CVE Vulnerability Catalog

A Code Injection vulnerability in Dell PowerStore. An authenticated user with limited privileges could exploit this to execute arbitrary code with root privileges.

An OS Command Injection vulnerability in Dell PowerStore. An authenticated user with limited privileges could exploit this to execute arbitrary commands with root privileges.

Incorrect access control in the setDevReboot function of TOTOLINK T6 allows unauthenticated attackers to reboot the local device and, on a master, fan out reboot commands to mesh slaves via a crafted MQTT message to the cs_broker component.

An Arbitrary File Upload vulnerability in the Gravity Forms plugin for WordPress (up to and including 3.0.2). Insufficient validation of multi-file upload chunk state in GFAsyncUpload::upload() allows unauthenticated attackers, when a public form has a File Upload field with Multiple Files enabled, to upload a PNG/PDF polyglot to an attacker-selected public .php or .html filename in the temporary upload directory. This can lead to remote code execution on NGINX or other non-.htaccess respecting servers. Where PHP execution is blocked, attacker-written HTML can result in stored XSS.

A privilege escalation vulnerability in FactoryTalk Activation Manager. Custom installer actions spawn visible console windows running with SYSTEM privileges during installation or repair. An authenticated attacker with Windows credentials could hijack these windows to obtain a SYSTEM-level command prompt, allowing full access to all files, processes, and system resources.

An OS Command Injection vulnerability (CWE-78) that could cause execution of Linux operating system commands when a system backup that has been maliciously modified is restored.

A security issue in ControlFLASH where the installer grants write permissions to the 'Everyone' group on a product installation directory. This could allow arbitrary code execution, giving an attacker the ability to run any commands or code of their choice on a target machine at the logged-in user's permission level.

A security issue exists in FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device.

A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged attacker could pre-position malicious filesystem links, causing a subsequent elevated Winlogbeat operation to write to or delete arbitrary files, leading to denial of service.

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA requests are sent.

A denial-of-service security issue exists in the affected product. The issue stems from a crafted CIP packet crashing the module, requiring a restart to recover.

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.

Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

Privilege escalation in Firefox for Android. Fixed in Firefox 155.

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this to write attacker-controlled content to arbitrary filesystem paths.