CVE Vulnerability Catalog

The NIM server (nimesis) service in IBM AIX 7.2, 7.3 and IBM VIOS 3.1, 4.1 contains a vulnerability that could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability previously addressed in CVE-2024-56346.

IBM AIX 7.2, 7.3 and IBM VIOS 3.1, 4.1 store NIM private keys used in NIM environments in an insecure way, which is susceptible to unauthorized access by an attacker using man-in-the-middle techniques.

Typebot, an open-source chatbot builder, in versions prior to 3.13.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the webhook block (HTTP Request component). Authenticated users can make arbitrary HTTP requests from the server, including access to AWS Instance Metadata Service (IMDS). By bypassing IMDSv2 protection through custom header injection, attackers can extract temporary AWS IAM credentials for the EKS node role, leading to complete compromise of the Kubernetes cluster and associated AWS infrastructure. Version 3.13.1 fixes the issue.

A vulnerability in ZITADEL's federation process allowed auto-linking users from external identity providers to existing internal accounts even when the IdP was disabled or the organization disallowed federated authentication. This stemmed from the platform failing to enforce organization-specific security settings during authentication. Versions 2.71.19, 3.4.4, and 4.6.6 fix the issue by correctly validating the organization's login policy before auto-linking.

pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability when running in server mode and performing restores from PLAIN-format dump files. Attackers can inject and execute arbitrary commands on the server hosting pgAdmin.

Zidentyfikowano podatność na obejście uwierzytelniania w niektórych routerach serii DSL, która może umożliwić zdalnym atakującym uzyskanie nieautoryzowanego dostępu do dotkniętego systemu.

FiberHome AN5506-04-FA firmware up to RP2631 and HG6245D before RP2602 contain a stack-based buffer overflow in the HTTP service ('webs') due to lack of maximum length enforcement for Cookie header values. Processing a cookie longer than 511 bytes overruns a stack buffer, leading to a crash or potential control of execution flow.

Dell Data Lakehouse versions prior to 1.6.0.0 contain an Improper Access Control vulnerability. A high privileged attacker with remote access could exploit this to elevate privileges, leading to unauthorized access with elevated privileges and compromising system integrity and customer data.

A SQL injection vulnerability exists in the login functionality of WellSky Harmony version 4.1.0.2.83 within the 'xmHarmony.asp' endpoint. User-supplied input to the 'TXTUSERID' parameter is not properly sanitized before being incorporated into a SQL query. Successful exploitation may lead to authentication bypass, data leakage, or full system compromise of backend database contents.

CentralSquare Community Development version 19.5.7 has an Authentication Bypass vulnerability that allows attackers to access the admin panel without admin credentials.

CentralSquare Community Development version 19.5.7 has a SQL Injection vulnerability that allows attackers to inject SQL via the permit_no field.

In FiberHome GPON ONU HG6145F1 RP4423, the factory default Wi-Fi password (WPA/WPA2 pre-shared key) can be predicted from the SSID. The device generates default passwords using a deterministic algorithm, enabling an attacker who can observe the SSID to predict the default password without authentication or user interaction.

Sogexia Android App compiled with SDK v35 (max SDK 32) and fixed in v36 contains hardcoded encryption keys in the encryption_helper.dart file. These keys are embedded in the application code, making them extractable.

N-central Software Probe before 2025.4 is vulnerable to remote code execution via deserialization.

N-central before 2025.4 is vulnerable to authentication bypass via path traversal.

Tenda AC15 v15.03.05.18_multi issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the session identifier. An attacker with network access or the ability to run JS in a victim browser can steal the cookie and replay it to access protected resources.

In the Linux kernel TLS subsystem, if tls_strp_msg_hold fails for async decryption, it can lead to use-after-free (UAF) of the skb or writing to userspace memory after recv() returns.

The a+HRD developed by aEnrich has an authentication abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges.

The a+HRD product by aEnrich has an Authentication Abuse vulnerability allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges.

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.