CVE Vulnerability Catalog

An insecure deserialization vulnerability was discovered in Cista v0.15 and below. Under certain conditions, it may leak stack/heap addresses, allowing bypass of ASLR protection.

An out-of-bounds read vulnerability has been identified in Apache Thrift before version 0.23.0. The issue is fixed in version 0.23.0.

In Apache Thrift before version 0.23.0, an uncontrolled recursion vulnerability was found that could lead to denial of service. The issue is fixed in version 0.23.0.

Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw.

Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The manufacturer has released patch firmware for the flaw.

In MIT Kerberos 5 (krb5) before 1.22.3, an integer underflow and resultant out-of-bounds read occur if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.

In MIT Kerberos 5 (krb5) before version 1.22.3, there is a NULL pointer dereference when an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message.

In Deepractice PromptX up to version 2.4.0, an absolute path traversal vulnerability exists in the read_docx/read_xlsx/read_pptx/list_xlsx_sheets/read_pdf functions in packages/mcp-office/src/index.ts. The attack can be performed remotely.

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 allows an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device.

A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.

A cross-site scripting vulnerability exists in SourceCodester Pharmacy Sales and Inventory System 1.0 in the file /index.php?page=types via manipulation of the ID argument. The attack can be launched remotely.

SQL Injection vulnerability in CodeAstro Online Classroom 1.0. Manipulation of the deleteid argument in /guestdetails allows remote SQL injection.

OpenClaw before 2026.4.2 fails to normalize trailing-dot localhost hosts in remote CDP discovery responses, allowing bypass of loopback protections. Attackers can craft hostile discovery responses returning localhost. to retarget authenticated browser control toward localhost endpoints and expose browser state.

OpenClaw before version 2026.3.31 contains a path traversal vulnerability in the ACP dispatch component. Attackers can read arbitrary files by manipulating inbound channel attachment paths, bypassing access controls.

OpenClaw before version 2026.3.31 contains insufficient environment variable sanitization in host exec operations, failing to filter package, registry, Docker, compiler, and TLS override variables. Attackers can inject malicious environment variables to override critical system configurations.

OpenClaw before 2026.3.28 has an environment variable disclosure vulnerability in the jq safe-bin policy. The $ENV filter is not blocked, allowing attackers to read sensitive environment variables.

OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord button and component interactions. Attackers can trigger privileged component actions from blocked contexts by bypassing channel policy enforcement.

OpenClaw before version 2026.3.31 contains a local roots self-whitelisting vulnerability in appendLocalMediaParentRoots that allows model-initiated arbitrary host file read. Attackers can exploit improper media parent directory validation to exfiltrate credentials and access sensitive files.

OpenClaw before version 2026.3.31 contains a sender allowlist bypass vulnerability in MS Teams thread history fetched via Graph API. Attackers can retrieve thread messages that should be filtered by sender allowlists, bypassing message filtering restrictions.