CVE Vulnerability Catalog

A vulnerability in Pillow before version 12.3.0 allows an attacker to read process memory or cause a fault when loading an uncompressed McIdas AREA image via the mmap codec path. Attacker-controlled header words can set a row stride smaller than the natural row width, leading to out-of-bounds read beyond the mapped region.

Use-after-free vulnerability in the Windows kernel allows an unauthorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network.

Command injection vulnerability in Copilot Chat within Microsoft Edge. An unauthorized attacker can remotely execute code on the victim's device.

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

A vulnerability has been found in Totolink NR1800X firmware version 9.1.0u.6279_B20210910 in the Form_Logout function of the /formLogout.htm file within the lighttpd component. Manipulation of the Host argument causes a stack-based buffer overflow, which can be exploited remotely.

A vulnerability in the DBI library for Perl before version 1.651 does not enforce statement handle consistency with the row. When the statement handle had no fields but the source row was non-empty, the internal row-buffer helper would read from a negative array index.

An authentication bypass by spoofing vulnerability in the ueberauth_apple library allows account takeover via unvalidated ID token claims. The token's JWT signature is verified, but claims like iss, aud, exp, and iat are not validated, enabling replay attacks.

A denial-of-service vulnerability exists in boot firmware of 5380/5480/5580 controllers prior to version 1.072. It allows a malicious user to write invalid file data to the controller, causing a major non-recoverable fault (MNRF).

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a command injection vulnerability in the optional cli_control plugin. An unauthenticated or CSRF attacker can store a malicious payload via the plugin's HTTP endpoint and then activate an irrigation station, leading to arbitrary OS command execution on the host.

A path traversal vulnerability in Tenable Agent versions 11.2.0, 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.

A denial-of-service vulnerability in 5380/5480/5580 controllers allows a malicious user to write invalid file data to the device, causing a major non-recoverable fault (MNRF).

A denial-of-service vulnerability in 5370/5570 controllers allows a remote user to load an invalid project, causing the device to enter a major non-recoverable fault (MNRF).

An OS Command Injection vulnerability has been found in Apache Kylin. Improper neutralization of special elements in job configuration parameters may allow an attacker to execute arbitrary commands via the backend API. Affects versions 4 through 5.0.3.

An SQL injection vulnerability was found in Apache Kylin's backend API that refreshes the table catalog. An attacker can inject malicious SQL into the generated query.

The 1715-AENTR EtherNet/IP Adapter exposes a debug port without proper privilege controls, allowing unauthenticated remote attackers to execute intrusive CLI commands. This can lead to reading or deleting files, stopping tasks, modifying memory, and changing I/O states.

In JetBrains YouTrack before versions 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, and 2024.2.148429, an authentication bypass via direct database access was possible, leading to administrative access.

In Apache Doris, certain FE HTTP REST administrative APIs were accessible without proper authentication. An unauthenticated attacker with network access to the FE HTTP service could perform unauthorized administrative operations, potentially affecting cluster integrity and availability and leading to cluster instability or denial of service.

A vulnerability in Opcenter X (versions prior to V2604) stems from improper validation of the algorithm in the JWT header. An unauthenticated remote attacker can forge arbitrary JWT tokens, bypass authentication, and impersonate any user, including administrative accounts.