CVE Vulnerability Catalog

In GNU Wget through version 1.25.0, an integer overflow vulnerability exists in the parse_content_range() function within src/http.c. Attackers can supply malicious Content-Range header values, causing signed integer arithmetic overflow, leading to undefined behavior and download desynchronization.

In DataEase prior to version 2.10.24, dashboard text components render stored component content with Vue v-html without server-side HTML sanitization, allowing an authenticated user who can edit dashboard component data to inject HTML with executable event handlers that execute when another user or shared-link visitor views the dashboard.

In Coder from version 2.33.0 to 2.33.8 and 2.34.2, AI Bridge provider handlers read request bodies with `io.ReadAll` without a maximum size, allowing an authenticated user with AI Bridge access to send an arbitrarily large body and exhaust memory. The vulnerability leads to denial of service (DoS).

In Chevereto before version 4.5.4, enabling the private profile option does not block access to the user's image list via the `/json` endpoint. An unauthenticated attacker who knows the victim's ID can retrieve all public images and reveal the username.

A vulnerability in Cilium allows users with the ability to create CiliumLocalRedirectPolicies to hijack traffic to Services in any namespace by specifying arbitrary ClusterIPs via addressMatcher. Deleting such a policy can also corrupt Cilium internal service state and stop service translation for the affected Service.

In Actual prior to version 26.6.0, the GET /secret/:name endpoint in @actual-app/sync-server does not verify admin privileges, allowing any authenticated BASIC user in OpenID mode to read configured bank-sync secrets. The issue is fixed in version 26.6.0.

In the Actual local-first personal finance app prior to version 26.6.0, the @actual-app/cli package's escapeCsv helper in packages/cli/src/output.ts does not neutralize standard CSV formula-injection prefixes. User-controlled strings (e.g., transaction lists, accounts, payees) can be interpreted as formulas in spreadsheet software.

NocoBase up to version 2.1.20 contains a server-side request forgery (SSRF) vulnerability in the serverRequest wrapper. It allows authenticated administrators to issue arbitrary outbound HTTP requests by supplying malicious URLs to workflow request nodes, custom request action buttons, or the AI plugin.

An unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant On 1830, 1930, and 1960 Switches. Successful exploitation could allow an unauthenticated remote attacker to access sensitive cryptographic secrets on a vulnerable system.

A vulnerability in Coder allows suspended users to continue using valid API keys until they are deleted. The AI Bridge proxy authentication does not check if the account is suspended, enabling unauthorized access.

An improper access check in Contao allows unauthorized users to display a list of modules in the frontend.

CVE-2026-48955 is an improper access check vulnerability that allows unauthorized users to access workflow stage and transition information.

CVE-2026-48954 is caused by improper validation in the language override feature, leading to a generic XSS vector. An attacker can exploit this to inject arbitrary JavaScript code into the victim's browser.

Lack of escaping leads to an XSS vulnerability in the generic image output layout. An attacker can inject malicious JavaScript code that will be executed in the victim's browser.

Lack of proper escaping in the update list view of the com_installer component in Joomla! leads to an XSS vulnerability. An attacker can inject malicious JavaScript code that will be executed in the administrator's browser.

Lack of output escaping in modalreturn layouts of various components leads to Cross-Site Scripting (XSS) vulnerabilities.

Lack of proper escaping in the file management view of the com_templates component leads to a Cross-Site Scripting (XSS) vulnerability.

Lack of input validation in MFA management views leads to an XSS vulnerability.

CVE-2026-48947 is an improper access check vulnerability that allows privileged users to overwrite media files without having the required editing permissions.

In AWS Research and Engineering Studio (RES), a CWE-59 vulnerability was found due to improper link resolution before file access in the Auth.GetUserPrivateKey API. An authenticated remote user can read arbitrary files on the cluster-manager EC2 instance by replacing their SSH private key file (~/.ssh/id_rsa) with a symbolic link pointing to any file on the host.