CVE Vulnerability Catalog

Uninitialized use in the ANGLE component of Google Chrome prior to 151.0.7922.72. A remote attacker could leak cross-origin data via a crafted HTML page.

Insufficient validation of untrusted input in the Loader component of Google Chrome prior to 151.0.7922.72. A remote attacker who had compromised the renderer process could leak cross-origin data via a crafted HTML page.

Insufficient policy enforcement in the Prefetch component of Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Inappropriate implementation in the SiteIsolation component of Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.

A vulnerability in ImageMagick (versions prior to 7.1.2-27) in the BGR decoder. Lack of end-of-file checking in every location can lead to a heap buffer over-read.

A vulnerability in ImageMagick (versions prior to 6.9.13-52 and 7.1.2-27) when processing a very large JNX file on 32-bit platforms. An integer overflow can occur, leading to a heap buffer over-write.

In ImageMagick prior to version 7.1.2-27, a heap buffer over-write vulnerability exists in the fx operation. An attacker can trigger it with a crafted argument, causing memory corruption.

In ImageMagick prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer over-write vulnerability exists during morphology operations with a user-supplied kernel. An invalid kernel can cause memory corruption.

In undici before versions 6.28.0, 7.29.0, and 8.9.0, the 'type' property of hand-rolled blob-like request bodies is not validated. An attacker can inject CRLF sequences and append arbitrary HTTP headers, potentially smuggling a second request.

In undici before versions 7.29.0 and 8.9.0, the cache interceptor mishandles optional whitespace around the equals sign in Cache-Control directives. This can cause authenticated user data to be cached and served to other users.

In OliveTin prior to version 3000.17.0, the StartActionAndWait and StartActionByGetAndWait endpoints return full LogEntry output without enforcing the logs permission, allowing users with exec but not logs permission to read action output.

In OliveTin from version 3000.2.0 to 3000.17.0, the checkShellArgumentSafety function does not treat 'regex:' custom argument types as unsafe for Shell mode, allowing OS command injection via interpolation into an sh -c command string.

In Pydantic AI before versions 1.107.1 and 2.5.0, UI adapters (AG-UI and Vercel AI) incorrectly strip unresolved tool calls from message history. A client can cause a registered server tool to run with client-supplied arguments, bypassing the model and its guardrails.

In Pydantic AI before versions 1.106.0 and 2.0.0b6, the UI adapter (e.g., Vercel AI) does not validate UploadedFile references. A client can reference arbitrary files in the model provider or cloud storage account using server-side identity, potentially leading to unauthorized data access.

In Pydantic AI before version 1.99.0, when an application enables force_download='allow-local' for a URL, the cloud metadata blocklist can be bypassed by encoding the metadata IP in IPv6 form (e.g., IPv4-mapped IPv6), potentially exposing cloud IAM short-term credentials.

In undici before versions 6.28.0, 7.29.0, and 8.9.0, the retry interceptor can deliver a response whose body length does not match the Content-Length header, potentially leading to response desynchronization, connection hangs, or response corruption.

A stack-based buffer overflow vulnerability in the Autel MaxiCharger AC Elite Home charger allows a physically present attacker to execute arbitrary code via a crafted NFC card response. Authentication is not required for exploitation.

A heap-based buffer overflow vulnerability in the Autel MaxiCharger AC Elite Home charger allows a physically present attacker to execute arbitrary code via crafted USB packets. Authentication is not required.

An authentication bypass vulnerability in the Autel MaxiCharger AC Elite Home charger via the USB interface allows a physically present attacker to access device functions without authentication. No authentication is required.

A vulnerability in the software update process of the Autel MaxiCharger AC Elite Home charger allows a physically present attacker to execute arbitrary code by supplying a improperly verified update image. Authentication is not required.