CVE Vulnerability Catalog

Anyquery prior to 0.4.5 exposes URL-capable SQLite virtual table modules (json_reader, log_reader) through its unauthenticated MySQL-compatible server port without restricting outbound destinations. A remote attacker can supply a loopback, private-network, or link-local URL (e.g. cloud metadata), causing go-getter to fetch the resource and expose the response as queryable table data.

In garminconnect prior to 0.3.5, Client.dump in client.py creates the OAuth token directory and garmin_tokens.json without explicit owner-only modes, so with umask 022 the directory is 0755 and the file is 0644. garmin_tokens.json contains di_refresh_token, which another unprivileged user on a shared Linux/macOS host can read to gain persistent access to the victim's Garmin Connect account.

In Anyquery prior to 0.4.5, the clear_plugin_cache(plugin) SQL scalar function in namespace/other_functions.go passes the caller-controlled plugin parameter through path.Join to os.RemoveAll without rejecting traversal segments. A low-privileged bearer-token holder can invoke it via the /v1/query HTTP endpoint, causing recursive deletion of any directory writable by the Anyquery server process.

PackageKit skips the polkit authorization check for transactions carrying the SIMULATE (dry-run) flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard (role == REPO_REMOVE || !SIMULATE) is always true for RepoRemove. An unprivileged local user can therefore perform a genuine package uninstall while claiming to simulate.

The NetworkManager-l2tp plugin writes attacker-controlled VPN connection properties (vpn.data and vpn.secrets) unescaped into a generated ipsec.conf file that pluto loads as root. A local unprivileged user can create and activate their own L2TP VPN profile containing a newline-injected leftupdown directive, which pluto executes as root when the IKE security association is established.

IBM Cloud Pak for Data System (Yosemite 1.0) 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols.

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization.

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization.

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains improper neutralization of special characters in the PxPeek name property. A remote authenticated attacker could exploit this to execute arbitrary OS commands.

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to OS command injection. A remote authenticated attacker could exploit this to execute arbitrary commands.

The PxXMLInput operator in IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to XML external entity (XXE) injection. A remote authenticated attacker could exploit this to obtain sensitive information.

IBM DataStage on Cloud Pak for Data 5.4.0.0 has an improper configuration of the XSLT transformation engine. A remote authenticated attacker could exploit this to execute arbitrary code.

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a path traversal vulnerability. A remote authenticated attacker could exploit this to read, write, or delete arbitrary files.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 contain improper validation of file paths. A remote attacker could exploit this to perform an arbitrary file write.

A vulnerability was identified in HKUDS nanobot up to 0.2.1 in the functions ExecTool._guard_command and ExecTool._spawn of the file nanobot/agent/tools/shell.py (ExecTool component). The manipulation leads to argument injection and can be triggered remotely.

The ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vulnerability in its REST API endpoints. Unauthenticated attackers can access and manipulate protected resources, including retrieving offers, deleting them, and viewing statistics that disclose bidder contact information and business data.

Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, obtaining unintended temporary elevated access to AWS accounts.

In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree.

PyMuPDF through 1.28.2, fixed in commit b2c8f3a, contains a path traversal vulnerability in the font branch of extract_objects() in src/__main__.py. The output filename is constructed by joining a document-controlled BaseFont name directly onto the user-supplied output directory without stripping path separators or dot-dot sequences. Attackers can supply a crafted PDF, EPUB, XPS, or FB2 file with a BaseFont name containing encoded path separators that decode to ../ sequences or absolute paths, causing arbitrary file writes outside the intended output directory.