CVE Vulnerability Catalog

In PyTorch versions 2.5 and 2.7.1, omitting profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (DoS).

A cross-site scripting vulnerability was discovered in soerennb eXtplorer up to 2.1.15 in the Filename Handler component. The attack can be launched remotely and a patch is available as commit 002def70b985f7012586df2c44368845bf405ab3.

An out-of-bounds read/write vulnerability exists in the imagetoraster filter of CUPS-Filters (1.x) and in the _cfImageReadTIFF() function of libcupsfilters (2.x) when processing TIFF image files. The pixel buffer is allocated based on the number of pixels times a pre-calculated bytes-per-pixel value, but the function processing these pixels is called with a size of the number of pixels times 3. With suitable inputs, the bytes-per-pixel value can be set to 1, causing memory access outside the buffer bounds.

In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.116, 9.3.2408.124, 10.0.2503.5, and 10.1.2507.1, a low-privileged user without admin or power roles could run a saved search with a risky command using higher-privileged user permissions to bypass SPL safeguards. They could bypass safeguards on the /services/streams/search endpoint via the q parameter by circumventing endpoint restrictions using character encoding in the REST path. The vulnerability requires phishing the victim to initiate a request in their browser.

Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5, 9.3.2411.111, and 9.3.2408.121 are vulnerable to an unvalidated redirect. An unauthenticated attacker can craft a malicious URL using the return_to parameter of the Splunk Web login endpoint, which when visited by an authenticated user redirects them to an external malicious site. The attacker must trick the victim into initiating the request.

In the Grafana Databricks Datasource Plugin, if OAuth passthrough is enabled on the datasource and multiple users use the same datasource simultaneously on a single Grafana instance, the wrong user identifier may be used and information the viewer is not authorized to see may be returned. The issue affects versions from 1.6.0 before 1.12.0.

In the Grafana Snowflake Datasource Plugin, if OAuth passthrough is enabled on the datasource and multiple users use the same datasource simultaneously on a single Grafana instance, the wrong user identifier may be used and information the viewer is not authorized to see may be returned. The issue affects versions from 1.5.0 before 1.14.1.

Improper conditions check in some Intel(R) QAT Windows software before version 2.6.0 within Ring 3 (user applications) may allow a denial of service. The attack requires an authenticated user and local access, with impact limited to availability (low).

Improper access control in some Intel(R) PresentMon before version 2.3.1 within Ring 3 (user applications) may allow a denial of service. The attack requires a privileged user and high complexity, with potential impact limited to availability (low).

Improper input validation in some Intel(R) oneAPI Math Kernel Library before version 2025.2 within Ring 3 (user applications) may allow a denial of service. The attack requires an authenticated user and local access, with impact limited to availability (low).

Improper input validation in Intel QuickAssist Technology software before version 2.6.0 within Ring 3 (user applications) may allow an escalation of privilege. An authenticated attacker with local access may enable data manipulation.

Improper input validation in some firmware for Intel(R) Graphics Drivers and Intel LTS kernels within Ring 1 (device drivers) may allow a denial of service. The attack requires an authenticated user, local access, and special knowledge, with impact limited to availability (low).

Intel(R) CIP software before WIN_DCA_2.4.0.11001 allows unrestricted upload of dangerous file types in Ring 3 (user applications). This may enable privilege escalation by an unprivileged user with privileged access in a complex attack. Integrity impact is low; confidentiality and availability are not affected.

Improper access control in some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3 may allow information disclosure. An unprivileged software adversary combined with a privileged user and a high-complexity attack may enable data exposure.

Improper privilege management in Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3 (User Applications) may allow an escalation of privilege. An unprivileged authenticated adversary with a high-complexity attack and network access may enable data manipulation.

Sensitive information is not cleared in a resource before reuse in some Intel(R) NPU Drivers for Windows before version 32.0.100.4023 within Ring 3 (user applications), potentially allowing information disclosure. An unprivileged authenticated user with local access could exploit this.

In JetBrains YouTrack before version 2025.3.104432, a race condition allows bypassing the helpdesk Agent limit. The vulnerability enables unauthorized exceeding of the allowed number of agents.

A spoofing vulnerability was detected in the Firefox browser. The vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30.

A vulnerability allows uploading files with a specific name to a temporary directory, potentially causing process crashes and impacting usability. The flaw can only be exploited after authenticating with an operator- or administrator-privileged service account.

Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an administrative user uploads files to the application server. This could allow uploading a malicious file into the system, with low impact on application integrity.