CVE Vulnerability Catalog

IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.

rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDistributionPoint, ignoring additional distributionPoints.

A vulnerability in ArcadeDB before 26.9.1 allows an authenticated low-privilege user to bypass ACL enforcement on vertex and edge types. This is triggered by sending a batch request to POST /api/v1/batch/{database} with default parallel processing, which fails to bind the user principal to the async worker threads. The user can then append edges to protected vertices, modifying graph data without authorization.

A vulnerability in ArcadeDB before 26.9.1 exists in the query_database tool exposed through AI chat endpoints. The tool executes queries without binding the authenticated user to the database context, causing per-type and per-bucket ACL checks to fail. Authenticated users can read data they are explicitly denied at the type level.

A vulnerability in SveltyCMS 0.0.6 in the user attribute update endpoint allows improper access controls, letting a remote attacker modify user attributes without authorization. A patch is available as commit 05b4f9efeb79e9d72a693232334d7529687f896f.

Imager versions before 1.036 for Perl disclose uninitialised heap memory when reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p. The palette is allocated uninitialised, and the TGA reader stores pixel indexes without checking them against the colour map, allowing reads of prior heap contents.

A Cross-Site Scripting (XSS) vulnerability in Moonshot AI Kimi allows a remote attacker to execute arbitrary code via the HTML artifact preview in the public share view. The version as of 2026-07-18 is affected.

A vulnerability in OpenCVE before 3.0.0 allows an authenticated user with permission to configure notification channels to trigger requests to arbitrary hosts, including internal network resources, localhost, link-local addresses, and cloud metadata services. The notification testing for Webhook and Slack does not sufficiently validate destination URLs, potentially leaking information.

A flaw in Netty's HTTP/2 HpackEncoder allows a remote attacker to cause a Denial of Service by sending HTTP/2 SETTINGS frames with an excessively large MAX_HEADER_TABLE_SIZE. This leads to excessive storage of headers, increasing CPU and memory usage.

A vulnerability in Netty's OCSP client fails to verify the 'id-kp-OCSPSigning' Extended Key Usage in OCSP responder certificates. A remote attacker holding any valid certificate from the same CA can forge 'GOOD' OCSP responses for revoked certificates, bypassing revocation checks.

In io.netty/netty-codec-memcache, the Memcache binary protocol codec reads keyLength and extrasLength as signed Java types instead of unsigned as specified. A malicious Memcache server can exploit this by sending a crafted response, leading to frame desynchronization and response smuggling.

A stored Cross-Site Scripting (XSS) vulnerability exists in the profile management functionality of T-Systems' TAO 2.0 suite. An authenticated user can inject malicious HTML or JavaScript into personal data fields, which are displayed without proper sanitization to other users, including administrators.

The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'notes' parameter in all versions up to and including 10.8.1 due to insufficient input sanitization and output escaping. Authenticated attackers with Contributor-level access and above can inject arbitrary web scripts.

The Popup Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post_title in all versions up to and including 1.24.0 due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access and above can inject scripts using HTML entity-encoded payloads.

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access.

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

SQL injection vulnerability in the Sharing API in Synology DiskStation Manager (DSM) before versions 7.2.1-69057-10, 7.2.2-72806-7, and 7.3.2-86009-2. A remote authenticated user can exploit this flaw to obtain arbitrary shared files.

Server-Side Request Forgery (SSRF) vulnerability in the PersonMail API in Synology DiskStation Manager (DSM) before versions 7.2.1-69057-10, 7.2.2-72806-7, and 7.3.2-86009-2. A remote authenticated user can exploit this flaw to obtain non-sensitive information.

Path traversal vulnerability in the Audio API in Synology DiskStation Manager (DSM) before versions 7.2.1-69057-10, 7.2.2-72806-7, and 7.3.2-86009-2. A remote authenticated user can exploit this flaw to obtain non-sensitive information.

Path traversal vulnerability in the Desktop API in Synology DiskStation Manager (DSM) before versions 7.2.1-69057-10, 7.2.2-72806-7, and 7.3.2-86009-2. A remote attacker can write limited files and conduct limited denial-of-service attacks.