CVE Brief Security Intelligence

A privilege management vulnerability in Splunk Enterprise for Windows allows authenticated local users to gain unintended control over system resources.

A buffer overflow vulnerability in the Zephyr HL7800 cellular modem driver allows for potential memory corruption during the processing of AT command responses.

A critical authentication bypass and information exposure vulnerability in phpMyFAQ allows unauthenticated remote attackers to gain unauthorized access to sensitive data.

Gotenberg, a Docker-powered API for PDF files, contains a path traversal vulnerability that could allow unauthorized access to sensitive files on the host system.

The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to Cross-Site Scripting (XSS) due to insufficient input validation.

The Simple File List WordPress plugin is susceptible to Cross-Site Scripting (XSS) via improper sanitization of user-supplied input.

The SAML Single Sign On WordPress plugin contains an improper authentication vulnerability that may allow unauthorized access to the application.

Splunk Enterprise contains an improper privilege management vulnerability that allows authenticated users to gain unintended control over system resources.

Splunk Enterprise contains an access control vulnerability that allows authenticated attackers to bypass intended restrictions on system resources.

Splunk Enterprise contains a code injection vulnerability where improper input neutralization allows attackers to execute arbitrary code.

Splunk Enterprise is susceptible to improper neutralization of special elements during code construction, which may allow authenticated users to execute arbitrary code.

Splunk Enterprise contains a flaw in query generation that fails to neutralize special elements, potentially allowing unauthorized data access or manipulation via an injection attack.

Splunk Enterprise is vulnerable to path traversal due to improper neutralization of directory sequences, potentially allowing authenticated users to access files outside of restricted directories.

Splunk Enterprise contains an authorization bypass vulnerability that allows authenticated users to perform unauthorized actions or access restricted resources.

Splunk Enterprise is susceptible to code injection due to improper neutralization of externally influenced input, allowing authenticated users to modify intended code execution.

Splunk Enterprise suffers from improper privilege management, allowing authenticated users to obtain unauthorized control over system resources.

A Server Side Request Forgery (SSRF) vulnerability exists in Splunk Enterprise and Splunk Secure Gateway, allowing an authenticated user to perform unauthorized requests to internal resources.

An authorization bypass vulnerability in Splunk Enterprise allows authenticated users to perform unauthorized actions due to improper implementation of access control checks.

A Server-Side Request Forgery vulnerability in the Cisco Talos Intelligence for Enterprise Security Cloud app for Splunk allows unauthorized destination requests.

An insecure deserialization vulnerability in the Splunk AI Toolkit allows authenticated users to execute arbitrary code by supplying malicious serialized data.

A missing authorization vulnerability in Dell Command Update (DCU) allows locally authenticated users to gain elevated privileges and execute malicious actions.

Dell OpenManage Enterprise is vulnerable to SQL injection, allowing an authenticated user to execute arbitrary database commands and compromise sensitive system data.

Dell OpenManage Enterprise contains an OS command injection vulnerability, enabling authenticated users to execute arbitrary commands on the underlying host operating system.

Agno's PythonTools contains a path traversal vulnerability in the joinpath file name argument, allowing potential unauthorized file access.

Termix is vulnerable to OS command injection, which allows an authenticated user to execute arbitrary commands on the underlying server.

Termix suffers from a missing authorization vulnerability that allows authenticated users to perform unauthorized actions within the platform.

ISPConfig contains an authenticated SQL injection vulnerability within its Remote API, allowing attackers to manipulate database queries via the primary ID parameter.

The electerm client contains an OS command injection vulnerability that can be triggered by a malicious user, leading to arbitrary code execution on the host machine.

GitPython contains an argument injection vulnerability that can be exploited to execute arbitrary commands when processing untrusted inputs.

GitPython is vulnerable to a configuration injection attack, allowing a low privileged attacker to execute unauthorized commands by manipulating option names.

The Frauscher FDS 102 system is vulnerable to session hijacking, as administrative session identifiers are inadvertently stored in plaintext within downloadable error log archives.

The Grav API Plugin for Grav CMS is susceptible to an authorization bypass, allowing authenticated users to access or modify content beyond their intended permissions.

