CVE Vulnerability Catalog

is_path_trusted in scripts/iib/api.py compares the requested path against allowed parent directories with path.startswith(parent_path), without appending a path separator. A directory whose name merely begins with an allowed path satisfies the comparison, allowing access to files outside the allowed directory.

Incus before version 7.2.0 has missing authorization checks for instance copying, allowing an attacker who knows the name of a project and an instance in that project to copy the instance to a new project.

Incus prior to version 7.2.0 has missing authorization checks for custom volume copying. An attacker knowing the name of a project they don't have access to and the name of a custom volume in that project can copy the volume to a new project. This could allow access to secrets in volumes they are not authorized to access.

OMEN Gaming Hub versions prior to 1101.2608.0.0 have a vulnerability that could allow a local attacker to escalate privileges due to insufficient access controls.

YOOtheme Pro for Joomla versions 1.0.0-5.0.40 contains an SQL injection vulnerability that allows any contributor-level user to inject own content into SQL queries.

Joomla Extension - yootheme.com - Zoo prior to version 4.1.66 has unauthenticated stored XSS. User supplied input in comments and user supplied field elements weren't escaped, leading to a stored XSS vector.

Joomla Extension - yootheme.com - YOOtheme Pro 2.3.0-5.0.40 has authenticated, privileged arbitrary file read. The Filesystem source's path filter is vulnerable to glob-based pattern attacks, allowing authorized users to read arbitrary files.

Apache CloudStack versions 4.7.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 have a missing release of resource after effective lifetime vulnerability in the scoped global configuration functionality. This may lead to denial of service (DoS) for the management server.

Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header. No check rejects loopback, link-local, or RFC 1918 destinations, so requests reach internal services and cloud metadata addresses. The Authorization header is forwarded unchanged to the caller-designated host. The reference docker-compose.yml exposes ports without required token, increasing risk.

Roskus Prospero Flow CRM versions 5.0.0 through 5.3.5 have an authorization bypass through user-controlled key in the transaction API. An authenticated user can read transactions of other companies on the same instance via an incremented identifier in GET /api/transaction/{id}, without company scoping or permission check.

The MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not limit the number of sessions it retains and by default does not require client authentication. A remote attacker can cause unbounded session accumulation, gradually exhausting memory and leading to Denial of Service (DoS) for all legitimate clients. Affects Spring AI version 2.0.0.

Reconmap's API applies a fallback authorization policy requiring an authenticated administrator, but the report preview action in ReportsController.cs carries [AllowAnonymous], opting out of that policy. PreviewReport loads the project and linked organisation without any authentication, membership, or role check. Because the id is an auto-increment primary key, an unauthenticated attacker can walk sequential ids to retrieve sensitive details of all projects.

Remote Utilities Host <=7.7.3.0 sets insecure ACLs on all DLL files in the installation directory, granting FULL CONTROL to the Everyone group. A Windows service running as SYSTEM loads DLLs from this directory. A race window exists when the service is stopped, during which a local unprivileged attacker can replace a DLL with a malicious payload, which executes as SYSTEM upon service restart.

A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The import code used sys.exit() to handle errors, causing unexpected process termination, and did not limit input size, leading to excessive memory and CPU consumption.

A path traversal vulnerability in MISP during STIX 2 import and MISP-to-STIX 2 export. MISP object names were not sufficiently validated before being used in filesystem paths for template resolution, allowing escape from the template directory and loading a definition.json from another location. An attacker could supply a malicious object name (e.g., containing ../) via a custom STIX object or a persistent MISP event.

Command Injection in BOSH CLI tool on Windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities.

Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 allow a malicious agent to forge a SAML response to the management server. The agent must spoof the IdP IP address or register a URL of its own choosing, after which it can allow logging on with forged signatures. Users are recommended to upgrade to versions 4.20.3.1 or 4.22.1.1 and above.

Improper authorization for CRUD operations on Project Roles and Project Role permissions for domain admins in CloudStack. A Domain Admin can create, update, delete, and list project roles and permissions for projects in any domain, not just their own. Affects versions from 4.15.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0.

Argument injection vulnerability in Apache InLong. The Agent Installer's ModuleManager executes arbitrary shell commands via ExcuteLinux.exeCmd() with no filtering or whitelist validation. Affects versions from 2.0.0 before 2.4.0.

Command Injection vulnerability in Apache CloudStack's run and get diagnostics functionality for system VMs and virtual routers. An authenticated user with required permissions can achieve arbitrary command execution on system VM and/or Virtual Router instances, running as root. Affects versions from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0.