CVE Vulnerability Catalog

A vulnerability in Keras versions up to and including 3.13.2 allows arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The issue stems from missing checks of the `dataset.is_virtual` property in `H5IOStore._verify_dataset()` and `file_editor.py` methods. An attacker can craft a malicious `.keras` model or `.h5` weights file with a Virtual Dataset (VDS) referencing external HDF5 files.

A vulnerability in the Wikimedia Foundation timeline extension affects files scripts/EasyTimeline.Pl and includes/Timeline.Php. The issue impacts versions before 1.46.0, 1.45.4, 1.44.6, 1.43.9.

A vulnerability in Stormshield Network Security allows authentication using a revoked client certificate on the captive-admin portal. An attacker possessing such a certificate can gain administrative access.

PACSgear MediaWriter 5.2.1 exposes an unauthenticated .NET Remoting service on port 9000, allowing an unauthenticated attacker to read and write arbitrary files remotely. Chaining this with DLL hijacking enables remote code execution as SYSTEM.

PACSgear PACS Scan 5.2.1 contains an unauthenticated remote code execution vulnerability, allowing attackers to read and write arbitrary files by exploiting an exposed .NET Remoting TCP service on port 22222 via PGImageExchQueue.exe. Attackers can chain arbitrary file write with DLL hijacking in PGImageExchangeQueueSvc.exe, which loads missing DLLs like CRYPTSP.DLL from the application directory, achieving remote code execution as NT Authority\SYSTEM upon service restart.

Cross-site scripting (XSS) vulnerability in the Timeline extension for MediaWiki allows an attacker to inject malicious JavaScript due to improper input neutralization during page generation. The issue affects includes/Timeline.php and scripts/EasyTimeline.pl.

A Cross-site Scripting (XSS) vulnerability was found in MediaWiki due to improper input neutralization during page generation. It affects multiple source files including Language.php and various log formatters.

A vulnerability in MediaWiki allows an unauthorized actor to access sensitive information through API and permission management files.

A vulnerability in MediaWiki allows an unauthorized actor to access sensitive information. The issue is located in the includes/Actions/InfoAction.php file.

A cross-site scripting (XSS) vulnerability exists in MediaWiki before versions 1.46.0, 1.45.4, 1.44.6, and 1.43.9 in the file resources/src/mediawiki.Api/index.js. Improper input neutralization during web page generation allows injection of malicious scripts.

An XSS vulnerability in the SyntaxHighlight_GeSHi MediaWiki extension allows an attacker to inject malicious scripts due to improper input neutralization. The issue affects the includes/SyntaxHighlight.php file and versions before 1.46.0, 1.45.4, 1.44.6, and 1.43.9.

A vulnerability in MediaWiki allows unauthorized access to authentication and account management functions. The issue affects API files and special pages responsible for changing, linking, and removing authentication data.

An XSS vulnerability in MediaWiki and CentralAuth allows an attacker to inject malicious scripts into a web page generated by the application. The issue affects several source files including ApiFormatBase.php and ApiHelp.php.

A vulnerability in the Wikimedia Foundation AbuseFilter extension allows an unauthorized actor to access sensitive information. The issue is located in the file includes/Api/QueryAbuseFilters.php.

A vulnerability in MediaWiki allows an unauthorized actor to access sensitive information. The issue is located in the includes/Parser/Parser.php file and affects versions before 1.46.0, 1.45.4, 1.44.6, and 1.43.9.

Deserialization of untrusted data vulnerability in MediaWiki. The issue is present in WikiImporter.php, WikiRevision.php, and LogEntryBase.php files. Affects versions before 1.46.0, 1.45.4, 1.44.6, and 1.43.9.

A vulnerability in MediaWiki allows an unauthorized actor to access sensitive information via the includes/Api/ApiUserrights.php file. The issue affects versions before 1.46.0, 1.45.4, 1.44.6, and 1.43.9.

Control Web Panel before version 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL queries by submitting unsanitized input through the userRes POST parameter at the user endpoint. Attackers can exploit MySQL root privileges obtained via the injection to write arbitrary files using INTO DUMPFILE, enabling deployment of a PHP webshell to the web-accessible roundcube logs directory and achieving remote code execution as the cwpsvc account.

The NVIDIA AIStore framework contains a vulnerability that allows authentication bypass. Successful exploitation could lead to denial of service, privilege escalation, information disclosure, and data tampering.

NVIDIA Triton Inference Server for Linux contains a use-after-free vulnerability that an attacker can exploit. Successful exploitation may lead to denial of service.