before using it to execute Python code. User interaction is required — the target must visit a malicious page or open a malicious file.

A deserialization of untrusted data vulnerability in the torch_load function of Ultralytics allows remote code execution. The flaw results from lack of validation of user-supplied data. User interaction is required — the target must visit a malicious page or open a malicious file.

A heap-based buffer overflow in Bluetooth OBEX packet handling exists in Alpine iLX-F511 devices, caused by lack of validation of user-supplied data length before copying to a heap buffer. A physically present attacker can execute arbitrary code as root without authentication.

A stack-based buffer overflow in the Android Auto service of Alpine iLX-F511 devices allows remote code execution. The flaw results from lack of validation of user-supplied data length before copying it to a fixed-length stack buffer. A network-adjacent attacker can exploit it without authentication.

A stack-based buffer overflow in the Android Auto connection handler of Alpine iLX-F511 devices allows a physically present attacker to execute arbitrary code. The lack of validation of user-supplied data length before copying to a fixed-length stack buffer enables remote code execution with root privileges.

An Out-of-Bounds Read information disclosure vulnerability in libanwbtstack.so on Alpine iLX-F511 devices, within the prh_rfcomm_cc_process_test function. It results from lack of proper validation of user-supplied data, leading to a read past the end of an allocated buffer. An attacker must first pair a malicious Bluetooth device with the target system.

A command injection vulnerability in the diagapp component of Alpine iLX-F511 devices allows a physically present attacker to execute arbitrary code. The lack of validation of a user-supplied string before using it in a system call enables code execution with root privileges.

An exposed dangerous function in the framework service of Alpine iLX-F511 devices allows remote code execution. A network-adjacent attacker can exploit it without authentication. Code executes with root privileges.

A stack-based buffer overflow in the prh_sdp_service_search_decode function of Alpine iLX-F511 devices allows remote code execution. The flaw results from lack of validation of user-supplied data length before copying it to a stack buffer. The attacker must first pair a malicious Bluetooth device with the target.

A stack-based buffer overflow in the framework service of Alpine iLX-F511 devices allows a physically present attacker to execute arbitrary code. The lack of validation of user-supplied data length before copying to a fixed-length stack buffer enables remote code execution with root privileges.

A stack-based buffer overflow in vCard parsing on Alpine iLX-F511 devices allows remote code execution. The flaw results from lack of validation of user-supplied data before copying it to a fixed-length stack buffer. User interaction is required — the target must connect to a malicious Bluetooth device.

An exposed dangerous method in the Fiv service of Alpine iLX-F511 devices allows local privilege escalation. The attacker must first obtain the ability to execute low-privileged code. Exploitation allows executing code as root.

A hard-coded credentials vulnerability in the SSH service of Alpine iLX-F511 devices allows a network-adjacent attacker to execute arbitrary code. No authentication is required, enabling code execution with telechips user privileges.

The BSON encoding component of the MongoDB Java Driver does not verify that an externally supplied raw document's declared length matches the actual byte range before copying it into a database command. An application processing untrusted bytes can emit a structurally inconsistent message, causing the database to interpret trailing content as additional command fields, potentially altering data read or written.

A type-handling flaw in relationship query building of the MongoDB integration library causes a check for the absence of a related record to be compiled with an identifier of the wrong data type. In applications relying on this check, a user with basic privileges may be served, change, or remove documents the check was meant to withhold. The failure is silent and produces no error.

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file browser for workspaces and $JENKINS_HOME/userContent/. Attackers with Overall/Read permission can obtain names, sizes, and last modification times of files in $JENKINS_HOME, and attackers with Item/Workspace permission can obtain names of jobs with a workspace on the same agent.

A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to obtain the server, port, user name, and no-proxy host list of the configured HTTP proxy.

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializing objects of types marked as storing their configuration in independent top-level configuration files as nested values. This allows attackers to bypass the root element check and potentially inject nested objects.