A vulnerability in NetScaler ADC and NetScaler Gateway allows for remote service disruption. The flaw is exploitable by unauthenticated attackers over the network.

An out-of-bounds write vulnerability in IBM AIX and PowerVM VIOS allows local or adjacent attackers to potentially execute arbitrary code or cause system crashes.

A wrap-around error in IBM AIX and PowerVM VIOS may allow an adjacent attacker to compromise the integrity, confidentiality, and availability of the system.

A stack-based buffer overflow in IBM AIX and PowerVM VIOS allows an authenticated low-privileged user to achieve full system compromise.

A stack-based buffer overflow in IBM AIX and PowerVM VIOS allows an authenticated attacker to compromise the system.

A critical out-of-bounds write vulnerability exists in IBM AIX and PowerVM VIOS, which may allow an unauthenticated adjacent attacker to cause system crashes or arbitrary code execution.

An OS command injection vulnerability in IBM AIX and PowerVM VIOS allows unauthenticated adjacent attackers to execute arbitrary commands with elevated privileges.

IBM AIX and PowerVM VIOS contain an OS command injection vulnerability that permits unauthenticated adjacent attackers to execute arbitrary commands on the underlying system.

IBM AIX and PowerVM VIOS are affected by an out-of-bounds write vulnerability, which could allow an unauthenticated attacker on the local network to execute arbitrary code or cause a system crash.

IBM AIX and PowerVM VIOS are susceptible to an OS command injection vulnerability, allowing an unauthenticated attacker on the local network to execute arbitrary commands with elevated privileges.

IBM AIX and PowerVM VIOS contain an improper privilege management vulnerability, allowing an unauthenticated attacker on the local network to gain unauthorized access or elevate their privileges.

IBM AIX and PowerVM VIOS are affected by an OS command injection vulnerability, potentially allowing unauthorized command execution by adjacent attackers.

Wekan contains an authorization flaw that allows authenticated users to perform unauthorized actions due to improper privilege management.

A code injection vulnerability exists in marimo before version 0.23.15, which can be exploited via malicious MCP server configuration.

A SQL injection vulnerability exists in vsDesk version 11.06.02, allowing unauthenticated attackers to execute malicious database queries via insecure processing of user-supplied parameters.

IBM AIX and PowerVM VIOS contain an out-of-bounds write vulnerability, which could lead to memory corruption or arbitrary code execution by adjacent attackers.

An OS command injection vulnerability in Cudy WR3000 2.0 routers allows authenticated attackers to execute arbitrary system commands via the mesh MQTT command handler.

An OS command injection vulnerability in Renovate versions 37.158.0 through 37.198.0 allows attackers to execute arbitrary commands via malicious Helm chart configurations.

ArcadeDB contains a code injection vulnerability due to improper control of generation of code within the Groovy fallback mechanism.

A stack-based buffer overflow in the FreeBSD libalias RTSP handler allows for memory corruption due to missing length checks when rewriting outgoing packets.

A vulnerability in the Linux kernel VXLAN Multicast Database (MDB) subsystem can lead to source list corruption during failed replace operations, potentially causing network traffic misrouting.

A memory safety vulnerability in the Linux kernel mac802154 subsystem allows unauthenticated remote attackers to trigger a denial of service via a crafted IEEE 802.15.4 frame.

An out of bounds write vulnerability in the Linux kernel ice driver allows an authenticated guest VM to trigger a kernel page fault and denial of service.

A denial of service vulnerability in the Linux kernel TCP stack allows off-path attackers to terminate half-open TCP connections by injecting in-window RST packets.

A memory handling vulnerability in the Linux kernel amdgpu driver allows for potential resource leaks or denial of service due to improper invocation of memory management functions.

A use-after-free vulnerability in the Linux kernel PPPoE implementation allows local attackers to trigger memory corruption and potential privilege escalation.

A flaw in the Linux kernel rtase driver allows a remote attacker to trigger a transmission hang and denial of service via crafted network packets with malformed headers.

A logic error in the Linux kernel Rados Block Device (rbd) component allows an unauthenticated attacker to trigger a denial of service via a corrupted object map update.

A missing facility check in the Linux kernel ptp_s390 module allows for improper physical clock registration, potentially leading to unauthorized access or system instability.