CVE Vulnerability Catalog

Vulnerability in Cloudreve before 4.17.0, where the POST /api/v4/admin/policy/oauth/signin endpoint requires only Admin.Read permission but allows modification of OneDrive storage policy credentials without Admin.Write, enabling changes to secret and app_id.

A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.

A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution.

A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.

A local attacker can exploit an argument injection vulnerability in the APT backend of yggdrasil-worker-package-manager using package names starting with a hyphen, leading to remote code execution with root privileges.

In Google mcp-toolbox version 1.4.0, when Google OAuth is configured with mcpEnabled: true without explicit audience or clientId, opaque token audience validation is skipped, allowing acceptance of any valid Google OAuth token from other applications.

Google mcp-toolbox versions up to 1.4.0 have an allocation of resources without limits vulnerability in the HTTP handler component. The /mcp endpoint reads incoming payloads directly into system memory using an unrestricted buffer loop (io.ReadAll) without defensive constraints. An unauthenticated attacker can submit a single massive HTTP request, linearly consuming host memory until the process is terminated by an OOM error.

Google mcp-toolbox versions 0.16.1 through 1.4.0 have an improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool component. The toolbox relies on the BigQuery dry-run API to enforce dataset restrictions, but due to a fail-open logic flaw, it bypasses validation when the API returns an empty array for specialized constructs. An authenticated attacker can extract structural DDL schemas for excluded datasets via INFORMATION_SCHEMA and access downstream federated row data via EXTERNAL_QUERY connections.

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability. An unauthenticated remote attacker can hijack authenticated administrator sessions by exploiting an early return in CheckWebServerOriginName() in webserver.js when self-signed certificates are used. Attackers can open cross-origin WebSocket connections, exfiltrate the server sessionKey, forge session tokens, and gain full remote control of all managed devices.

The ISO Presentation layer has a flaw in handling parameters during normal mode negotiation. A missing length check allows an attacker-controlled zero-length field to trigger a bounded heap over read before MMS session establishment. A crafted TCP/102 connection can cause the process to terminate, leading to a denial of service.

An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write.

A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code.

An integer overflow in the UA_Variant array size computation in open62541 allows a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information.

In Kamaji, the Hosted Control Plane Manager for Kubernetes, prior to version 26.7.4-edge, the GetDefaultDatastoreSchema() and GetDefaultDatastoreUsername() functions use lossy namespace-and-name normalization, causing identifier collisions. This allows distinct tenants to share control-plane state and read, modify, or destroy another tenant's Kubernetes data.

An incomplete fix for CVE-2026-15352 in the NASA core Flight System (cFS) Health and Safety (HS) application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to crash, resulting in a denial-of-service condition and processor reset.

The RCU II+ and Multiload II+ devices have an unauthenticated debug service based on the Target Communications Framework (TCF) that provides full root-level access to the embedded system. An attacker can connect to this service over the network and freely view and modify the filesystem, manipulate processes, and control network interfaces.

The Sylius Mollie Plugin prior to versions 2.2.8, 3.2.4, and 3.3.1 accepts attacker-controlled id and orderId parameters in the POST /{_locale}/update-payment payment webhook but does not verify that the Mollie payment belongs to the referenced Sylius order. An unauthenticated attacker can use any valid paid Mollie payment ID to mark a victim order as paid without transferring funds.

In GoAccess prior to version 1.11, the built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum frame size. An unauthenticated remote client can bypass the guard and force an approximately 18-exabyte allocation request that terminates the process.

In GoAccess version 1.10.2, the parse_browser function assumes the matched browser token begins with 'Opera' and moves a trailing version substring to match plus five. This allows writing one to four attacker-influenced bytes beyond the heap allocation, potentially corrupting data or crashing GoAccess.

In OpenProject prior to version 17.6.0, the PATCH /api/v3/work_packages/{id} endpoint accepts _links.fileLinks and allows authenticated users with edit_work_packages but without manage_file_links to resolve Storages::FileLink records by raw id, detach or hard-delete existing FileLinks, and re-parent FileLinks from other projects to an attacker-controlled work package, exposing origin filename, origin id, and MIME type metadata.