CVE Vulnerability Catalog

A2A Java SDK from 1.3.0.Final before 1.3.2.Final: the AndroidA2AHttpClient synchronous POST path overrides the disabled-redirect setting with PostBuilder's followRedirects=true. JSONRPCTransport and RestTransport add interceptor-produced authentication headers and call synchronous post() without disabling redirects, disclosing a configured API key or token to another authority on redirect.

A2A Java SDK prior to 1.3.0.Final: the default InMemoryTaskStore configuration performs no authorization on task reads. The no-argument constructor sets authorizationProvider to null, and get(String taskId) returns the stored task without checking caller or owner. In a multi-caller deployment, a caller who knows another caller's task ID can retrieve task status, context ID, message history, and artifacts; default transport endpoints do not enforce authentication.

A2A Java SDK prior to 1.3.0.Final allows a malicious or compromised remote agent to cause the default JDK-based client to forward a configured API key to a third-party server. AuthInterceptor uses APIKeySecurityScheme.name() from the remote AgentCard as the HTTP header name without checking that the declared location is HEADER, and JdkA2AHttpClient uses followRedirects(NORMAL), so an agent-controlled cross-origin redirect forwards the credential-bearing header.

The WordPress Meta Box – WordPress Custom Fields Framework plugin through 5.15.2 contains a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This may allow unauthorized users to perform restricted actions.

Apache CouchDB 3.5.2 and below insufficiently filters credentials in the _replicator database. An authenticated user can read replication credentials of other users' replications, not just their own.

Raptor RDF Syntax Library 2.0.15 through 2.0.16 contains a heap-based buffer overflow in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.

In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool or equivalent DTFJ code may cause the analyst's machine to read an arbitrary local file named inside the bundle and send its contents to an arbitrary remote host.

A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulting on an unmapped page.

A vulnerability in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via get_rules_import_paths in thefuck/corrector.py and Rule.from_path in thefuck/types.py.

In a memory-protected ThreadX module, a queue request reaches the Module Manager's dispatch layer, which passes a word count instead of a byte extent to the range check. This causes a privileged read of up to 3 * message_size bytes past the module's allowed memory, with the data written into the queue's message area.

The GUIX software JPEG decoder reads four kinds of marker segments without checking that each is long enough to hold what it reads. A truncated segment causes a read past the caller's image buffer, and a zero chroma sampling factor makes the block decode loop non-terminating.

_gx_binres_pixelmap_table_load() in the GUIX binary resource (theme) loader indexes the pixelmap table with a value read verbatim from the resource file and never bounds it against the table size. A crafted theme drives a write of up to roughly 256 KB past the end of the table, corrupting GUIX's own memory arena.

gx_binres_theme_load() and gx_binres_font_load() take the resource as a bare GX_UBYTE * with no length, and GX_BINRES_DATA_INFO has no field to carry one. A resource declaring more data than it contains is read past its end, and an offset stored in the file is turned into a pointer without being bounded.

Flatpak prior to 1.18.1 allows a malicious local user in an active session to use a crafted architecture name to trick the flatpak-system-helper process into creating a root-owned directory tree outside the intended root directory. This requires at least one OCI remote to be configured (common on Fedora). Combined with other vulnerabilities fixed in 1.18.1, it can lead to local root privilege escalation.

The GUIX binary resource loader does not validate that a font page's glyph range is well formed. A page declaring first_glyph > last_glyph causes an unsigned underflow, and an unchecked multiplication leads to allocating a buffer far smaller than the data written into it, resulting in a heap overflow with attacker-controlled glyph records.

The GUIX PNG chunk reader does not enforce chunk ordering and allows a second IHDR to be read after IDAT. The second IHDR rewrites dimensions and bit depth after the decoded-data buffer has been allocated, and the row-filter reversal pass then walks past the old allocation, causing a heap out-of-bounds write.

The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file placing a second SOF0 frame header after SOS re-runs the frame header parser after the output buffer has been allocated, and the decoder returns GX_SUCCESS and publishes a GX_PIXELMAP whose dimensions and data_size exceed the allocation.

In MinIO up to RELEASE.2025-10-15T17-29-55Z, the globalDeploymentID/SessionTokenAuthenticate function in cmd/common-main.go of the Embedded Console component uses a hard-coded cryptographic key. The attack can be launched remotely and the exploit has been publicly disclosed.

In Nerimity Desktop up to 2.2.2, the shell.openExternal function in src/mainWindow.js of the Window Open Handler component improperly authorizes handling of custom URL schemes. Manipulating the url argument allows the attack to be executed remotely, and the exploit has been made public.

In DrayTek Vigor2960 1.5.1.6 Revision 8218, the ruequest_certificate function in /cgi-bin/mainfunction.cgi (IPsec Handler component) mishandles the option argument, enabling command injection. The attack can be launched remotely and a public exploit exists. The product is end-of-support (EoS).