CVE Vulnerability Catalog

A security vulnerability has been detected in Netis EAP930 version 1.250905.115454. The issue affects the function return200 of the file /cgi-bin/debug of the CGI Endpoint component. Manipulation of the SIGNATURE argument leads to a backdoor. The attack may be initiated remotely but requires a high degree of complexity; exploitability is assessed as difficult. The vendor was contacted early about this disclosure but did not respond.

TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537 contains a vulnerability in the get_img_from_url function of ApiBillet/serializers.py in the APIv1 component. Manipulation of the img_url/image_url argument can lead to server-side request forgery, and the attack can be launched remotely.

A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution.

A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a crafted XCF file can cause a use-after-free in the main GIMP process, leading to a crash and potentially arbitrary code execution.

A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash and potentially arbitrary code execution when the victim browses or opens the file.

TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed shared credential can be accepted by the Streamd Digest authentication mechanism as an administrative password, allowing an unauthenticated adjacent-network attacker to establish encrypted media sessions without knowledge of the device account password.

TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera operations to be executed without a valid authenticated session.

This candidate was in a CNA pool that was not assigned to any issues. No actual vulnerability exists.

This candidate was in a CNA pool that was not assigned to any issues. No actual vulnerability exists.

This candidate was in a CNA pool that was not assigned to any issues. No actual vulnerability exists.

This candidate was in a CNA pool that was not assigned to any issues. No actual vulnerability exists.

This candidate was in a CNA pool that was not assigned to any issues. No actual vulnerability exists.

This candidate was in a CNA pool that was not assigned to any issues. No actual vulnerability exists.

This candidate was in a CNA pool that was not assigned to any issues. No actual vulnerability exists.

This candidate was in a CNA pool that was not assigned to any issues. No actual vulnerability exists.

This candidate was in a CNA pool that was not assigned to any issues. No actual vulnerability exists.

The CVE record was rejected. Reason: the candidate was in a CNA pool that was not assigned to any issues.

The CVE record was rejected. Reason: the candidate was in a CNA pool that was not assigned to any issues.

The CVE record was rejected. Reason: the candidate was in a CNA pool that was not assigned to any issues.

The CVE record was rejected. Reason: the candidate was in a CNA pool that was not assigned to any issues.