CVE Vulnerability Catalog

A vulnerability in the Palo Alto Networks Cortex XDR agent for Windows allows a local Windows administrator to disable the agent. The issue stems from a flaw in the protection mechanism.

W podatności CVE-2026-40447 występuje przepełnienie lub owinięcie liczb całkowitych w Samsung Open Source Escargot, co prowadzi do nieokreślonego zachowania. Problem ten dotyczy wersji Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

W podatności CVE-2026-40446 występuje problem z dostępem do zasobów przy użyciu niekompatybilnego typu ('confusion type') w Samsung Open Source Escargot, co umożliwia manipulację wskaźnikami. Problem ten dotyczy wersji Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

A Stored Cross-Site Scripting (XSS) vulnerability in the NightWolf Penetration Testing Platform allows an attacker to inject and execute a malicious script in the user's browser.

Podatność związana z deserializacją niezaufanych danych w Samsung Open Source Escargot Java Script może prowadzić do stanu odmowy usługi poprzez przerwanie procesu. Problem dotyczy wersji escargot przed commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335.

A user interface issue in Microsoft Edge (Chromium-based) can lead to misrepresentation of critical information. This allows an unauthorized attacker to perform spoofing over a network.

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. Configured ClaimMapper and Authorizer were bypassed for the AdminService/StreamWorkflowReplicationMessages endpoint, allowing unauthenticated access.

In the LangSmith JavaScript/TypeScript SDK (langsmith) prior to version 0.5.18, an incomplete prototype pollution fix was found. The baseAssignValue() function only guards against the __proto__ key but fails to prevent traversal via constructor.prototype, allowing an attacker who controls keys in data processed by the createAnonymizer() API to pollute Object.prototype and affect all objects in the Node.js process.

A vulnerability in Axios versions prior to 1.15.0 and 0.3.1 allows a gadget-style attack chain where prototype pollution in a third-party dependency can be leveraged to inject unsanitized header values into outbound HTTP requests.

An SSRF vulnerability in GeoNode versions 4.4.5 and 5.0.2 (and prior) allows authenticated attackers to send outbound network requests to arbitrary URLs by submitting a crafted service URL during form validation. Insufficient IP filtering in the WMS service handler enables probing of internal network resources, including loopback addresses, RFC1918 private ranges, link-local addresses, and cloud metadata services.

An SSRF vulnerability in GeoNode allows authenticated users with document upload permissions to send arbitrary HTTP requests by providing a malicious URL in the doc_url parameter. Attackers can target internal network resources, loopback addresses, RFC1918 addresses, or cloud metadata services.

A vulnerability in the HTTP client allows CR/LF bytes to be injected into proxy tunnel headers or host, potentially leading to HTTP response splitting or cache poisoning attacks.

W podatności CVE-2021-47960 w kliencie Synology SSL VPN przed wersją 1.4.5-0684, zewnętrzni napastnicy mogą uzyskać dostęp do plików w katalogu instalacyjnym poprzez lokalny serwer HTTP związany z interfejsem loopback. Wykorzystując interakcję użytkownika z przygotowaną stroną internetową, napastnicy mogą uzyskać wrażliwe pliki, takie jak pliki konfiguracyjne, certyfikaty i logi.

W Notepad++ w wersji 8.9.3 występuje podatność na przepełnienie bufora stosu w komponencie obsługi przeciągania i upuszczania plików. Problem występuje, gdy użytkownik przeciąga i upuszcza ścieżkę katalogu o dokładnie 259 znakach bez końcowego ukośnika, co prowadzi do przepełnienia bufora i awarii aplikacji.

The installer certificate files in the …/bootstrap/common/ssl folder on Windows systems do not have restricted permissions, allowing users to read and execute. In particular, the client.key file could lead to exploits as it exposes agent identity material to any locally authenticated standard user.

A vulnerability in the wolfSSL library causes URI nameConstraints from constrained intermediate CAs to be parsed but not enforced during certificate chain verification. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL would accept them as valid.

Dockyard before version 1.1.0 lacks CSRF protection for Docker container start and stop operations. An attacker can force a logged-in administrator's browser to send GET requests, allowing unauthorized container management.

In Junos OS on MX Series with MPC10, MPC11, LC4800, LC9600 line cards and MX304, firewall filters applied to loopback interface lo0.n (where n is non-zero) are not executed when lo0.n is in the global VRF/default routing-instance. This allows an unauthenticated network-based attacker to bypass the configured firewall filter and access the device's control-plane.

A vulnerability in the CLI of Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows a local, high-privileged attacker to escalate privileges to root. The CLI accepts input without proper validation, enabling shell command injection executed with root permissions.

A Cross-site Scripting (XSS) vulnerability was found in Juniper Networks Junos Space in the list filter field. It allows an attacker to inject malicious script tags that, when visited by another user (including an administrator), execute commands with the target's permissions. All versions before 24.1R5 Patch V3 are affected.