CVE Vulnerability Catalog

User interface (UI) misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network.

The deploy-stub component in Panda3D up to version 1.10.16 contains a denial of service vulnerability due to unbounded stack allocation. The alloca() function allocates memory for argv_copy and argv_copy2 based on attacker-controlled argc without validation. Supplying a large number of command-line arguments can exhaust stack space and propagate uninitialized stack memory into Python interpreter initialization, causing a reliable crash and undefined behavior.

OpenLDAP Lightning Memory-Mapped Database (LMDB) versions 0.9.14 before 0.9.34, prior to commit 8e1fda8, contain a heap buffer underflow in the readline() function of mdb_load. When processing malformed input containing an embedded NUL byte, an unsigned offset calculation can underflow and cause an out-of-bounds read of one byte before the allocated heap buffer. This can cause mdb_load to crash, leading to a limited denial-of-service condition.

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.77, a malformed gRPC GetMetrics request causes get_metrics to unwrap() failed deserialization of metric_type/opts, panicking the handler thread and enabling remote denial of service of the metrics endpoint.

LibreChat version 0.8.1-rc2 does not enforce proper access control when querying agent permissions. An authenticated attacker can read the permissions of arbitrary agents, even if they have no permissions for this agent, including permissions individually assigned to other users.

MicroServer copies parts of the system firmware to an unencrypted external SD card on boot, which contains user and vendor secrets. An attacker can utilize these plaintext secrets to modify the vendor firmware, or gain admin access to the web portal.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows Cross-Site Scripting (XSS). This issue affects MediaWiki - ProofreadPage Extension: 1.45, 1.44, 1.43, 1.39.

The VisualData extension for MediaWiki version 1.45 is vulnerable to inefficient regular expression complexity (ReDoS), allowing exponential blowup. This may lead to resource exhaustion and denial of service.

In the Quarkus framework before versions 3.31.0, 3.27.2, and 3.20.5, there is a vulnerability in the HTTP layer of Quarkus REST related to response handling. When a response is being written, the framework waits for previously written chunks to be fully transmitted; if the client connection is dropped, the worker thread is never released and becomes permanently blocked. This can exhaust worker threads, leading to degraded performance or complete unavailability.

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.3, an open redirect vulnerability exists in the SAML authentication endpoint (/auth/saml/callback). By manipulating the RelayState parameter, an attacker can force a 302 redirect to any external URL, enabling phishing, credential theft, and arbitrary site redirection. This issue has been patched in version 6.8.3.

Knowage (open source analytics and business intelligence suite) prior to version 8.1.37 contains a blind server-side request forgery vulnerability. Attackers can send requests to arbitrary hosts/paths, but cannot read the response, limiting impact, yet enabling internal network scanning.

An insufficient session expiration vulnerability exists in ABB WebPro SNMP Card PowerValue and WebPro SNMP Card PowerValue UL. The issue affects versions through 1.1.8.K.

A vulnerability in the licensing features of Cisco ISE and ISE-PIC is caused by improper parsing of XML processed by the web-based management interface. An authenticated administrator can upload a malicious file and read arbitrary files from the underlying operating system, including data otherwise inaccessible even to administrators.

Multiple Cisco products are affected by an out-of-bounds read in buffer handling when processing DCE/RPC requests in the Snort 3 Detection Engine. An unauthenticated remote attacker could send many requests over an established connection to obtain sensitive information from the Snort 3 data stream.

Multiple Cisco products are affected by a vulnerability in DCE/RPC request processing that can cause a buffer use-after-free read. An unauthenticated remote attacker could send many DCE/RPC requests over an established connection to leak sensitive information or restart the Snort 3 Detection Engine.

Devolutions PowerShell Universal is affected by a Cross-site Scripting (XSS) vulnerability. The issue affects versions before 4.5.6 and before 5.6.13.

A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code by uploading a crafted PDF file or malware.

A stored Cross-Site Scripting (XSS) vulnerability exists in Perch CMS version 3.2. An authenticated attacker with administrative privileges can inject malicious JavaScript code into the “Help button url” setting within the admin panel. The injected payload is stored and executed when any authenticated user clicks the Help button, potentially leading to session hijacking, information disclosure, privilege escalation, and unauthorized administrative actions.

A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands by supplying a crafted command string.

ABB WebPro SNMP Card PowerValue and PowerValue UL contain an improper check for unusual or exceptional conditions vulnerability. The issue affects versions through 1.1.8.K.