CVE Vulnerability Catalog

PPTAgent is a framework for generating PowerPoint presentations. Prior to commit 418491a, PPTAgent was vulnerable to arbitrary code execution via Python eval() of LLM-generated code with builtins in scope.

Evolver is an AI engine that prior to version 1.69.3 had a path traversal vulnerability in the skill download command. Attackers could write files to arbitrary locations on the filesystem, posing a risk of overwriting critical system files.

An out-of-bounds read in the ParseIP6Extended function in gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) by supplying a crafted BGP UPDATE message.

NetBox versions 4.3.5 through 4.5.4 contain a remote code execution vulnerability in the RenderTemplateMixin.get_environment_params() method. It allows authenticated users with exporttemplate or configtemplate permissions to execute arbitrary code by specifying malicious Python callables in the environment_params field.

Memory corruption occurs when copying data from a freed source during a performance counter deselect operation. The flaw arises when data is copied from a memory area that has already been freed, potentially leading to unpredictable system behavior.

CVE-2025-47408 vulnerability involves memory corruption when another driver calls an IOCTL with an invalid input/output buffer.

CVE-2025-47407 is a vulnerability related to memory corruption when creating a process on the digital signal processor due to allocation failure at the kernel level.

CVE-2025-47405 involves memory corruption when processing camera sensor input/output control codes with invalid output buffers.

Apache Atlas has a code injection vulnerability that allows an attacker to alter Gremlin traversal logic by supplying malicious query strings. This can lead to unauthorized access to data.

An issue in Lymphatus caesium-image-compressor in all versions up to and including commit 02da2c6 allows a local attacker to execute arbitrary code via the shutdownMachine and putMachineToSleep functions in PostCompressionActions.cpp.

A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request. mod_dav_lock is not used internally by mod_dav or mod_dav_fs; its only known use-case was mod_dav_svn from Apache Subversion earlier than 1.2.0.

A double free vulnerability in Apache HTTP Server when handling HTTP/2 protocol may lead to remote code execution (RCE). This issue affects version 2.4.66.

A flaw was found in the AAP gateway where the user auto-link strategy, introduced in AAP 2.6, automatically links an external Identity Provider (IDP) identity to an existing AAP user account based on email matching without verifying email ownership. This allows a remote attacker to potentially hijack a victim's account or gain unauthorized access to other accounts, including administrative accounts, by manipulating the IDP-provided email.

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial() method.

Istnieje podatność na eskalację uprawnień podczas instalacji Norton Secure VPN za pośrednictwem Microsoft Store. Użytkownik z niskimi uprawnieniami może zastąpić pliki w trakcie procesu instalacji, co może prowadzić do usunięcia dowolnych plików i eskalacji uprawnień.

W Apache HTTP Server występuje podatność na nadmierne odczytywanie bufora, która dotyczy wersji do 2.4.66. Użytkownicy powinni zaktualizować do wersji 2.4.67, która naprawia ten problem.

Błąd eskalacji uprawnień w różnych modułach Apache HTTP 2.4.66 i wcześniejszych pozwala lokalnym autorom plików .htaccess na odczyt plików z uprawnieniami użytkownika httpd.

W podatności CVE-2026-3120 występuje niewłaściwa kontrola generowania kodu, co prowadzi do możliwości wstrzyknięcia poleceń systemowych w aplikacji SambaBox. Problem dotyczy wersji od 5.1 do przed 5.3.

A vulnerability was detected in Totolink N300RH version 3.2.4-B20220812, affecting the function setMacFilterRules in the file /cgi-bin/cstecgi.cgi. Manipulation of the argument mac_address results in buffer overflow.

A vulnerability has been detected in Totolink N300RH 3.2.4-B20220812 affecting the setWanConfig function in the /cgi-bin/cstecgi.cgi file. Manipulation of the priDns argument leads to buffer overflow.