CVE Vulnerability Catalog

Juju versions from 2.9 to before 2.9.56 and 3.6 to before 3.6.19 allow any authenticated user, machine, or controller to modify application resources across the entire controller.

Juju from versions 2.9 to before 2.9.56 and 3.6 to before 3.6.19 allows a compromised workload machine to read any log file for any entity in any model at any level.

A vulnerability in FastMCP before version 3.2.0. Server names containing shell metacharacters (e.g., &) can cause command injection on Windows during installation via fastmcp install claude-code or gemini-cli.

Casdoor 2.356.0 has a server-side request forgery (SSRF) vulnerability in the Webhook URL Handler component. The attack can be launched remotely without authentication.

Dokuwiki version 2025-05-14b has a denial of service vulnerability in the media_upload_xhr() function in media.php. A remote attacker can cause a denial of service.

In Biztalk360 through version 11.5, a Directory Traversal vulnerability exists due to mishandling of user-provided input in a path to be read by the server. A Super User attacker can read files on the system and/or coerce an authentication from the service.

Focalboard version 8.0 (unsupported product) fails to validate file ownership when serving uploaded files. This allows an authenticated attacker who knows a victim's fileID to read the file content. The product is no longer maintained and no fix will be issued.

In the logicvc DRM driver in the Linux kernel, a device node reference leak occurs in logicvc_drm_config_parse(). The of_get_child_by_name() function does not release the reference to the found 'layers' node.

In the Btrfs filesystem in the Linux kernel, a memory leak occurs in btrfs_uring_read_extent(). The 'pages' object is not freed in error paths when previous allocations fail or when btrfs_encoded_read_regular_fill_pages() does not return -EIOCBQUEUED.

In the Linux kernel drm/xe/configfs driver, a memory leak occurs. xe_config_device_release() only frees ctx_restore_post_bb but not ctx_restore_mid_bb, causing a leak when the configfs device is removed.

In the wlcore Wi-Fi driver in the Linux kernel, a locking bug was detected where wl->mutex is unlocked without being locked first.

In the Linux kernel drm/xe/reg_sr driver, a memory leak occurs. When xa_store() fails, the newly allocated entry is not freed, causing a memory leak on the error path.

A vulnerability was identified in Casdoor 2.356.0 in the OAuth Authorization Request Handler. Manipulation of the redirect_uri argument leads to an open redirect. The attack can be performed remotely and the exploit is publicly available.

In MariaDB Server before versions 11.4.10, 11.5.x-11.8.x before 11.8.6, and 12.x before 12.2.2, a vulnerability was found where a large packet can crash the server if the caching_sha2_password authentication plugin is installed and some user accounts are configured to use it. The issue is due to alloca usage in sha256_crypt_r.

In Roundcube Webmail before versions 1.5.15 and 1.6.15, the remote image blocking feature can be bypassed via SVG content in an e-mail message. This may lead to information disclosure or access-control bypass. This involves the animate element with attributeName=fill/filter/stroke.

In Roundcube Webmail before versions 1.5.14 and 1.6.14, insufficient CSS sanitization in HTML messages was found. This allows bypassing fixed-position mitigation via the !important directive.

In Roundcube Webmail before versions 1.5.14 and 1.6.14, the remote image blocking feature can be bypassed via SVG content with animate attributes in an email message. This may lead to information disclosure or access-control bypass.

In Roundcube Webmail before versions 1.5.14 and 1.6.14, the remote image blocking feature can be bypassed via a crafted background attribute of a BODY element in an email message. This may lead to information disclosure or access-control bypass.

Roundcube Webmail before versions 1.5.14 and 1.6.14 has incorrect password comparison in the password plugin, leading to type confusion that allows password change without knowing the old password.

In Roundcube Webmail from version 1.6.0 to 1.6.14, insufficient CSS sanitization in HTML emails may lead to SSRF or information disclosure, e.g., when stylesheet links point to local network hosts.