CVE Vulnerability Catalog

rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read stories from unpublished feeds through the anonymous publish.story_get endpoint. Because UnionStory.get_by_feed_offset ignores the only_publish flag, attackers can enumerate feed IDs and offsets.

SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/IMG_lbm.c that skips bitplane count validation when HAM mode is set. A crafted ILBM file with more than 8 HAM bitplanes causes reads past the colormap stack array.

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. A crafted .zck file whose header ends inside a compressed integer causes reads past the heap header buffer.

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() function of CImg.h caused by an integer overflow in the row byte count. A crafted BMP file with a large header width wraps dx_bytes, causing crashes or heap memory disclosure into the decoded image.

Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additional_guests field when guests are disallowed. An attacker can set additional_guests to the remaining seat count in modules/events/events_function.php to exhaust event capacity and block other members from registering.

A vulnerability was identified in a2aproject a2a-go up to 2.4.0 in the Cancel function of internal/taskexec/distributed_manager.go of the Distributed Manager component. Manipulation leads to denial of service, and the attack can be launched remotely.

A vulnerability was determined in a2aproject a2a-go up to 2.4.0 in an unknown function of a2asrv/rest.go of the REST SSE handler component. Manipulation causes resource consumption, and the attack can be initiated remotely.

A misconfiguration issue in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, potentially resulting in information exposure or affecting service availability. This affects Control-M/Enterprise Manager versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions, and Control-M/Server versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions.

A vulnerability in Shirt Pocket's SuperDuper! 4.0.9 and earlier allows a local attacker to obtain sensitive information.

Ontime improperly restricts excessive authentication attempts, enabling brute force attacks. The issue affects versions through 2026-10-27; the vendor did not respond to the disclosure.

Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application logs and diagnostics bundles due to insufficient IPC payload redaction. An attacker with read access to these files could obtain the credentials; these OAuth tokens are not Docker account tokens. Versions 4.94.0 and 4.95.0 addressed known logging paths, but logs containing credentials can remain after upgrading, and version 4.97.0 fixes the issue and includes cleanup of existing host logs and crash dumps.

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

Dell PowerProtect Data Domain contains an Improper Privilege Management vulnerability across multiple Feature Release, LTS2024, LTS2025 and LTS2026 versions. A high privileged attacker with remote access could exploit it to elevate privileges.

Dell PowerProtect Data Domain contains an Improper Privilege Management vulnerability across multiple Feature Release, LTS2024, LTS2025 and LTS2026 versions. A high privileged attacker with local access could exploit it to elevate privileges.

Dell PowerProtect Data Domain contains a Server-Side Request Forgery (SSRF) vulnerability across multiple Feature Release, LTS2024, LTS2025 and LTS2026 versions. An unauthenticated attacker with remote access could exploit it to perform server-side requests.

Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially intercept or modify communications between easySoft and easyE4.

In github.com/eclipse-keypont/crypto11/v2 versions >= 2.0.0-rc3, <= 2.0.0-rc8, the ML-KEM key-pair lookup functions locate the public half of an ML-KEM key pair by CKA_ID/CKA_LABEL and never verify it against the private key. An attacker who can open an unauthenticated session on the token and plant a public CKK_ML_KEM object carrying the victim's CKA_ID/CKA_LABEL receives the shared secrets for encapsulations performed through the substituted key pair.

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands run over SSH on a remote agent host and via a local shell. A party who can change that API response can include shell metacharacters and cause additional commands to run on the agent host.