CVE Vulnerability Catalog

Improper access control exists in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management. A local authenticated user with low privileges can execute arbitrary commands as SYSTEM by placing a crafted installer options file that is processed during service activation.

A DLL loading vulnerability exists in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1. A local authenticated attacker with low privileges can execute arbitrary code with elevated privileges, though exploitation requires user interaction.

A NULL pointer dereference exists in the WatchGuard Fireware OS management interface. A remote, unauthenticated attacker with network access to the management interface can crash the management service by sending a specially crafted login request. Repeated exploitation terminates all active administrator sessions and in-progress management operations and can prevent management of the device; traffic processing is not affected.

A vulnerability in the Tidewave library allows an attacker to read filesystem path names of the application via Tidewave configuration through /tidewave/connect or the rendered toolbar. The responses do not check the Host header, so a web page that rebinds its own domain to the loopback address can read the tag with a same-origin request that carries no Origin header. The paths usually reveal the local username and project layout.

A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post Processor Utility Extension. A malicious actor may exploit this vulnerability to execute arbitrary commands in the context of the current user.

This CVE has been rejected by Upstream because they failed to create a meaningful exploit. No further vulnerability information is available.

A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by sending crafted cluster synchronization traffic.

The 3D Viewer app for Nextcloud in versions 1.7.9 through 3.3.1 did not enforce authorization on its public file endpoint. Anyone knowing a share token could read the contents of a shared 3D file even when the link share was password-protected, because the controller did not extend PublicShareController and thus bypassed the password-checking middleware. The issue is fixed in 3.3.2.

A stack-based buffer overflow vulnerability exists in Fireware OS's WireGuard configuration processing. A remote attacker with man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud can create a denial of service condition and potentially execute arbitrary code by tampering with a FireCloud Gateway configuration payload.

A stack-based buffer overflow exists in the Fireware OS logging service. A network-adjacent attacker who can impersonate or intercept traffic to the configured log server can execute arbitrary code with root privileges by presenting a specially crafted certificate.

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE) via UPnP root description parsing. The vulnerability allows an attacker to execute arbitrary code on the device.

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allows unauthenticated visitors to read /__clockwork/ profiler data via a loopback REMOTE_ADDR fallback. Behind a same-host reverse proxy, remote requests appear as loopback, letting attackers read stored records including administrator plaintext passwords and configuration credentials.

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation leads to a race condition. The attack may be initiated remotely. Upgrading to version 1.3.0.Final fixes this issue (patch identifier: 6b8e1e085c35e970ef0048901cd25850e4791ec2).

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file extras/push-notification-config-store-database-jpa/src/main/java/org/a2aproject/sdk/extras/pushnotificationconfigstore/database/jpa/JpaDatabasePushNotificationConfigStore.java of the component Push Notification Config Store. Manipulation can lead to resource consumption. The attack can be launched remotely. Upgrading to version 1.3.0.Final mitigates this issue (patch: b478810a03b4a16841d36aca5c6e87d8f48fce67).

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Manipulation results in resource consumption. The attack can be initiated remotely. Upgrading to version 1.3.0.Final is sufficient to resolve this issue (patch: be663f806efcfdddd2805d214fae4998379ac5f2).

KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payload into a stickynote annotation. When any user opens the document, the viewer renders the annotation and the browser executes the payload, potentially compromising the user's session. This issue has been fixed in version 1.2.8.

PowerProtect Data Domain Virtual Edition in Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30, and LTS2026 8.6.1.0 through 8.6.1.10 contains a Process Control vulnerability. A high-privileged attacker with remote access could exploit it to bypass protection mechanisms.

PowerProtect Data Domain Virtual Edition in Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30, and LTS2026 8.6.1.0 through 8.6.1.10 contains a Path Traversal vulnerability. A high-privileged attacker with remote access could exploit it to achieve command execution.

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 versions 7.13.1.0 through 7.13.1.80, LTS2025 versions 8.3.1.0 through 8.3.1.40, LTS2026 versions 8.6.1.0 through 8.6.1.20, contain a Relative Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information tampering.

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, LTS2026 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.