CVE Vulnerability Catalog

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.

A use-after-free vulnerability in the Windows Update Service allows an authorized attacker to elevate privileges locally. The flaw resides in the system component responsible for updates.

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.

A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses (uncontrolled resource consumption). Exploitation requires an administrator to have configured Git Sync with that server.

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.

Potential arbitrary code execution, under specific configurations.

DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component.

The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions.

An SQL Injection vulnerability (CWE-89) in Fortinet FortiAnalyzer and FortiManager (including Cloud versions) allows a low-privileged user to execute arbitrary commands via crafted requests. It affects multiple versions of Fortinet software.

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in Fortinet FortiAnalyzer and FortiManager (including Cloud versions) may allow a low privileged user to execute arbitrary commands via crafted requests.

An SQL Injection vulnerability (CWE-89) in Fortinet FortiAnalyzer and FortiManager allows a low-privileged user to execute arbitrary commands via crafted requests. It affects multiple versions of these products.

A user or service account with read-only access to Git Sync (provisioning) connections can modify a connection's configuration through its status subresource (incorrect authorization). On Grafana 12.4 the affected API is only available when the experimental provisioning feature toggle is enabled.

The dataclasses-avroschema library versions 0.38.0 through 0.70.5 does not validate enum symbols as identifiers, allowing injection of statements into the generated enum class. This can lead to namespace modification or prevent the module from loading.

The dataclasses-avroschema library versions 0.38.0 through 0.70.5 improperly handles the aliases value of a fixed type, inserting it unquoted into a types.confixed annotation. This allows arbitrary Python code execution when the generated module is imported.

The dataclasses-avroschema library versions 0.38.0 through 0.70.5 does not validate the default value of an enum field as an identifier, allowing injection of statements into the generated module. This can lead to namespace modification or prevent the module from loading.

The dataclasses-avroschema library versions 0.38.0 through 0.70.5 does not escape enum symbols, allowing injection of arbitrary Python code into the enum class body. This code executes when the generated module is imported.

The dataclasses-avroschema library versions 0.44.0 through 0.70.5 does not safely restrict the pydantic-class value in field annotations, allowing arbitrary Python code execution when the generated module is imported. It affects Pydantic and AvroDantic model generators.

The dataclasses-avroschema library versions 0.65.9 through 0.70.5 does not escape the doc value inserted into the description argument of pydantic.Field, allowing injection of an expression and arbitrary Python code execution during class definition. It affects Pydantic and AvroDantic model generation.