CVE Vulnerability Catalog

In SpiceDB from version 1.15.0 to before 1.52.0, caveat structures with nested lists can result in improper cache reuse. This issue has been patched in version 1.52.0.

Vulnerability in bit7z library before version 4.0.12 causes an off-by-one error in SafeOutPathBuilder::restoreSymlink(), allowing a crafted .7z archive to create a symlink outside the intended output directory on non-Windows platforms, enabling arbitrary file writes.

A person with access to a Mac may bypass the Login Window. The issue is fixed in macOS Monterey 12.4 with improved state handling.

Fission is a serverless framework that operates on Kubernetes and had a vulnerability in path validation prior to version 1.25.0. The SanitizeFilePath function did not properly check directory boundaries, allowing access to unsafe directories.

Crawlee is a web scraping and browser automation library. From version 1.0.0 to before version 1.7.0, Crawlee is vulnerable to SSRF via sitemap-derived URLs. This issue has been patched in version 1.7.0.

A path traversal vulnerability in Ghidra before version 12.1 in the SameDirDebugInfoProvider component allows attackers to inject traversal sequences into file paths. By crafting malicious ELF binaries with a .gnu_debuglink section, it is possible to probe filesystem existence and leak CRC32 hashes of arbitrary files during automatic DWARF analysis.

Ghidra before version 11.2 contains a use-after-free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiting the unsafe destruction order that causes iteration over deallocated memory.

CVE-2026-11859 describes an HTML injection vulnerability in the 'fetch links' emails sent by Thinkst Applied Research Canarytokens, allowing for Interface Manipulation and Cross-Site Scripting (XSS) in email clients that render HTML emails.

Vulnerability in Store Locator WordPress plugin before 1.6.6 allows high-privileged users to perform Stored XSS attacks even when unfiltered_html is disallowed (e.g., in multisite).

A vulnerability in some Dahua products allows an attacker to obtain the device's CA root certificate. If that CA is installed and trusted on client systems, the attacker can issue fraudulent certificates, undermining the certificate trust chain.

QTS, QuTS hero, and QuTScloud are not affected by this vulnerability. The vendor has already fixed the vulnerability in the following version: [no further details in description].

Vulnerability in Spring Security SAML allows attackers to decrypt SAML Responses and LogoutRequest/LogoutResponse elements without a valid signature, enabling the Service Provider to be used as a decryption oracle. Affects versions 5.7.0-5.7.23, 5.8.0-5.8.25, 6.3.0-6.3.16, 6.4.0-6.4.16, 6.5.0-6.5.10, 7.0.0-7.0.5.

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier have an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker can bypass security measures and gain unauthorized write access. User interaction is required (visiting a maliciously crafted URL or interacting with a compromised web page).

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier have an Improper Input Validation vulnerability leading to security feature bypass and unauthorized write access.

Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.

An out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

A protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.

An out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

The vulnerability in OpenSSL affects the EVP_PKEY_derive_set_peer() function when using a DHX (X9.42) peer key. A malicious peer can exploit the lack of proper subgroup membership check, leading to the recovery of the victim's private key after a few key exchange attempts.