CVE Vulnerability Catalog

During chain building, the amount of work is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.

Kompilator powinien rozpakowywać wskaźniki będące operandami operacji przenoszenia pamięci, jednak interfejs konwersji, który nie wykonuje żadnej operacji, uniemożliwił mu prawidłowe określenie, czy przenoszenia nie nakładają się. Może to prowadzić do uszkodzenia pamięci w czasie wykonywania programu.

A vulnerability in SWIG allows code smuggling and arbitrary code execution at build time when file names contain 'cgo' and are used with crafted payloads, due to a trust layer bypass.

IBM Tivoli Netcool Impact versions 7.1.0.0 through 7.1.0.37 stores sensitive information in log files that could be read by a local user.

IBM Langflow Desktop versions 1.6.0 through 1.8.2 have a vulnerability that allows an authenticated user to execute arbitrary code on the system. This is due to an insecure default setting that permits deserialization of untrusted data in the FAISS component.

Podatność w IBM Verify Identity Access Container oraz IBM Security Verify Access Container umożliwia atakującemu kontakt z wewnętrznymi punktami końcowymi uwierzytelniania, które są chronione przez Reverse Proxy. Dotyczy to wersji 11.0 do 11.0.2 oraz 10.0 do 10.0.9.1.

An out-of-bounds write in virtio PCI transport in Firecracker 1.13.0-1.14.3 and 1.15.0 on x86_64 and aarch64 allows a local guest user with root privileges to crash the VMM process or potentially execute arbitrary code on the host via modification of virtio queue configuration registers after device activation.

A vulnerability in IBM Verify Identity Access and IBM Security Verify Access allows a locally authenticated user to execute malicious scripts from outside its control sphere.

The CentralAuth extension of MediaWiki improperly removes sensitive information before storage or transfer, leading to resource leak exposure. The issue is fixed on the master branch and in versions 1.43, 1.44, and 1.45.

In the Botan C++ cryptography library version 3.11.0, the function Certificate_Store::certificate_known had a misleading name; it returned true if any certificate in the store had a matching DN (and subject key identifier, if set) but did not check if the certificates were identical. In 3.11.0, path validation logic was extended assuming certificate_known only returns true for identical certificates. As a result, an end entity certificate with a DN matching a trusted root is accepted as a trusted root. This vulnerability is fixed in version 3.11.1.

In Flatpak prior to version 1.16.4, the ld.so caching mechanism removes outdated cache files without verifying that the app-controlled path is within the cache directory. This allows Flatpak apps to delete arbitrary files on the host.

Vulnerability in OpenSSL related to RSASVE, where a failed RSA encryption may return success, leaving an uninitialized buffer. An attacker can exploit this to leak sensitive data from previous process operations.

Vulnerability in OpenSSL when processing a crafted CMS EnvelopedData message with KeyTransportRecipientInfo. Missing check for the optional parameters field in RSA-OAEP leads to a NULL pointer dereference and crash.

Vulnerability in OpenSSL when processing a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo. Missing check for the optional parameters field in KeyEncryptionAlgorithmIdentifier leads to a NULL pointer dereference and crash.

Vulnerability in OpenSSL when processing a delta CRL with a Delta CRL Indicator extension. Missing check for the CRL Number extension leads to a NULL pointer dereference, potentially causing an application crash.

In an uncommon client configuration using DANE TLSA-based server authentication, combined with unusual server TLSA records, a use-after-free and/or double-free may occur on the client side. The vulnerability only affects clients that support TLSA records with both PKIX-TA(0)/PKIX-EE(1) and DANE-TA(2) certificate usages. SMTP clients compliant with RFC7672 are not vulnerable.

Out-of-bounds read in OpenSSL when using AES-CFB128 on systems with AVX-512 and VAES. May cause application crash (DoS) under specific conditions.

mise manages dev tools like node, python, cmake, and terraform. From 2026.2.18 through 2026.4.5, mise loads trust-control settings from a local project .mise.toml before the trust check runs. An attacker who can place a malicious .mise.toml in a repository can make that same file appear trusted and then reach dangerous directives such as [env] _.source, templates, hooks, or tasks.

Podman Desktop prior to version 1.26.2 has an unauthenticated HTTP server that allows any network attacker to remotely trigger DoS conditions and extract sensitive information. Missing connection limits and timeouts can exhaust file descriptors and kernel memory, leading to application crash or host freeze. Verbose error responses disclose internal paths and system details.

OpenTelemetry-Go versions 1.36.0 to 1.40.0 process 'baggage' headers in a way that allows an attacker to amplify CPU and memory allocation by sending many header lines, even if each value is within the 8192-byte limit.