CVE Vulnerability Catalog

IBM DataPower Gateway is vulnerable to a denial of service (DoS) due to improper resource limitations. A remote attacker can exploit this to overload the system and disrupt normal operations.

IBM Planning Analytics Local versions 2.1.0 through 2.1.21 are vulnerable to an open redirect. An attacker can redirect users to arbitrary external websites via a crafted URL. If used in SSO flows, this could expose session tokens and allow session hijacking.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4 are vulnerable to a buffer overflow in the setgid helper db2flacc. This could allow a local attacker to execute code with elevated privileges.

IBM Engineering Requirements Management DOORS and DOORS Web Access versions 9.7.2.1 through 9.7.2.11 and 9.6.1.1 through 9.6.1.13 do not limit connection length, allowing a Slowloris HTTP denial of service attack. This can cause the web server to become unresponsive.

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request.

Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.4, all four media filters (image, audio, video, document) in banks accept untrusted user input as file paths via Path(value) and pass them directly to open(file_path, "rb") without any path sanitization, canonicalization, or directory restriction. An attacker who controls template variables passed to a banks Prompt can use path traversal (../) to read arbitrary files accessible to the Python process—including .env files, SSH keys, cloud credentials, source code, /etc/passwd, and /etc/shadow—with the content returned base64-encoded in the rendered prompt output, making exfiltration trivial.

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, is_url_safe in src/helpers.ts strips the @ userinfo delimiter with remove_at_symbol_in_string before new URL parses the URL, allowing an attacker-controlled URL to bypass internal-IP validation and cause a client using the original URL to reach an internal service.

In OpenVPN (versions 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4), an incomplete guard allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to denial of service or memory leakage.

In OpenVPN (versions 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4), a use-after-free allows remote authenticated peers to potentially cause denial of service or memory leakage via crafted packets during TLS session promotion or expiry.

IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthenticated build endpoints.

A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service (memory exhaustion) via a flood of crafted packets.

A vulnerability in IBM PowerVM Hypervisor allows a carefully crafted OS hypervisor call to cause the hypervisor to crash or compromise OS memory integrity.

A vulnerability in OpenVPN versions 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers to exploit an off-by-one buffer write in NTLM proxy authentication, potentially causing a crash via a crafted NTLM response from a malicious proxy server.

A vulnerability in Samba Active Directory Domain Controller (AD DC) combines LDAP filter injection with improper authorization checks, allowing an authenticated low-privilege domain user to disclose confidential AD attributes such as msKds-RootKeyData, potentially leading to privilege escalation and full domain compromise.

An SSRF vulnerability in Kanboard 1.2.52 and prior allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs, enabling access to internal network resources such as cloud instance metadata services or localhost services.

Apache JSPWiki up to version 2.12.3 is vulnerable to arbitrary Wiki markup rendering due to lack of authentication. An attacker can obtain sensitive data stored in JSPWiki variables.

Apache JSPWiki up to version 2.12.3 is vulnerable to JSON Hijacking, which leads to CSRF vulnerabilities. An attacker can exploit this to perform unauthorized actions on behalf of a user.

Apache JSPWiki up to version 2.12.3 reveals unnecessary information in debug messages. This can lead to leakage of sensitive data.

A vulnerability in the foreUP customer REST API allows any authenticated, low-privilege user to access an endpoint that returns records of other users without checking ownership.

A vulnerability in IBM WebSphere Application Server 8.5 and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.7 could allow a remote attacker to bypass security constraints.