CVE Vulnerability Catalog

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply() to process a length that exceeds the size requested by the client, leading to out-of-bounds write. This can corrupt heap memory in the gvfsd-sftp process, resulting in denial of service or potentially arbitrary code execution.

Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user changes their password, allowing attackers to maintain account access. An attacker with a stolen refresh token can call the RefreshToken RPC to obtain new access tokens and rotate the refresh token indefinitely, bypassing the password change security measure.

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users.

appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the write_file and write_files_batch tools, allowing attackers to write files outside the intended PROJECT_ROOT directory. Attackers can supply absolute paths or relative paths with parent directory segments to overwrite arbitrary files with the server user's privileges, including shell profiles and configuration files in the home directory.

Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.

NVIDIA Megatron Bridge contains a vulnerability that allows an attacker to cause deserialization of untrusted data. Successful exploitation could lead to code execution, data tampering, and information disclosure.