CVE Vulnerability Catalog

A vulnerability was determined in dbgate up to 7.3.1 affecting the createLink function in packages/api/src/controllers/archive.js of the Archive Link Creation component. Manipulation of the linkedFolder argument causes path traversal.

The mint library (Elixir) has a resource allocation vulnerability allowing a malicious HTTP/2 server to exhaust client memory and cause denial of service. Affected versions are from 1.1.0 before 1.10.2.

Improper parameter handling in NeuVector allows any authenticated user with namespaced Runtime Policies (write) permission or anyone with access to NeuVector’s internal gRPC certificate key pair to inject OS commands in the privileged enforcer container, leading to complete compromise of the worker node.

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to arbitrary file write via HA Failover Config sync upload, leading to remote code execution.

A vulnerability was determined in Thinkware U3000 up to 1.02.04 affecting the PUT_FILE function in /tmp/wpa_supplicant.conf of the TCP Service component. Manipulation of the path argument can lead to improper access controls.

A security vulnerability has been detected in refly-ai refly up to 1.1.0 affecting some unknown processing of apps/api/src/modules/config/app.config.ts of the JWT Token Handler component. Manipulation with the input 'test' leads to hard-coded credentials.

Apache Karaf's instance-management service (InstanceServiceImpl) builds the command line used to launch a child Karaf JVM by string concatenation, then executes it through /bin/sh (Unix) or cscript (Windows). The caller-supplied javaOpts value is spliced into that string unquoted, allowing shell metacharacters (;, |, `, $(...)) to be interpreted by the shell, leading to arbitrary OS command execution as the Karaf process user.

A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path. This vulnerability was patched on 30 June 2026, and no customer action is needed.

Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI Central host.

ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution. The vulnerability occurs during the processing of DNS records.

ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution. The vulnerability occurs in the context of DNS query resolution.

LDAPCache and LDAPBackingEngine build LDAP search filters by substituting %u, %dn, and %fqdn into administrator-configured filter templates (userFilter, roleFilter) without full RFC 4515 escaping. Before the fix, only double backslashing was applied, which does not escape *, (, ), and NUL. A login name containing these characters can alter the filter structure, e.g. turning an equality match into a wildcard match or closing/reopening filter clauses.

A stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service (DoS) condition.

An out-of-bounds read exists in libXtst's RECORD reply parser in versions before 1.2.6. A malicious X server could exploit this to crash attached X clients.

BUFFALO Wi-Fi products improperly handle web form input when assembling internal command line strings. An administrative user can send a crafted HTTP request to execute an arbitrary OS command.

An unrestricted upload of a file with a dangerous type vulnerability exists in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System, allowing upload of a web shell to a web server. This affects versions from 6.7.141 before 10.0.11.

A flaw was found in Trusted Domain Project OpenDMARC up to 1.4.2 in unknown functionality of policy.c in the Domain Handler component. Manipulation leads to improper validation of unsafe equivalence, and the attack can be launched remotely. The exploit has been published and may be used.

A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2 in the function opendmarc_util_cleanup in libopendmarc/opendmarc_util.c of the DMARC Record Parser component. Manipulation results in an off-by-one, and the attack may be initiated remotely. The exploit is public and the patch is named b3b1da9264bc80324094a27c71e7369bdedc62ae.

Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files readable by the Roller process and reach internal network addresses by importing a crafted OPML document, because the bookmark import parser does not disable external entity resolution.

Missing Authentication for Critical Function in Apache Roller 6.1.5 allows an unauthenticated remote attacker to persistently change a site-global configuration value (the frontpage weblog selection) on any installed instance, because the setup action remains anonymously reachable after installation and persists configuration without an authorization check.