CVE Vulnerability Catalog

In ImageMagick prior to versions 6.9.13-47 and 7.1.2-22, performing a polynomial distortion with specific arguments can cause an out-of-bounds over-read of 24 bytes. This issue has been fixed in the mentioned versions.

The bit7z library prior to version 4.0.12 has an arbitrary file overwrite vulnerability via symlink attack on predictable temp files during archive update.

In ImageMagick prior to versions 6.9.13-48 and 7.1.2-22, an invalid connected-components:keep-top value can cause a heap buffer over-read during connected components operation. This has been fixed.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, an off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder.

In ImageMagick prior to versions 6.9.13-47 and 7.1.2-22, a missing check in the PSD decoder allows bypassing the list-length resource policy when decoding a PSD image. Other security limits still apply.

In ImageMagick prior to versions 6.9.13-47 and 7.1.2-22, writing an IPTC output file with a malicious input can cause an out-of-bounds read of one byte. This has been fixed.

In OpenVPN ovpn-dco-win versions 2.0.0 through 2.8.3, an incorrect buffer size calculation in the epoch key generator allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption via a crafted data packet, causing a system crash.

A memory corruption vulnerability in tunnel traffic processing in PAN-OS allows an authenticated user to initiate system reboots using a maliciously crafted packet. Repeated attempts can put the firewall into maintenance mode.

A security control bypass vulnerability was found in Prisma Access Agent for Linux. A local attacker can route network traffic outside the VPN tunnel, bypassing security policies.

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS allows a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the app. After obtaining the passcode, the user can perform these actions even if the configuration would not normally permit it.

Palo Alto Networks PAN-OS software has a cross-site scripting (XSS) vulnerability that allows a malicious authenticated administrator to store a JavaScript payload using the web interface. This affects PA-Series and VM-Series firewalls and Panorama (virtual and M-Series). Cloud NGFW and Prisma Access are not affected.

Weblate is a web based localization tool. From version 5.15 to before version 2026.6, VCS_RESTRICT_PRIVATE did not properly account for some transitional IPv6 ranges, multicast addresses, or some semi-private IPv4 ranges, which allowed some addresses to bypass private range restrictions.

Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.0, there is a SSRF and local file read vulnerability via the xsl-style-sheet option.

Weblate is a web based localization tool. Prior to version 2026.5, Weblate's live search preview renders unit source and context as HTML without escaping, potentially allowing malicious code execution.

Metrics::Any::Adapter::SignalFx versions before 0.04 for Perl do not protect against metric injections. The statsd protocol allows multiple metrics to be sent per packet, creating a risk.

The CleanWipe Removal Tool (macOS) prior to version 16.0.0.65 may be susceptible to a Local Privilege Escalation vulnerability. An attacker with limited access can escalate their privileges to gain administrative control.

Unbounded memory allocation in the CRYPTO frame reassembler in s2n-quic before version 1.8.2 may allow an unauthenticated remote actor to cause a denial of service by sending crafted QUIC Initial packets.

Fission is a serverless framework, native to Kubernetes, that prior to version 1.25.0 improperly validated the RelativeURL and Prefix fields in HTTPTriggerSpec.Validate(). These fields were only validated at the CLI level, allowing URL checks to be bypassed using kubectl or direct Kubernetes REST API calls.

Fission, a Kubernetes-native serverless framework, prior to version 1.24.0, created builder pods with auto-mounted service account tokens, potentially leading to unauthorized access to resources. This issue has been patched in version 1.24.0.

The draw.io application prior to version 29.7.12 contains a vulnerability that allows arbitrary JavaScript execution through a crafted .drawio file. The issue lies in the Text Format panel where the raw cell label is assigned to an element without proper sanitization.