CVE Vulnerability Catalog

Wolf CMS through version 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreController due to a PHP operator precedence flaw in the permission check expression. Authenticated non-administrative users can exploit the incorrect evaluation of the access control expression to create, download, and restore backups without administrative privileges.

Wolf CMS through version 0.8.3.1 contains a remote code execution vulnerability in FileManagerController. Authenticated attackers can create arbitrary PHP files by exploiting missing file extension validation in the create_file() and save() functions. Attackers with the file_manager_mkfile capability can write malicious PHP content into the web-accessible FILES_DIR directory and trigger execution by requesting the file over HTTP.

Apache Tika from version 1.8 through 3.3.1 and 4.0.0-alpha-1 has a relative path traversal vulnerability in the ISA-Tab parser. An attacker can place files in a directory and then read arbitrary files accessible to the Tika process via a crafted "Study Assay File Name" value.

IBM WebSphere Application Server 9.0 and 8.5 contain a remote code execution vulnerability in the SOAP/JMX connector. An attacker can exploit this flaw to execute arbitrary code on the server.

Leantime 3.6.2 contains a cross-site request forgery vulnerability due to missing VerifyCsrfToken middleware. Unauthenticated attackers can trick authenticated users into performing unauthorized actions like creating or deleting projects, modifying settings, and changing permissions.

Leantime 3.6.2 contains a server-side request forgery and local file inclusion vulnerability in the Blueprints::import() method. Authenticated attackers can supply unsanitized filenames with URL wrappers or path traversal sequences to read internal resources like cloud metadata services or arbitrary files from the server filesystem.

Banks prior to version 2.4.3 contains a remote code execution vulnerability in {% completion %} blocks. An attacker can supply a malicious Tool JSON object with an import_path field that is resolved via importlib.import_module() and getattr() without any allowlist. When the LLM invokes a tool with a matching name, arbitrary Python code such as os.system or subprocess.getoutput can be executed.

The aws-smithy-json crate before version 0.62.7 contains an uncontrolled recursion vulnerability in the unknown-key skip path. A remote unauthenticated attacker can send a single small HTTP request with deeply nested JSON, causing stack exhaustion and process abort on a smithy-rs generated server.

SGLang contains a model weight exfiltration vulnerability when no API keys are configured. SGLang exposes two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then trigger data transfer, enabling exfiltration of all model weights.

SGLang contains a credential leakage vulnerability in the /server_info endpoint. When only the --admin-api-key is configured, this endpoint returns API keys and SSL keyfile information.

IBM Langflow OSS versions 1.0.0 through 1.10.1 allow an attacker to access another user's private vector documents by creating their own flow with matching Chroma persist_directory and collection_name values. The attacker receives exact victim content in their workflow output despite having no authorization to read the victim's flow. Additionally, the attacker can pollute the victim's collection by inserting their own documents into the shared namespace.

IBM Langflow OSS versions 1.0.0 through 1.10.1 allow a remote attacker to traverse directories on the system. An attacker can send a specially crafted URL request containing "dot dot" sequences ( /../ ) to view arbitrary files.

IBM DataPower Gateway is vulnerable to a denial of service (DoS) due to improper resource limitations. A remote attacker can exploit this to overload the system and disrupt normal operations.

IBM Planning Analytics Local versions 2.1.0 through 2.1.21 are vulnerable to an open redirect. An attacker can redirect users to arbitrary external websites via a crafted URL. If used in SSO flows, this could expose session tokens and allow session hijacking.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4 are vulnerable to a buffer overflow in the setgid helper db2flacc. This could allow a local attacker to execute code with elevated privileges.

IBM Engineering Requirements Management DOORS and DOORS Web Access versions 9.7.2.1 through 9.7.2.11 and 9.6.1.1 through 9.6.1.13 do not limit connection length, allowing a Slowloris HTTP denial of service attack. This can cause the web server to become unresponsive.

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request.

Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.4, all four media filters (image, audio, video, document) in banks accept untrusted user input as file paths via Path(value) and pass them directly to open(file_path, "rb") without any path sanitization, canonicalization, or directory restriction. An attacker who controls template variables passed to a banks Prompt can use path traversal (../) to read arbitrary files accessible to the Python process—including .env files, SSH keys, cloud credentials, source code, /etc/passwd, and /etc/shadow—with the content returned base64-encoded in the rendered prompt output, making exfiltration trivial.

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, is_url_safe in src/helpers.ts strips the @ userinfo delimiter with remove_at_symbol_in_string before new URL parses the URL, allowing an attacker-controlled URL to bypass internal-IP validation and cause a client using the original URL to reach an internal service.

In OpenVPN (versions 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4), an incomplete guard allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to denial of service or memory leakage.