CVE Vulnerability Catalog

Vulnerability in Oracle's MySQL Cluster product (component: Cluster: NDB Operator). Affected versions are 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks can cause a hang or frequently repeatable crash (complete DoS) and unauthorized update, insert or delete access to some data.

Vulnerability in Oracle Hospitality Simphony (component: POS). Affected versions are 19.8-19.8.5, 19.9-19.9.3 and 19.10-19.10.1. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks can result in unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle WebLogic Server (component: Core). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks can result in takeover of the server.

Vulnerability in Oracle Outside In Technology (component: Outside In Core). Affected version is 8.5.8. Easily exploitable vulnerability allows an unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise it. Successful attacks require human interaction from a person other than the attacker and can result in takeover.

Vulnerability in Oracle Outside In Technology (component: Outside In Core). Affected version is 8.5.8. Easily exploitable vulnerability allows an unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise it. Successful attacks require human interaction from a person other than the attacker and can result in takeover.

Vulnerability in Oracle Outside In Technology (component: Outside In Core). Affected version is 8.5.8. Easily exploitable vulnerability allows an unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise it. Successful attacks require human interaction from a person other than the attacker and can result in takeover.

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Lifecycle Management). Affected version is 11.2.25.0.000. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise it. Successful attacks can result in unauthorized access to critical data or complete access to all data.

Vulnerability in Oracle Outside In Technology (component: Outside In PDF Export SDK). Affected version is 8.5.8. Easily exploitable vulnerability allows an unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise it. Successful attacks require human interaction from a person other than the attacker and can result in takeover.

Vulnerability in Oracle Hyperion Financial Reporting (component: Server). Affected version is 11.2.25.0.000. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise it. Successful attacks can result in unauthorized access to critical data or complete access to all data.

Vulnerability in linuxfabrik-lib and Linuxfabrik Monitoring Plugins. From the earliest affected releases until linuxfabrik-lib 5.0.0 and Linuxfabrik Monitoring Plugins 6.0.0, check plugins embedded user-controlled values in command strings passed to lib.shell.shell_exec(), which split strings at pipe characters and executed the resulting commands. In check-plugins/restic-check/restic-check, the --repo parameter could inject a pipe-delimited command into a constructed restic invocation, and sudo-authorized execution allowed a compromised nagios or icinga account to run that command as root. The fixes require argv lists, always use shell=False, remove pipe splitting, and reject option-like positional values through lib.shell.safe_cli_value(). These issues are fixed in linuxfabrik-lib 5.0.0 and Linuxfabrik Monitoring Plugins 6.0.0.

Froxlor before version 2.3.8 contains a SQL Injection vulnerability in the Admins.add and Admins.update endpoints, where an attacker-controlled ipaddress array is stored and later concatenated into a SQL IN clause without parameterization. An authenticated administrator with change_serversettings permission can exploit this to retrieve arbitrary database data, including admin credentials.

Froxlor before version 2.3.8 contains a Stored XSS vulnerability in DNS TXT record content, which is not properly escaped before rendering in the admin panel. An authenticated customer with DNS editor access can inject JavaScript that executes in the administrator's browser session.

Blueprint Studio before version 2.5.2 contains a command injection vulnerability in the Git credential helper, where username and token are interpolated without validation. An attacker who can set Git credentials can inject shell commands, leading to arbitrary command execution with Home Assistant privileges.

Blueprint Studio before version 2.5.2 fails to consistently enforce admin-only authorization boundaries, allowing any authenticated user to access admin-intended backend API actions. This includes invoking Home Assistant services, modifying configuration files, accessing streams, and uploading files.

Linuxfabrik Monitoring Plugins before version 5.1.0 contains a vulnerability in the sudo policy that allows the nagios or icinga account to execute /usr/bin/apt-get as root without argument restrictions. An attacker controlling that account can use the APT::Update::Pre-Invoke option to execute arbitrary commands with root privileges, leading to full host compromise.

Froxlor before version 2.3.7 contains a vulnerability in the API authentication path that does not require a second factor (2FA) for accounts with two-factor authentication enabled. An attacker who obtains an API key and secret can access API functions without providing the TOTP code, potentially exposing or modifying customer data, domains, email and FTP accounts, databases, DNS records, and certificate material.

Keycloak contains a vulnerability in the legacy account-linking endpoint, where the protection mechanism based on a hash can be predicted by a malicious OIDC client. An attacker can forge a linking URL to connect the victim's account to an attacker-controlled external identity, leading to full account takeover.

Amazon ion-java before version 1.12.0 improperly handles highly compressed data in the GZIP auto-decompression handler, which may allow remote actors to cause a denial of service via a crafted compressed Ion document that expands to an arbitrarily large size upon decompression.

Amazon ion-java before version 1.12.0 has uncontrolled memory allocation in the binary Ion stream cursor, which may allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocation.

Buffer overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain, triggered when the message type byte of a NAS PDU is mutated.