CVE Vulnerability Catalog

Directory traversal vulnerability in knowns-dev/knowns 0.11.4. An attacker can use a crafted path in the get_doc and update_doc tools to access files outside the intended directory.

The application contains an SQL injection vulnerability in report filtering parameters. Unsanitized user input is concatenated directly into SQL queries, enabling blind SQL injection and unauthorized database read access.

Vulnerability in the Data::SpatialHash::Shared library for Perl before version 0.02 allows out-of-bounds reads and writes. A local attacker who can write to the backing file can manipulate indices, leading to memory corruption or process crash.

The norm.Iter function can enter an infinite loop when processing input containing invalid UTF-8 bytes.

An issue in exo-explore exo 1.0.69 allows a remote attacker to escalate privileges via the GET /state and DELETE /instance/{instance_id} endpoints with no authentication.

Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter.

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server.

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component.

Vulnerability in CImg Library before version 4.0.0. The `_load_analyze()` function reads the `header_size` field from an Analyze/NIfTI file and allocates memory without checking the file size, potentially causing memory leaks (e.g., 1.3 GB per call) with a crafted 6-byte file.

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.

Directory traversal vulnerability in the create_doc tool of knowns-dev/knowns 0.11.4. An attacker can use a crafted folder name to read files outside the allowed directory.

Uncontrolled recursion in JSON, CBOR, and XML deserializer functions emitted by Amazon smithy-rs code generation could allow remote attackers to cause a denial of service (process abort via stack exhaustion) via a small request containing deeply nested data for a recursive model shape.

An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database.

An authenticated path traversal vulnerability in AOS-CX allows copying arbitrary files to a user-readable location from the CLI of the underlying OS, potentially leading to remote code execution.

Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow a remote high-privileged user to execute arbitrary code as a privileged user on the underlying operating system.

DHIS2 (versions 2.37-2.44) contains a SQL injection vulnerability in the SqlView API endpoint. An authenticated user with SqlView access can inject arbitrary SQL queries via the filter parameter by abusing a PostgreSQL expression, with output reflected in error messages.

Vulnerability in DHIS2 SQL View data endpoints. Authenticated users with SQL View access can provide crafted filter values that are interpolated into generated SQL, potentially accessing data outside the intended result set.

XSS vulnerability in DHIS2 versions 2.42 and 2.43 before the 2026-06-09 security patches, and in the 2.44 development branch. An attacker can inject active HTML or JavaScript via the scope parameter in the OpenAPI HTML endpoint.

Vulnerability in HumHub (enterprise social network) allows any authenticated user to remove all members from any Space, regardless of their role. Missing access control in the member management controller.

IDOR vulnerability in PraisonAI Platform before 0.1.4. A user who is a member of any workspace can read, modify, or delete agents from another workspace due to missing workspace constraint. Fixed in version 0.1.4.