CVE Vulnerability Catalog

A reflected Cross-Site Scripting (XSS) vulnerability has been found in Eventobot. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the 'name' parameter in '/search-results'.

In libssh up to 0.11.3, the functions sftp_extensions_get_name and sftp_extensions_get_data in src/sftp.c (SFTP Extension Name Handler component) can cause an out-of-bounds read when the idx argument is manipulated. The attack may be performed remotely. Upgrading to version 0.11.4 or 0.12.0 resolves the issue (patch 855a0853ad3abd4a6cd85ce06fce6d8d4c7a0b60).

A vulnerability in node-tar prior to version 7.5.10 allows an attacker to create a hardlink pointing outside the extraction directory by using a drive-relative link target such as C:../target.txt. This enables file overwrite outside the current working directory during normal tar.x() extraction.

In the Go language, actions that insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting, htmlmetacontenturlescape, was added to disable escaping.

Wykonanie spreparowanego wejścia JavaScript w QuickJS w wersji 2025-09-13 może spowodować wewnętrzną awarię asercji, co prowadzi do przerwania działania (SIGABRT) podczas zbierania śmieci. Problem ten został naprawiony w commitcie 1dbba8a88eaa40d15a8a9b70bb1a0b8fb5b552e6 z dnia 2025-12-11.

GNU Binutils through 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines, and an unexpected data length of zero triggers a fatal abort in byte_get_little_endian().

GNU Binutils through 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data. The internal all_relocations array may remain partially uninitialized, and later process_got_section_contents() may attempt to free an invalid r_symbol pointer, triggering memory corruption checks in glibc and causing the program to terminate with SIGABRT. The impact is limited to denial of service; the issue is disputed by third parties because the observed behavior occurred only in pre-release code and did not affect any tagged version.

Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in handling the debug_rnglists header causes objdump to repeatedly print the same warning and fail to terminate.

Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in handling DWARF compilation units can result in an invalid offset_size value being used in byte_get_little_endian, leading to an abort (SIGABRT). The issue was observed in binutils 2.44, and a local attacker can trigger the crash by supplying a malicious input file.

An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and produce endless output until manually interrupted. This allows a local attacker to cause excessive resource consumption by supplying a malicious input file.

Navtor NavBox allows information disclosure via the /api/ais-data endpoint. A remote, unauthenticated attacker can send crafted requests to trigger an unhandled exception, causing the server to return verbose .NET stack traces.

QuickCMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. An attacker can craft a special website that, when visited by the victim, automatically sends a POST request with the victim's privileges. No protection is implemented. Fixed in version 6.8 (14.05.2026).

Melange version 0.40.5 and earlier downloads URIs from build configs using io.Copy without any size limit or HTTP client timeout. An attacker-controlled URI in a melange config can cause unbounded disk writes, exhausting disk space on the build runner.

pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker can craft a PDF that leads to long runtimes when accessing a stream which uses the /ASCIIHexDecode filter. This issue has been patched in version 6.7.5.

OpenClaw's voice-call plugin versions before 2026.2.3 contain an improper authentication vulnerability in webhook verification. Attackers can bypass verification by supplying untrusted Forwarded or X-Forwarded-* headers in reverse-proxy configurations that implicitly trust these headers.

The Calendar module for HumHub before version 1.8.11 contains a Stored Cross-Site Scripting (XSS) vulnerability in Event Types. It impacts users viewing events created by an administrative account. This issue has been patched in version 1.8.11.

In CPython, the import hook handling legacy *.pyc files (SourcelessFileLoader) is incorrectly handled in FileLoader (a base class) and does not use io.open_code() to read the .pyc files. Consequently, sys.audit handlers for this audit event do not fire.

A vulnerability in Cisco Secure Firewall Threat Defense (FTD) Software allows an authenticated local attacker with a low-privileged account to cause the device to unexpectedly reload, resulting in a DoS condition. This is due to improper validation of user-supplied input.

Podatność w protokole OSPF oprogramowania Cisco Secure Firewall ASA oraz Cisco Secure FTD może pozwolić uwierzytelnionemu, sąsiedniemu atakującemu na nieoczekiwane przeładowanie urządzenia, co prowadzi do stanu DoS. Wykorzystanie tej podatności wymaga posiadania tajnego klucza OSPF.

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD software allows an authenticated, adjacent attacker to cause an unexpected device reload, resulting in a DoS condition. The issue is due to heap corruption when parsing OSPF packets.