CVE Vulnerability Catalog

A vulnerability in SveltyCMS 0.0.6 in the user attribute update endpoint allows improper access controls, letting a remote attacker modify user attributes without authorization. A patch is available as commit 05b4f9efeb79e9d72a693232334d7529687f896f.

Imager versions before 1.036 for Perl disclose uninitialised heap memory when reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p. The palette is allocated uninitialised, and the TGA reader stores pixel indexes without checking them against the colour map, allowing reads of prior heap contents.

A Cross-Site Scripting (XSS) vulnerability in Moonshot AI Kimi allows a remote attacker to execute arbitrary code via the HTML artifact preview in the public share view. The version as of 2026-07-18 is affected.

A vulnerability in OpenCVE before 3.0.0 allows an authenticated user with permission to configure notification channels to trigger requests to arbitrary hosts, including internal network resources, localhost, link-local addresses, and cloud metadata services. The notification testing for Webhook and Slack does not sufficiently validate destination URLs, potentially leaking information.

A flaw in Netty's HTTP/2 HpackEncoder allows a remote attacker to cause a Denial of Service by sending HTTP/2 SETTINGS frames with an excessively large MAX_HEADER_TABLE_SIZE. This leads to excessive storage of headers, increasing CPU and memory usage.

A vulnerability in Netty's OCSP client fails to verify the 'id-kp-OCSPSigning' Extended Key Usage in OCSP responder certificates. A remote attacker holding any valid certificate from the same CA can forge 'GOOD' OCSP responses for revoked certificates, bypassing revocation checks.

In io.netty/netty-codec-memcache, the Memcache binary protocol codec reads keyLength and extrasLength as signed Java types instead of unsigned as specified. A malicious Memcache server can exploit this by sending a crafted response, leading to frame desynchronization and response smuggling.

A stored Cross-Site Scripting (XSS) vulnerability exists in the profile management functionality of T-Systems' TAO 2.0 suite. An authenticated user can inject malicious HTML or JavaScript into personal data fields, which are displayed without proper sanitization to other users, including administrators.

The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'notes' parameter in all versions up to and including 10.8.1 due to insufficient input sanitization and output escaping. Authenticated attackers with Contributor-level access and above can inject arbitrary web scripts.

The Popup Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post_title in all versions up to and including 1.24.0 due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access and above can inject scripts using HTML entity-encoded payloads.

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access.

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

SQL injection vulnerability in the Sharing API in Synology DiskStation Manager (DSM) before versions 7.2.1-69057-10, 7.2.2-72806-7, and 7.3.2-86009-2. A remote authenticated user can exploit this flaw to obtain arbitrary shared files.

Server-Side Request Forgery (SSRF) vulnerability in the PersonMail API in Synology DiskStation Manager (DSM) before versions 7.2.1-69057-10, 7.2.2-72806-7, and 7.3.2-86009-2. A remote authenticated user can exploit this flaw to obtain non-sensitive information.

Path traversal vulnerability in the Audio API in Synology DiskStation Manager (DSM) before versions 7.2.1-69057-10, 7.2.2-72806-7, and 7.3.2-86009-2. A remote authenticated user can exploit this flaw to obtain non-sensitive information.

Path traversal vulnerability in the Desktop API in Synology DiskStation Manager (DSM) before versions 7.2.1-69057-10, 7.2.2-72806-7, and 7.3.2-86009-2. A remote attacker can write limited files and conduct limited denial-of-service attacks.

Cross-site scripting (XSS) vulnerability in the Video API in Synology DiskStation Manager (DSM) before versions 7.2.1-69057-10, 7.2.2-72806-7, and 7.3.2-86009-2. A remote authenticated user can read or write limited files when the player is launched.

Exposure of sensitive information through data queries vulnerability in the Desktop API in Synology DiskStation Manager (DSM) before versions 7.2.1-69057-10, 7.2.2-72806-7, and 7.3.2-86009-2. A remote attacker can obtain non-sensitive information.

Forced browsing vulnerability in the Wallpaper Path in Synology DiskStation Manager (DSM) before versions 7.2.1-69057-10, 7.2.2-72806-7, and 7.3.2-86009-2. A remote authenticated user can obtain sensitive information.

Integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager (DSM) before versions 7.2.1-69057-10, 7.2.2-72806-7, and 7.3.2-86009-2. A remote authenticated user can conduct limited denial-of-service attacks.