CVE Vulnerability Catalog

Nuxt, an open-source web development framework for Vue.js, contains a vulnerability allowing an unauthenticated attacker to trigger unbounded SSR memory allocation via the v-for prop in server islands, potentially crashing the Nuxt process. Affects versions from 3.1.0 to 3.21.10 and 4.5.1; fixed in 3.21.10 and 4.5.1.

rclone, a command-line program for syncing files with cloud storage, has a vulnerability where SFTP paths are interpolated into PowerShell commands, allowing an attacker-controlled filename to execute arbitrary PowerShell statements as the victim SSH account. Affects versions prior to 1.75.0; fixed in 1.75.0.

rclone serve restic fails to properly reject URL paths beginning with ../, allowing an attacker with REST endpoint access to read, create, overwrite, or delete objects outside the configured directory. Affects versions from 1.40.0 to 1.75.0; fixed in 1.75.0.

Gitea prior to 1.27.0 contains a Server-Side Request Forgery (SSRF) vulnerability allowing authenticated attackers to bypass SSRF protections and access internal services, cloud instance metadata endpoints, or read local files such as application configuration with database credentials and signing secrets. Attackers can exploit HTTP fetch operations in migration and OAuth avatar code paths.

KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication key across affected devices. An attacker within Bluetooth range can issue unauthorized commands to the vehicle, potentially allowing unauthorized access to vehicle functions, including door unlocking and engine immobilization.

Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.

GitHub Enterprise Server before version 3.21 contains a denial of service vulnerability that allows an unauthenticated attacker to cause excessive CPU consumption and exhaust the pool of request-handling worker processes by sending a crafted form-encoded HTTP POST request with deeply nested parameters. The vulnerability was fixed in versions 3.20.3, 3.19.7, 3.18.10, and 3.17.16.

Spacebar Server before commit dcfd910 contains a missing authorization vulnerability allowing any authenticated attacker to add themselves to arbitrary group DM channels by sending a PUT request to the channels recipient endpoint without membership verification. Attackers can join private group DMs, read complete message history, post messages as a participant, and force-add third-party users without consent.

Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability allowing remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exploit the unprotected /management/stop endpoint, which bypasses REST API authentication middleware, by supplying a 'role' parameter to shut down proxy, datanode, or querynode components.

The 'Not Failing Securely' vulnerability in Livebook allows an unauthenticated network client to gain full access to a Livebook server that enforces identity through Livebook Teams. The issue arises from improper handling of an unresolvable deployment group identifier, which disables identity enforcement and grants full privileges.

A Relative Path Traversal vulnerability in Livebook allows an attacker-authored notebook to write a file with attacker-controlled content to an arbitrary path. This occurs through importing file_entries metadata from a .livemd notebook without validating file names, enabling escape from the session's temporary directory.

A vulnerability in Livebook allows untrusted notebook JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation of all cells and runtime restart. The issue stems from missing validation of keyboard events in the iframe and their forwarding to the main page.

An OS Command Injection vulnerability in Livebook allows injection of commands into generated Docker and Fly.io deployment setup commands. Deployment group environment variable values are interpolated into the commands without shell escaping, enabling arbitrary command execution via the shell.

PraisonAI before version 1.6.58 contains an SSRF vulnerability in the web_crawl tool. The protection only checks the initial URL, but after redirects or DNS rebinding it connects to internal addresses such as loopback, private networks, or cloud metadata. An attacker can influence the URL passed to web_crawl to obtain responses from these internal resources.

PraisonAI versions 1.5.128 through 1.6.57 contain an SSRF vulnerability in the web_crawl() function. Despite initial URL validation, redirect targets are not checked, allowing an attacker to access internal resources via a public URL that redirects to loopback or private networks. This is an incomplete fix for previous SSRF vulnerabilities.

PraisonAI versions 3.9.26 through 4.6.57 (praisonai) and 0.12.12 through 1.6.57 (praisonaiagents) have a code execution vulnerability in the workflow include feature. The _execute_include() function imports and runs code from tools.py without proper safeguards, allowing an attacker to execute arbitrary Python code if they can influence a local workflow directory.

In the Student-Management-System (commit 18ea7904...), an SQL injection vulnerability was detected in loginCheckTest.php in the Login component. Manipulation of the username/password arguments allows remote attack. The exploit is public, and the product does not use versioning, so no information about affected versions is available.

The get_resource tool in Amazon awslabs.aws-transform-mcp-server versions 0.1.0 through 0.1.4 has a path traversal vulnerability that may allow an attacker to write arbitrary files outside the intended working directory via the savePath parameter.

IBM Langflow OSS contains a weakness in the ensure_fernet_key() function related to weak cryptographic key derivation.

IBM Langflow OSS versions 1.0.0 through 1.10.3 allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. Validation uses a truncated SHA-256 hash, enabling collisions and bypassing validation, leading to execution of unauthorized Python code.