CVE Vulnerability Catalog

Vulnerability in Sony XAV-9500ES device in crash dump handling allows local privilege escalation via command injection. Lack of string validation before using it in a system call. Requires low-privileged access to the system.

Vulnerability in Sony XAV-9500ES device in AVRCP_Br_Response_Parser allows remote code execution via heap-based buffer overflow. Lack of length validation before copying data to a buffer. Requires pairing a malicious Bluetooth device.

Vulnerability in Sony XAV-9500ES device in l2_reassemble_sdu allows remote code execution via heap-based buffer overflow. Lack of length validation before copying data to a buffer. Requires pairing a malicious Bluetooth device.

Vulnerability in Sony XAV-9500ES device in handling of RTSP SETUP packets allows remote code execution via buffer overflow. Lack of length validation before copying data to a fixed-length buffer. Authentication is not required.

Vulnerability in Heimdall Data Database Proxy in the uploadJar method allows remote code execution via directory traversal. Lack of path validation before using it in file operations. Authentication is required.

Vulnerability in Kenwood DNR1007XR in the udhcpd service is due to incorrect permissions set on a resource. A local attacker can exploit this flaw to escalate privileges and execute code in the context of root.

Vulnerability in Kenwood DNR1007XR in the JKGenService is due to lack of proper validation of a user-supplied string before using it to execute a system call. A local attacker can exploit this flaw to escalate privileges and execute arbitrary code in the context of root.

Vulnerability in NoMachine in the getstat service is due to lack of proper validation of a user-supplied string before using it to execute a system call. A remote authenticated attacker can exploit this flaw to execute arbitrary code in the context of the service account.

Vulnerability in Parallels RAS Client in the RDP Backend Service is due to an exposed dangerous function. A local attacker can exploit this flaw to escalate privileges and execute arbitrary code in the context of SYSTEM.

Vulnerability in Parallels RAS Client in the RDP Backend Service is due to an exposed dangerous function. A local attacker can exploit this flaw to escalate privileges and execute arbitrary code in the context of SYSTEM.

Vulnerability in Adminer in the multi_query method is due to an incorrect check of a function return value. A remote authenticated attacker can exploit this flaw to execute arbitrary code in the context of the web server.

Vulnerability in Hugging Face PyTorch Image Models during checkpoint parsing is due to lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. A remote attacker can exploit this flaw to execute code in the context of the current process, requiring user interaction.

Vulnerability in Parallels RAS Client in the RDP Backend Service is due to an exposed dangerous function. A local attacker can exploit this flaw to escalate privileges and execute arbitrary code in the context of SYSTEM.

Vulnerability in Comfast CF-N1-S version 2.6.0.1 in the sprintf function of the file /cgi-bin/mbox-config?method=SET&section=ptest_sn is due to command injection via the sn argument. A remote attacker can exploit this flaw to execute arbitrary system commands.

Vulnerability in SourceCodester Simple Online Food Ordering System version 1.0 in the file /admin/ajax.php?action=delete_category is due to SQL injection via the ID argument. A remote attacker can exploit this flaw to manipulate the database.

The jsoup library through version 1.23.2 contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder. A remote attacker can supply a deeply nested XML document with uniquely-namespaced elements, causing quadratic time and memory complexity, leading to JVM heap exhaustion and application termination.

A Relative Path Traversal vulnerability in Apache InLong (from 2.0.0 before 2.4.0) allows arbitrary file read from the Agent host filesystem.

A vulnerability in Apache InLong (from 2.0.0 before 2.4.0) allows any user who can authenticate to the manager to create, modify, and delete Data Node definitions.

Vulnerability in Apache InLong allows access to files or directories by external parties. The StreamSource component performs no authorization check, so any authenticated user can logically delete ALL stream sources. Affects versions from 2.0.0 before 2.4.0.

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords using an ASCII-only dictionary, leading to unauthorized access.