CVE Vulnerability Catalog

OpenHarmony version 6.0 and earlier allows a remote attacker to execute arbitrary code in pre-installed apps.

AutoGPT versions 0.6.34 through 0.6.51 deserialize Redis cache bytes using pickle.loads without integrity checks. An attacker who poisons a Redis key can achieve remote code execution in the backend container.

AutoGPT versions 0.4.2 through 0.6.51 are vulnerable to a DoS attack via the download_agent_file endpoint, which creates persistent temporary files for each request but fails to delete them. An unauthenticated attacker can repeatedly call this endpoint to exhaust disk space and cause system failure.

Mullvad VPN on macOS versions 2026.1 and below allows local privilege escalation during installation or upgrade. The installer executes binaries from /Applications/Mullvad VPN.app without verifying if the bundle is attacker-controlled.

AutoGPT versions 0.6.36 through 0.6.50 are vulnerable to authenticated session hijacking via IDOR. An attacker can take over another user's session by knowing their session_id.

FacturaScripts versions 2026 and below contain a critical vulnerability in the Plugins::add() function that fails to properly validate file paths within uploaded ZIP archives. This allows a Zip Slip attack, leading to arbitrary file write and remote code execution (RCE) by overwriting sensitive .php files outside the plugins directory.

SOGo versions up to 5.12.7 contain a SQL injection vulnerability in the Access Control List management functionality. An authenticated user can inject malicious SQL subqueries through the uid parameter of the addUserInAcls endpoint, allowing extraction of arbitrary data from the database. Attackers can write extracted data into the sogo_acl table and retrieve it via the /acls API, establishing an out-of-band data exfiltration channel.

In mlflow/mlflow prior to version 3.11.0, functions creating temporary directories set insecure permissions (0o777 and 0o770). This allows a local attacker to tamper with model artifacts, leading to arbitrary code execution upon deserialization via cloudpickle.

In FreePBX before versions 16.0.71 and 17.0.6, the backup module does not properly sanitize data during restore operations, allowing Remote Code Execution (RCE) by restoring a crafted backup containing malicious data. Authentication with sufficient privileges is required. Fixed in versions 16.0.71 and 17.0.6.

Joplin prior to version 3.5.7 contains a path traversal vulnerability in the importer, allowing arbitrary file overwrite. The OneNote converter does not sanitize embedded file names, enabling ../.. sequences.

Claude HUD through version 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the COMSPEC environment variable. Attackers can set COMSPEC to an arbitrary binary path before claude-hud performs its version check, causing execFile() to execute the attacker-supplied executable with cmd.exe arguments, resulting in arbitrary code execution on Windows systems.

A vulnerability in the Summarize extension prior to version 0.15.1 allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links, causing the extension to make authenticated daemon requests using stored tokens without verifying event trustworthiness.

A path traversal vulnerability in Summarize prior to 0.15.1 allows authenticated attackers to write files to arbitrary directories via the slidesDir parameter in the /v1/summarize endpoint. Attackers can exploit this to write slide_*.png and slides.json files and subsequently delete matching files through repeated extraction.

A vulnerability in Microsoft Edge (Chromium-based) allows for remote code execution. An attacker can exploit this flaw to gain control over the user's system.

HSC MailInspector version 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint. The text parameter is used to construct file paths without adequate normalization or restriction to a safe base directory.

HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths. The endpoint /vendor/phpunit/phpunit.php processes user-controlled parameters, allowing unauthorized access to system files.

Thermo Fisher Scientific Torrent Suite Dx versions up to 5.14.2 has a privilege escalation vulnerability that may allow an authenticated user with limited access privileges to gain unauthorized administrator-level privileges through exploitation of specific system interfaces.

ngrok versions 4.3.3 and 5.0.0-beta.2 are vulnerable to Command Injection, which may allow an attacker to execute arbitrary system commands.

In tinyMQTT, due to a bug in handling CONNECT packets, the broker fails to close the TCP connection after receiving a packet with a zero-length Client ID when CleanSession is set to 0. This leads to server resource exhaustion with repeated connection attempts.

An issue in PrestaShop in the upsshipping module in all versions through at least 2.4.0 allows a remote attacker to obtain sensitive information via the /modules/upsshipping/logs/ and /modules/upsshipping/lib/UPSBaseApi.php components.