CVE Vulnerability Catalog

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation.

In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

In Modem, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

In Modem, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

A path traversal vulnerability was found in deepset-ai farm up to 0.8.0 in the WordEmbedding_LM.load function of farm/modeling/language_model.py in the Model Package Loader component. Manipulation of the embeddings_filename argument leads to path traversal, and the attack requires local access. The exploit has been publicly disclosed, the vendor did not respond, and the vulnerability only affects products no longer supported by the maintainer.

A path traversal vulnerability was found in deepset-ai farm up to 0.8.0 in the EmbeddingTokenizer.from_pretrained function of farm/modeling/tokenization.py in the Tokenizer Loader component. Manipulation of the vocab_filename argument leads to path traversal, and the attack may be performed remotely. The exploit has been publicly disclosed, the vendor did not respond, and the vulnerability only affects products no longer supported by the maintainer.

A path traversal vulnerability was detected in Webpro-nl Knip up to 6.44.0 in the writeFile function of packages/knip/src/IssueFixer.ts in the Workspace Handler component. Manipulation of the workspaces argument leads to path traversal, and the attack can be executed remotely. The exploit has been publicly disclosed and the vendor did not respond.

A path traversal weakness was identified in Aklivity Zilla up to 1.3.4/2.4.7/2.5.0-rc2 in the Path.resolve function of FileSystemServerFactory in the http-filesystem Binding component. Manipulation of the params argument enables remote exploitation, and a public exploit is already available.

http4k from 4.9.10.0 before 6.60.0.0 contains a missing integrity check vulnerability because DigestEncoder computes the auth-int digest without hashing the request entity body. On-path attackers on non-TLS channels can rewrite the body of authenticated requests while keeping the Authorization header valid, executing state-changing actions as the victim.

http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload. Unauthenticated attackers can read files outside baseTemplateDir by supplying ../ segments in ViewModel.template() values, as Thymeleaf's FileTemplateResolver resolves escaped paths without containment checks.

LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability that allows authenticated users to write arbitrary files by supplying unsanitized file names to writeTempFile(). Attackers can create a file record with a traversal name and then trigger document parsing to overwrite application files such as startServer.js for code execution or denial of service.

Network-AI from 5.14.0 before 5.15.5 contains a missing authentication vulnerability in the A2AServer class that allows unauthenticated attackers to access task operations when no secret is configured. Attackers can send JSON-RPC requests to tasks/send, tasks/get, and tasks/cancel without a Bearer token to execute tasks, read results, and cancel tasks.

Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath() that allows attackers to escape the base directory using sibling-directory paths. Attackers can supply paths whose directory name shares a string prefix with the base, bypassing the unanchored startsWith check to read, list, or write files outside the sandbox.

Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load() or save() to disclose sensitive JSON data or overwrite policy files such as AuthGuardian trust-level configuration.