CVE Vulnerability Catalog

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is unused.

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is unused.

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is unused.

A path traversal vulnerability was found in boxpositron with-context-mcp up to 3.0.7, affecting functions ingest_notes, teleport_notes, sync_notes, and project_folder in src/index.ts. The attack can be launched remotely. The exploit has been published and may be used. The project was informed but has not responded.

A logic vulnerability (fail-open condition) has been identified in the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database health check (db.check) and the environment variable MSF_WS_JSON_RPC_API_TOKEN is not set, the application resets the internal state flag msf.auth_initialized to false. The ApiToken Warden authentication strategy misinterprets this false value as an indicator that authentication is not initialized or required, thereby granting unauthenticated local access to the JSON-RPC request dispatcher.

A path traversal vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0, in the read_context function of src/index.ts (Path Resolution component). Manipulating the path argument allows remote attacks. The exploit is now public and may be used. The project was informed but has not responded.

A path traversal vulnerability was detected in danielpopamd linkedin-ads-mcp 1.0.0, in the fs.readFileSync function of src/tools/campaign-management.ts (Media Upload component). Manipulating the filePath argument allows remote attacks. The exploit has been publicly disclosed and may be used. The project was informed but has not responded.

The SmiFlash SMM module in ASUS FA507NU and FA507NV BIOS has an out-of-bounds write vulnerability that allows a local administrator to cause a system crash (BSOD) or BIOS corruption via a crafted software SMI request with an oversized length. Refer to the ASUS Security Advisory for details.

A server-side request forgery (SSRF) vulnerability was discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0, in the raw_sentry_api component. Manipulating the endpoint argument allows remote attacks. The exploit has been released publicly. The project was informed but has not responded.

In OpenStack Keystone before 29.0.3, any authenticated user with role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with include_subtree to the GET /v3/role_assignments endpoint. The domain's project record has domain_id=null, causing the policy domain_id check to pass for any caller. With include_names, the response discloses names and home-domain IDs of all users, groups, projects, and roles. An attacker can harvest domain IDs and repeat the query to map role assignments across the entire cloud.

The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to consume an excessive amount of memory. Affects Reactor Netty 1.3.0-1.3.6, 1.1.0-1.2.18, and 1.0.52 and earlier.

In Reactor Core, applications using the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (DoS) condition. Affects Reactor Core 3.8.0-3.8.6 and 3.7.19 and earlier.

An attacker who can set the file_name header on a message reaching a ZipTransformer with ZipResultType.FILE (the default) can cause the resulting .zip archive to be written to an arbitrary filesystem path outside the configured workDirectory. Affects Spring Integration 7.1.0, 7.0.0-7.0.5, 6.5.0-6.5.10, 6.4.0-6.4.12.

An unauthenticated remote attacker who can send a single UDP packet to a Spring Integration UDP inbound adapter can cause the server to emit an outbound UDP datagram to an arbitrary internal or external host and port of the attacker's choosing. Affects Spring Integration 7.1.0, 7.0.0-7.0.5, 6.5.0-6.5.10, 6.4.0-6.4.12, and 5.5.21 and earlier.

An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single ~1 MB message. Affects Spring AMQP 4.1.0, 4.0.0-4.0.4, 3.2.0-3.2.12, and 2.4.18 and earlier.

RFC6587SyslogDeserializer, used by the Spring Integration syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames, trusts the sender-supplied octet count of an octet-counted frame and allocates a byte array of exactly that size with no upper bound. Affects Spring Integration 7.1.0, 7.0.0-7.0.5, 6.5.0-6.5.10, 6.4.0-6.4.12, and 5.5.21 and earlier.

In Reactor Core, applications using the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (DoS) condition. Affects Reactor Core 3.8.0-3.8.6, 3.5.0-3.7.19, and 3.4.41 and earlier.

Spring Integration's JSON to object conversion uses the json__TypeId__ header to choose the deserialization target type, and resolves that header value to a class with ClassUtils.forName and no type/package allow-list. Affects Spring Integration 7.1.0, 7.0.0-7.0.5, 6.5.0-6.5.10, 6.4.0-6.4.12, and 5.5.21 and earlier.

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Affects Spring AI versions 2.0.0, 1.1.0-1.1.8, and 1.0.0-1.0.9.

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Affects Spring AI versions 2.0.0, 1.1.0-1.1.8, and 1.0.0-1.0.9.