CVE Vulnerability Catalog

W Keycloak znaleziono lukę, która pozwala administratorowi o niskich uprawnieniach z rolą 'view-clients' na wykorzystanie punktów końcowych API Admin 'evaluate-scopes' z dowolnym identyfikatorem użytkownika. Ta podatność umożliwia wyciek danych osobowych (PII) między rolami, co pozwala na nieautoryzowany dostęp do tożsamości użytkowników i ich uprawnień.

Unauthorized access vulnerability in ZTE MU5250 due to improper permission control of the Web interface allows an unauthorized attacker to modify configuration.

In Keycloak, when both realm-level and client-level `notBefore` revocation policies are configured, the OIDC Introspection feature fails to honor the realm-level policy, leaving tokens that should be revoked active.

Samsung Open Source Escargot is vulnerable to uncontrolled recursion leading to excessive memory allocation. The issue affects commit 590345cc6258317c5da850d846ce6baaf2afc2d3.

Samsung Open Source Escargot is vulnerable to improper check or handling of exceptional conditions, allowing input data manipulation. The issue affects commit 590345cc6258317c5da850d846ce6baaf2afc2d3.

Samsung Open Source Escargot is vulnerable to improper check for unusual or exceptional conditions, allowing input data manipulation. The issue affects commit 590345cc6258317c5da850d846ce6baaf2afc2d3.

Samsung Open Source Escargot is vulnerable to memory allocation with excessive size value, leading to excessive allocation. The issue affects commit 590345cc6258317c5da850d846ce6baaf2afc2d3.

Samsung Open Source Escargot is vulnerable to release of invalid pointer or reference, allowing buffer manipulation. The issue affects commit 590345cc6258317c5da850d846ce6baaf2afc2d3.

An authenticated user can bypass configured WebAuthn policies during credential registration by manipulating client-side JavaScript. The server fails to validate that the new credential's parameters match the realm's WebAuthn policies.

The exifreader package before version 4.39.0 is vulnerable to Improper Handling of Highly Compressed Data due to decompressing PNG zTXt metadata without enforcing a built-in maximum decompressed output size. When asynchronous parsing is enabled, a crafted PNG file can cause ExifReader to materialize a disproportionately large Comment value in memory.

Samsung Open Source Escargot is vulnerable to uncontrolled recursion, allowing oversized serialized data payloads. The issue affects commit 590345cc6258317c5da850d846ce6baaf2afc2d3.

NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation. The issue affects a specific commit in the Walrus repository.

The /api/v1/autotranslate.translateMessage endpoint in Rocket.Chat (versions before 8.5.0, 8.4.2, 8.3.4, 8.2.4, 8.1.5, 8.0.6, 7.13.8, 7.10.12) allows any authenticated user to retrieve the full content of any message from any room without access check.

A NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted WebAssembly module containing deeply nested instructions. The issue affects a specific commit of the repository.

In OpenHarmony v6.0 and prior versions, a vulnerability allows a local attacker to execute arbitrary code.

Vulnerability in OpenHarmony v6.0 and prior versions allows a local attacker to cause information leak.

In OpenHarmony v6.0 and prior versions, a vulnerability allows a local attacker to cause information leak.

Discourse versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1 allow an authenticated user to read the name and structured content of form templates intended exclusively for categories they are not authorized to access.

In AutoGPT (versions 0.1.0 through 0.6.51), the SendEmailBlock accepts user-supplied smtp_server and smtp_port parameters and passes them directly to smtplib.SMTP() without IP address validation, bypassing SSRF protections. An authenticated user can perform internal network port scanning and service fingerprinting.

Mantis Bug Tracker versions 2.28.0 and 2.28.1 allow a low-privileged authenticated user to create a global profile by tampering with the user_id parameter, bypassing required permissions.