CVE Vulnerability Catalog

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent() that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, where RUNSCRIPT defines H2 Java function aliases and restores Java-method execution.

Cross-Site Request Forgery (CSRF) vulnerability in the e4jvikwp VikRentCar plugin through version 1.4.8. The vulnerability allows unwanted actions to be performed on behalf of a logged-in user.

A2A Java SDK from 1.3.0.Final before 1.3.2.Final: the AndroidA2AHttpClient synchronous POST path overrides the disabled-redirect setting with PostBuilder's followRedirects=true. JSONRPCTransport and RestTransport add interceptor-produced authentication headers and call synchronous post() without disabling redirects, disclosing a configured API key or token to another authority on redirect.

A2A Java SDK prior to 1.3.0.Final: the default InMemoryTaskStore configuration performs no authorization on task reads. The no-argument constructor sets authorizationProvider to null, and get(String taskId) returns the stored task without checking caller or owner. In a multi-caller deployment, a caller who knows another caller's task ID can retrieve task status, context ID, message history, and artifacts; default transport endpoints do not enforce authentication.

Raptor RDF Syntax Library 2.0.15 through 2.0.16 contains a heap-based buffer overflow in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.

Flatpak prior to 1.18.1 allows a malicious local user in an active session to use a crafted architecture name to trick the flatpak-system-helper process into creating a root-owned directory tree outside the intended root directory. This requires at least one OCI remote to be configured (common on Fedora). Combined with other vulnerabilities fixed in 1.18.1, it can lead to local root privilege escalation.

The GUIX binary resource loader does not validate that a font page's glyph range is well formed. A page declaring first_glyph > last_glyph causes an unsigned underflow, and an unchecked multiplication leads to allocating a buffer far smaller than the data written into it, resulting in a heap overflow with attacker-controlled glyph records.

The GUIX PNG chunk reader does not enforce chunk ordering and allows a second IHDR to be read after IDAT. The second IHDR rewrites dimensions and bit depth after the decoded-data buffer has been allocated, and the row-filter reversal pass then walks past the old allocation, causing a heap out-of-bounds write.

In DrayTek Vigor2960 1.5.1.6 Revision 8218, the ruequest_certificate function in /cgi-bin/mainfunction.cgi (IPsec Handler component) mishandles the option argument, enabling command injection. The attack can be launched remotely and a public exploit exists. The product is end-of-support (EoS).

launch-editor-middleware prior to 2.14.2 mishandles an attacker-controlled Windows file argument ending in a parent-directory component plus a line-and-column suffix. The path is resolved with the suffix present, and the suffix is removed before the existsSync check, bypassing filename existence validation. Combined with a separate Windows percent-expansion flaw, this can lead to OS command injection.

In filelock from 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the database and side files by name. On POSIX systems an attacker with rename access in a non-sticky parent can swap those names to cause overwrite or unlink operations; a writable adjacent hot journal is additionally required for attacker-chosen content overwrites.

Incomplete cleanup in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. The issue affects versions 11.0.0-M21 through 11.0.26, 10.1.25 through 10.1.60, and 9.0.90 through 9.0.122.

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FX_MEDIA driver callback, giving control of the instruction pointer.

Incomplete cleanup in Apache Tomcat allowed trailer information from a previous request to leak into a subsequent request. The issue affects versions 11.0.0-M23 through 11.0.26, 10.1.27 through 10.1.60, and 9.0.92 through 9.0.122.

A TOCTOU race condition in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorized local user to access the unix domain socket. The fix for CVE-2026-65183 only addressed the NIO connector. The issue affects versions 9.0.47 through 9.0.122.

In DrayTek Vigor2960 1.5.1.6 Revision 8218, the rename_table function in /cgi-bin/mainfunction.cgi (Rename Table Handler component) mishandles the newtable argument, enabling command injection. The attack can be launched remotely and a public exploit exists. The product is end-of-support (EoS).

In DrayTek Vigor2960 1.5.1.6 Revision 8218, the cgiEscape function in /cgi-bin/mainfunction.cgi (swmconfigupload component) mishandles the multipart argument, enabling path traversal. The attack can be launched remotely and a public exploit exists. The product is end-of-support (EoS).

In DrayTek Vigor2960 1.5.1.6 Revision 8218, the setSWMProfile function in /cgi-bin/mainfunction.cgi mishandles the setSWMProfile argument, enabling path traversal. The attack can be launched remotely and a public exploit exists. The product is end-of-support (EoS).

Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL bypass where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This occurs by default and is not the result of misconfiguration.

In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes enabling template substitution are rendered by an uncapped Liquid engine before authentication and RBAC. The bearer check does not reject a missing or invalid token, and the auth rate limit applies only to user login routes. A small JSON body can stall or abort the Controller process.