CVE Vulnerability Catalog

A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.

A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.

A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.

An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.

A NULL pointer dereference vulnerability in the logs management functionality. An unauthenticated attacker could exploit this flaw to crash the service.

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.

A buffer overflow vulnerability in the password verification functionality. An attacker with guest authentication could exploit this flaw to achieve code execution.

A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.

Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns different responses when attempting to log in with a valid username compared to an invalid one. An unauthenticated attacker could systematically identify valid usernames by examining variations in the application's responses, such as changes in response time, discrepancies between error messages or differences in HTTP status codes.

A Stored Cross-Site Scripting (XSS) vulnerability exists in FacturaScripts version 2025.61 due to insufficient validation or sanitisation of user input in the 'city' and 'province' fields in the 'ListAlmacen' endpoint. Successful exploitation could allow an attacker to execute arbitrary JavaScript in the victim's browser or escalate privileges from a normal user to an administrator.

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine results in acceptance of unauthenticated dynamic data updates during the Autoupdate routine.

A DOM-based Cross-Site Scripting attack is possible against Stormshield's web administration panel. To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into visiting that link.

A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of an out-of-bounds read.

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file. This could potentially compromise the device permanently.

A stack-based buffer overflow vulnerability in the logs settings functionality. An authenticated attacker could exploit this flaw to achieve code execution.

BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.

BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.