CVE Vulnerability Catalog

Routinator exits when an rsync URI for a file obtained over RRDP contains a path that cannot be stored on disk, such as too long file names or folder names that overlap with existing file names.

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails.

When Routinator encounters a CRL with many entries, it may hang or run out of memory. If it encounters a CRL file with the wrong encoding, it may exit.

Routinator accepts and parses RRDP notification files with gaps in delta entries, potentially leading to missing data. If too many delta entries are encountered, it may run out of memory.

Routinator runs out of memory when the JSON output is requested many times concurrently, which an attacker can trigger maliciously by opening a large number of connections to the HTTP server. Additionally, Routinator runs into a stack overflow and exits when a payload item with too much metadata is discarded at once.

When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content.

There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim's browser. A patch is provided for versions 12.1, 12.0, 11.5, 11.3, and 11.1.

There is a stored cross site scripting issue in Esri ArcGIS Server 11.1 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to store files that contain malicious code that may execute in the context of a victim's browser. A patch is provided for versions 12.1, 12.0, 11.5, 11.3, and 11.1.

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for versions 12.0, 11.5, and 11.3.

There is a denial of service vulnerability in Esri ArcGIS Server versions 12.0 and prior that may allow a remote, unauthenticated attacker to supply crafted requests that may, under exceptional circumstances, consume all available worker threads and deny service to users.

There is a reflected cross-site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior. A remote, unauthenticated attacker can create a crafted link that, when clicked, may execute arbitrary JavaScript in the victim's browser.

OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to issue sync tokens via POST /api/sync/tokens when requireLogin is disabled. Attackers can use the issued token against GET /api/sync/bundle to retrieve decrypted provider credentials and plaintext API keys, with tokens persisting after login is re-enabled.

A vulnerability was identified in FastStone Image Viewer up to 8.5 in the function FUN_0062d96c of the Box-Average Downsampler Engine component. The manipulation leads to an out-of-bounds read, and the attack can be initiated remotely.

A vulnerability was determined in Omega Solution Restro POS up to 20261026 affecting an unknown function of the /sale-invoice/ file. Manipulating the productUnitSalePrice argument can lead to business logic errors, and the attack may be performed remotely.

The WordPress Gallery PhotoBlocks plugin (photoblocks-grid-gallery) contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions up to and including 1.3.7.

The WordPress Button Block plugin (button-block) contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions up to and including 1.2.7.

The WordPress Content Slider Block plugin (content-slider-block) contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions up to and including 3.2.1.

A security vulnerability has been detected in Bdtask Garage 24 Garage Management Software 1.0. This issue affects some unknown processing of the file /edit_profile of the component Profile. The manipulation of the argument first_name/last_name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

The WordPress Typing Text plugin (text-typing) contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions up to and including 2.2.0.

Backstage is an open framework for building developer portals. Prior to 3.9.2 and from 4.0.0 until 4.0.2, DefaultCatalogRulesEnforcer in @backstage/plugin-catalog-backend compares the raw location.target URL against catalog.rules, while URL readers canonicalize the same URL before fetching it. An authenticated user with catalog.location.create permission can use percent-encoded path segments to make an untrusted URL match a trusted location pattern even though the canonical URL resolves outside that scope.