CVE Vulnerability Catalog

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service using a specially crafted SQL query due to improper allocation of system resources.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when certain configurations exist.

IBM Langflow Desktop versions 1.2.0 through 1.8.4 allow an authenticated attacker to traverse directories and write arbitrary files on the system via a crafted URL request containing /../ sequences.

CVE-2026-40951 is a memory corruption vulnerability in Secure Access Windows clients prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and trigger a denial of service.

CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50. Attackers with control of a modified client can send a specially crafted message to the server and cause a denial of service.

CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to trigger a denial of service.

IBM Langflow Desktop 1.6.0 through 1.8.4 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI, thus altering the intended functionality and potentially leading to credentials disclosure within a trusted session.

IBM Langflow Desktop 1.0.0 through 1.8.4 is vulnerable to Server-Side Request Forgery (SSRF). An authenticated attacker may send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to 'blue screen' the system.

CVE-2026-33450 is an out-of-bounds read vulnerability in the Secure Access macOS client prior to 14.50. Attackers with control of a modified server can send a malformed packet to the client, causing a denial of service.

FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumulator truncates uint32_t values returned by the TLV_SIZE() macro, causing the loop termination condition to fail while pointer advancement continues unchecked. An attacker with an established OSPF adjacency can send a crafted LS Update packet with a malicious Type 10 or Type 11 Opaque LSA to trigger out-of-bounds memory reads and crash all affected routers in the OSPF area or autonomous system.

SSCMS v7.4.0 contains a reflected cross-site scripting vulnerability in the STL processing endpoint that allows attackers to execute arbitrary JavaScript by crafting malicious STL template payloads that are decrypted and returned without proper sanitization. Attackers can exploit improper output encoding in the /api/stl/actions/dynamic endpoint to inject executable JavaScript into JSON responses.

In the Hex.RemoteConverger module of the hexpm hex library, dependency checksum verification is silently skipped due to a type mismatch (string-based vs. atom-based names), causing the verification code path to be bypassed. This allows dependency integrity bypass when an attacker can influence cached packages or the registry, and mix.lock is silently rewritten with registry checksums, erasing evidence of tampering. Affects hex from 0.16.0 before 2.4.2.

GnuTLS performs case-sensitive comparisons of nameConstraints labels, allowing a remote attacker to bypass policy by crafting a certificate with casing differences in the Subject Alternative Name.

A vulnerability in Keycloak causes the disabling of account and account-api features via the `--features-disabled` flag to be ineffective. Five REST API endpoints under `/account/v1alpha1` remain fully functional because they lack the `checkAccountApiEnabled()` gate that correctly blocks the other four endpoints in the same service class.

A vulnerability in the assisted-service REST API, an optional Assisted Installer component in the Multicluster Engine (MCE), allows an authenticated user with minimal namespace-scoped privileges to obtain administrative credentials for arbitrary clusters provisioned through the hub. The credentials download endpoint (GET /v2/clusters/{cluster_id}/credentials) and the kubeconfig download endpoint are operational in AUTH_TYPE=local mode, which unconditionally grants full administrative access to any request bearing a valid JWT. A valid local JWT is embedded as a plaintext query parameter in InfraEnvStatus.ISODownloadURL and is readable by any user who has get rights on an InfraEnv object in their own namespace.

Podatność CVE-2026-7382 dotyczy oprogramowania PDKS firmy MeWare Software Development Inc., które umożliwia nieautoryzowanym osobom dostęp do prywatnych informacji osobistych. Problem występuje w wersjach od V16.20200313 do przed VMYR_3.5.2025117.

Dancer::Session::Abstract versions through 1.3522 for Perl generates session IDs insecurely, relying on predictable data such as pathname, PID, epoch time, and the rand() function. Predictable session IDs could allow an attacker to gain access to systems.

LEX Baza Dokumentów is vulnerable to DOM-based XSS in "em" cookie parameter. The application unsafely processes the parameter on the client side, allowing an attacker to execute arbitrary JavaScript in the context of the victim's browser. An attacker with ability to set a cookie can perform a more severe attack, so we evaluate the impact and risk of exploitation as minimal. However, the vendor considered this a vulnerability and released a security patch. This issue was fixed in version 1.3.4.

In the Linux kernel, rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer network namespace when creating paired devices (veth, vxcan, netkit). This allows an unprivileged user with a user namespace to create interfaces in arbitrary network namespaces, including init_net.