CVE Vulnerability Catalog

In the Btrfs filesystem in the Linux kernel, a memory leak occurs in btrfs_uring_read_extent(). The 'pages' object is not freed in error paths when previous allocations fail or when btrfs_encoded_read_regular_fill_pages() does not return -EIOCBQUEUED.

In the Linux kernel drm/xe/configfs driver, a memory leak occurs. xe_config_device_release() only frees ctx_restore_post_bb but not ctx_restore_mid_bb, causing a leak when the configfs device is removed.

In the wlcore Wi-Fi driver in the Linux kernel, a locking bug was detected where wl->mutex is unlocked without being locked first.

In the Linux kernel drm/xe/reg_sr driver, a memory leak occurs. When xa_store() fails, the newly allocated entry is not freed, causing a memory leak on the error path.

A vulnerability was identified in Casdoor 2.356.0 in the OAuth Authorization Request Handler. Manipulation of the redirect_uri argument leads to an open redirect. The attack can be performed remotely and the exploit is publicly available.

In MariaDB Server before versions 11.4.10, 11.5.x-11.8.x before 11.8.6, and 12.x before 12.2.2, a vulnerability was found where a large packet can crash the server if the caching_sha2_password authentication plugin is installed and some user accounts are configured to use it. The issue is due to alloca usage in sha256_crypt_r.

In Roundcube Webmail before versions 1.5.15 and 1.6.15, the remote image blocking feature can be bypassed via SVG content in an e-mail message. This may lead to information disclosure or access-control bypass. This involves the animate element with attributeName=fill/filter/stroke.

In Roundcube Webmail before versions 1.5.14 and 1.6.14, insufficient CSS sanitization in HTML messages was found. This allows bypassing fixed-position mitigation via the !important directive.

In Roundcube Webmail before versions 1.5.14 and 1.6.14, the remote image blocking feature can be bypassed via SVG content with animate attributes in an email message. This may lead to information disclosure or access-control bypass.

In Roundcube Webmail before versions 1.5.14 and 1.6.14, the remote image blocking feature can be bypassed via a crafted background attribute of a BODY element in an email message. This may lead to information disclosure or access-control bypass.

Roundcube Webmail before versions 1.5.14 and 1.6.14 has incorrect password comparison in the password plugin, leading to type confusion that allows password change without knowing the old password.

In Roundcube Webmail from version 1.6.0 to 1.6.14, insufficient CSS sanitization in HTML emails may lead to SSRF or information disclosure, e.g., when stylesheet links point to local network hosts.

An XSS vulnerability was found in Roundcube Webmail before versions 1.5.14 and 1.6.14 due to insufficient sanitization of HTML attachments in preview mode. The victim must preview a text/html attachment.

Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters.

Host header injection vulnerability in Shynet before 0.14.0 in the password reset flow.

An XSS vulnerability in cveInterface.js allows injection of HTML that is then displayed, because cveInterface trusts input from CVE API services.

Interzen Consulting S.r.l ZenShare Suite v17.0 contains multiple reflected XSS vulnerabilities in the login.php endpoint. An attacker can execute arbitrary JavaScript in the user's browser context via a crafted URL injected into the codice_azienda and red_url parameters.

Interzen Consulting S.r.l ZenShare Suite v17.0 contains a reflected XSS vulnerability in the login_newpwd.php endpoint. An attacker can execute arbitrary JavaScript in the user's browser context via a crafted URL injected into the codice_azienda parameter.

Bentley Systems iTwin Platform exposed a Cesium ion access token in the source of some web pages. An unauthenticated attacker could use this token to enumerate or delete certain assets. The token has been removed from the web pages as of 2026-03-27.

Hoppscotch, an open source API development ecosystem, contains a stored XSS vulnerability in the team member overflow tooltip via display name. This issue exists prior to version 2026.3.0.