CVE Vulnerability Catalog

In the Linux kernel, a vulnerability was resolved in the SMB client regarding the directory separator in SMB1 UNIX mounts. When calling cifs_mount_get_tcon() with SMB1 UNIX mounts, cifs_sb->mnt_cifs_flags must be read or updated only after calling reset_cifs_unix_caps(), otherwise the CIFS_MOUNT_POSIXACL and CIFS_MOUNT_POSIX_PATHS bits may be missing.

W jądrze systemu Linux zidentyfikowano podatność, która została rozwiązana. Dotyczy ona funkcji set_posix_acl_entries_dacl() i set_ntacl_dacl(), które mogą prowadzić do przepełnienia zmiennej u16 podczas akumulacji rozmiarów ACE, co skutkuje nadpisywaniem wcześniejszych wpisów ACL.

W jądrze systemu Linux zidentyfikowano podatność w sterowniku caiaq, polegającą na braku odpowiedniego odniesienia do urządzenia USB w funkcji create_card(). Może to prowadzić do dereferencji zwolnionego obiektu usb_device, co stwarza ryzyko awarii systemu.

alexta69 MeTube up to 2026.04.09 contains a vulnerability in the on_prepare function in app/main.py related to CORS policy. The manipulation leads to a permissive cross-domain policy with untrusted domains. The exploit has been publicly disclosed and fixed in version 2026.04.10.

Apache Neethi does not restrict URIs when manually fetching remote policy references through the PolicyReference API. An application can make outbound requests to arbitrary protocols and internal IP addresses. From version 3.2.2, only http/https URIs are allowed and link-local/multicast/any-local addresses are forbidden.

@diplodoc/search-extension versions 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file. Malicious title content is executed in the browser of a user viewing the documentation.

D-Link M60 up to 1.20B02 is affected by a weak password recovery issue in /usr/bin/httpd. The attack can be initiated remotely but requires high complexity and is known to be difficult to exploit. The exploit has been publicly disclosed.

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

A vulnerability was found in code-projects Gym Management System 1.0 in an unknown functionality of the file /admin/edit_exercises.php. Manipulation of the argument edit_exercise results in SQL injection, and the attack can be launched remotely. The exploit has been made public and could be used.

Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules. As a result, a malicious developer with access to Cloud Foundry could configure a route-service that would allow it to send requests to HTTP services on internal networks reachable by the Gorouter, which may not have previously had direct access from outside networks, or from the application.

DefectDojo up to version 2.55.4 contains a vulnerability in an unknown functionality of the Benchmark/Engagement/Product/Survey component that allows authorization bypass. The exploit has been publicly disclosed and can be executed remotely.

Bootstrap CMS 0.9.0-alpha has a vulnerability in resources/views/pages/show.blade.php (Page Creation Handler component) where manipulation of the body argument leads to code injection. Remote exploitation is possible, and the exploit has been made public. The project has not been actively maintained for many years.

Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is fixed in container version 0.12.3.

A vulnerability was detected in LinkStackOrg LinkStack up to 4.8.6 in the saveLink function of the file app/Http/Controllers/UserController.php (Management Endpoint component). The manipulation leads to authorization bypass. The attack can be initiated remotely and the exploit is public; the fixing pull request awaits acceptance.

IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete persisted vertex build data for another user's flow.

IBM Langflow Desktop <=1.8.4 allows a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 is vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check. A malicious actor could cause user-controlled code to run with administrator privilege.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4 for Linux, UNIX, and Windows (including Db2 Connect Server) allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic.

IBM watsonx.data intelligence versions 5.2.0, 5.2.1, 5.3.0, and 5.3.1 stores user credentials in plain text, which can be read by a local user.

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods without restrictions.