CVE Vulnerability Catalog

OS Command Injection vulnerability in VoiceMode up to 8.10.1. The update_config MCP tool and 'voicemode config set' CLI write caller-supplied values to ~/.voicemode/voicemode.env without shell-safe escaping.

Directory Traversal vulnerability in mcp-filesystem-server v0.11.1 due to improper link resolution in validatePath. When EvalSymlinks returns os.IsNotExist for a dangling symlink, the fallback validates only the parent directory and returns the unresolved path, allowing file writes outside allowed directories.

Improper Access Control in ArgusMonitor.sys in Argotronic ArgusMonitor 7.4.02 and earlier allows local low-privileged users to bypass device handle access restrictions via a TOCTOU condition in IRP_MJ_CREATE and send a crafted IOCTL 0x9C4024A8 request, causing denial-of-service.

KitchenAsty through 0.3.0 contains an IDOR vulnerability in the reservations API. The endpoint GET /api/reservations/:id applies authentication middleware but lacks ownership or role checks, and the getReservation handler returns the record by client-supplied identifier without comparing reservation.customerId to the authenticated principal.

A sensitive information disclosure vulnerability exists in the underlying OS of HPE Networking Instant On. Successful exploitation by an authenticated local attacker with high privileges could retrieve information useful for further access to network services, but only if certain preconditions outside attacker's control are met.

A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could interrupt normal operation and access limited information within the component.

A denial-of-service vulnerability in the API endpoint of HPE Networking Instant On could allow an authenticated attacker with administrative privileges to cause a denial of service. The service resumes without manual intervention.

A local privilege-escalation vulnerability in the affected daemon of HPE Networking Instant On could allow a local attacker to achieve arbitrary code execution with root privileges if certain preconditions are met.

An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow limited data access and limited changes.

An authentication bypass vulnerability in the PAPI protocol of HPE Networking Instant On APs could allow an unauthenticated adjacent attacker to circumvent authentication controls. Successful exploitation could allow sending unauthorized network traffic to the target device.

A format string vulnerability in the API endpoint of HPE Networking Instant On APs could allow an authenticated remote attacker with high privileges to cause memory corruption with modified input. Successful exploitation could lead to DoS or remote code execution.

Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenticated users to attacker-controlled sites by injecting an unvalidated redirect query parameter. Attackers can craft a malicious link to capture authorization codes via the Referer header and conduct credential phishing.

ClaraVerse through 0.3.1 contains SSRF protection bypasses in the download_file and scrape_web agent tools. Authenticated users can bypass hostname validation and IPv6 transition address filtering to make the server request internal services and cloud instance metadata endpoints.

Fider before version 0.38.0 contains a server-side request forgery (SSRF) vulnerability due to a time-of-check time-of-use gap in URL validation for webhooks and custom OAuth provider endpoints. Administrators controlling DNS can perform DNS rebinding attacks to make the Fider server send requests to internal services or cloud metadata endpoints.

Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: High)

Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)