CVE Vulnerability Catalog

Wazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in MasterHandler.process_files_from_worker allowing a cluster worker to overwrite protected master files. Attackers controlling a worker can use a trailing-slash basename bypass and missing extra_valid enforcement to overwrite ossec.conf and agent.conf, achieving root remote code execution across the manager and every agent.

NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.

Vulnerability in the DOM: Core & HTML component allows mitigation bypass. This issue was fixed in Firefox 158 and Thunderbird 158.

Invalid pointer and undefined behavior in the DOM: Notifications component. Fixed in Firefox 158 and Thunderbird 158.

Same-origin policy bypass in the DevTools component. Fixed in Firefox 158 and Thunderbird 158.

A vulnerability in the DOM: Content Processes component allows sandbox escape. It was fixed in Firefox 158 and Thunderbird 158.

A vulnerability in the DOM: Web Authentication component causes a site isolation issue. It was fixed in Firefox 158 and Thunderbird 158.

Sandbox escape due to uninitialized memory in the DOM: Web Serial component. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

A sandbox escape vulnerability in the Networking component of Firefox and Thunderbird is caused by incorrect boundary conditions. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.

A use-after-free vulnerability in the Networking component of Firefox and Thunderbird enables a sandbox escape. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.

A vulnerability in the Networking component of Firefox and Thunderbird combines incorrect boundary conditions and use-after-free, leading to a sandbox escape and site isolation issue. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.

The TRENDnet TEW-432BRP router version 3.10B20 contains a stack-based buffer overflow in the formTcpipSetup function of /goform/formTcpipSetup. Manipulating the Name argument allows remote attack, and the exploit has been publicly disclosed.

Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace page. An attacker can socially engineer an authorized user with the 'Read diagnostics' right into importing a crafted trace file.

Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page. An attacker can socially engineer an authorized user with the 'Read diagnostics' right into importing a crafted trace file.

Affected devices do not properly restrict executable content contained in imported trace files. An attacker can socially engineer an authorized user with the 'Read diagnostics' right into importing a crafted trace file.

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. An authenticated remote attacker could access sensitive internal information.

The authorization middleware of the WMS MobileServer fails to require authentication in two cases: it only requires an Authorization header for GET and HEAD requests, and requests with a malformed or non-bearer Authorization header are passed through without a valid token being required. A remote attacker with network access can invoke API functionality without valid credentials.

The Wavlink WL-WN592AX6 router version 250422 contains a vulnerability in the system function of the wmapd daemon component. Manipulation of an argument leads to OS command injection, and the attack can be launched remotely.