CVE Vulnerability Catalog

Apache OFBiz has a vulnerability related to improper control of code generation and improper neutralization of directives in dynamically evaluated code. This issue affects versions before 24.09.06.

The Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz before version 24.09.06 allows an attacker to use the server to send requests to internal or external resources.

The CVE-2026-31909 vulnerability in Apache OFBiz involves exposure of sensitive information to unauthorized actors. This issue affects versions before 24.09.06.

The SSRF vulnerability in Apache OFBiz, occurring in Content component operations, allows an attacker to send malicious requests to the server. This issue affects versions of Apache OFBiz before 24.09.06.

Podatność typu out-of-bounds write w Samsung Open Source Escargot pozwala na przepełnienie buforów. Problem ten dotyczy wersji Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.

The vulnerability affects versions of the exifreader package before 4.39.0. A crafted image containing an ICC mluc tag can set an attacker-controlled record count along with a zero record size, leading to excessive memory growth during parsing.

W podatności CVE-2026-47311 występuje przepełnienie bufora oparte na stercie w Samsung Open Source Escargot, co pozwala na przepełnienie buforów. Problem ten dotyczy wersji Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.

W podatności typu use after free w Samsung Open Source Escargot występuje możliwość manipulacji wskaźnikami. Problem ten dotyczy wersji Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.

The Fortis for WooCommerce plugin before version 1.3.1 may leak sensitive API keys to unauthenticated attackers, allowing them to query Fortis' API and retrieve sensitive customer information, such as past orders and PII.

OpenHarmony v6.0 and prior versions have a vulnerability that allows a remote attacker to execute arbitrary code in pre-installed apps.

OpenHarmony v6.0 and prior versions have a vulnerability that allows a local attacker to cause a DoS attack, from which the system cannot recover.

OpenHarmony v6.0 and prior versions have a vulnerability that allows a remote attacker to execute arbitrary code in pre-installed apps.

AutoGPT versions 0.6.34 through 0.6.51 have a vulnerability that allows deserialization of data from Redis cache without integrity and authenticity checks. An attacker can exploit this vulnerability to execute arbitrary commands in the backend container context.

AutoGPT, a workflow automation platform, is vulnerable to an unauthenticated Denial of Service (DoS) attack in versions 0.4.2 through 0.6.51. An attacker can exploit the download_agent_file endpoint to uncontrollably consume disk space, leading to system failures.

Mullvad VPN is a VPN client app for desktop and mobile. In macOS versions 2026.1 and below, the Mullvad VPN installer may allow local privilege escalation during installation or upgrade.

AutoGPT, a workflow automation platform, is vulnerable to authenticated session hijacking via IDOR in versions 0.6.36 through 0.6.50. An attacker who knows another user's session_id can take over their session, allowing them to read messages and lock the legitimate user out.

FacturaScripts is an accounting and invoicing software that contains a critical vulnerability in the Plugins::add() function. The issue lies in the improper validation of file paths within uploaded ZIP archives, allowing a Zip Slip attack leading to Arbitrary File Write and Remote Code Execution.

SOGo versions 5.12.7 and prior contain a SQL injection vulnerability in the Access Control List management functionality. This allows authenticated users to extract arbitrary data from the database by injecting SQL subqueries through the uid parameter of the addUserInAcls endpoint.

W wersjach mlflow/mlflow przed 3.11.0 funkcja `get_or_create_nfs_tmp_dir()` tworzy tymczasowe katalogi z uprawnieniami do zapisu dla wszystkich (0o777), a funkcja `_create_model_downloading_tmp_dir()` tworzy katalogi z uprawnieniami do zapisu dla grupy (0o770). Te niebezpieczne uprawnienia umożliwiają lokalnym atakującym manipulację artefaktami modeli, co może prowadzić do wykonania dowolnego kodu.

The FreePBX backup module in versions below 16.0.71 and 17.0.6 does not properly sanitize data during restore operations, potentially leading to compromise if the backup contains malicious data. Malicious files can be read and passed to unserialize() without validation.