CVE Vulnerability Catalog

A vulnerability in Cisco IOS XE Software related to improper input validation (CWE-20), discovered during an internal security review. It is addressed in a software hardening release.

A vulnerability in Cisco IOS XE Software related to insufficient control flow management (CWE-691), discovered during an internal security review. It is addressed in software hardening releases.

A vulnerability in Cisco IOS XE Software related to incorrect calculation issues (CWE-682), discovered during an internal security review. It is addressed in software hardening releases.

A vulnerability in Cisco IOS XE Software related to improper control of a resource through its lifetime (CWE-664), discovered during an internal security review. It is addressed in software hardening releases.

A vulnerability in Cisco IOS XE Software related to improper restriction of operations within the bounds of a memory buffer (CWE-119), discovered during an internal security review. It is addressed in software hardening releases.

A vulnerability in the BEEP feature of Cisco IOS XE Software allows an unauthenticated remote attacker to cause a denial of service (DoS) by sending a specific BEEP SOAP request. The issue is due to improper handling during parsing.

A vulnerability in the web-based management interface of Cisco IMC allows an authenticated remote attacker with low privileges to execute arbitrary commands on the underlying operating system and elevate privileges to root. The issue is due to improper validation of user-supplied input.

A vulnerability in the SNMP subsystem of Cisco IOS XE Software allows an authenticated remote attacker to cause a device reload, resulting in a denial of service (DoS). The issue is due to improper error handling when parsing SNMP requests and affects all SNMP versions (1, 2c, 3).

A vulnerability in IBM Langflow OSS versions 1.0.0 through 1.10.3 allows a remote attacker to execute arbitrary code due to improper validation of configuration parameters.

IBM Langflow OSS versions 1.0.0 through 1.10.3 allow an authenticated attacker to read, modify, or expose sensitive host files via Docker-based MCP servers due to incomplete filtering of dangerous Docker volume-mount and device-mapping arguments.

IBM Langflow OSS versions 1.0.0 through 1.10.3 allow a remote authenticated attacker to execute arbitrary commands due to improper validation of the command field in MCP server configurations.

IBM Application Gateway Operator versions 22.2 through 26.06 are vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of URLs specified in custom resources.

A vulnerability in Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same as a truncated one. An unauthenticated client can send a selected protocol version with 32 continuation bytes, causing the decoder to reset the reader index and wait for more bytes instead of rejecting the message. The channel remains open, which can be exploited before authentication.

A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with low-privileged roles to bypass protections for cloud instance metadata endpoints. Successful exploitation can disclose cloud credentials and compromise cloud resources accessible to the host instance.

IBM WebSphere Application Server 8.5 and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery have a flaw in the ORB component in IBM SDK, Java Technology Edition, which may allow a malicious IIOP server to induce loading and instantiation of arbitrary classes.

An improper privilege management vulnerability in the REST API document processing pipeline of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with an administrative REST role to escalate privileges. This can result in unauthorized disclosure of sensitive server-side data when it is accessed by a higher-privileged user.

A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a malicious web page to perform administrative actions on the administrator's behalf. This can result in unauthorized changes to security configuration.

Electron is a framework for writing cross-platform desktop applications. Prior to 39.8.10, 40.9.3, 41.4.0, and 42.0.0, a custom scheme registered with supportFetchAPI: true but without corsEnabled: true was not subject to CORS enforcement. A page loaded from a remote origin could therefore fetch() or XMLHttpRequest that scheme cross-origin and read the full response body. Apps that serve sensitive data from such a scheme and load remote or untrusted content in a renderer are affected.

Electron is a framework for writing cross-platform desktop applications. Prior to 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.5, apps that expose Promise-returning functions to web content via contextBridge may be vulnerable to a context isolation bypass. Untrusted web content could obtain access to the isolated preload world and, through it, every capability the preload script has. In renderers without a sandbox, or with nodeIntegration enabled, this may escalate to Node.js access.

Apache Answer through version 2.0.1 has a vulnerability exposing sensitive information: deleted or pending answers can be retrieved by unauthorized users through the single-answer read path when the parent question remains visible.