CVE Vulnerability Catalog

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for versions 12.0, 11.5, and 11.3.

There is a reflected cross-site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior. A remote, unauthenticated attacker can create a crafted link that, when clicked, may execute arbitrary JavaScript in the victim's browser.

OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to issue sync tokens via POST /api/sync/tokens when requireLogin is disabled. Attackers can use the issued token against GET /api/sync/bundle to retrieve decrypted provider credentials and plaintext API keys, with tokens persisting after login is re-enabled.

A vulnerability was identified in FastStone Image Viewer up to 8.5 in the function FUN_0062d96c of the Box-Average Downsampler Engine component. The manipulation leads to an out-of-bounds read, and the attack can be initiated remotely.

A vulnerability was determined in Omega Solution Restro POS up to 20261026 affecting an unknown function of the /sale-invoice/ file. Manipulating the productUnitSalePrice argument can lead to business logic errors, and the attack may be performed remotely.

The WordPress Gallery PhotoBlocks plugin (photoblocks-grid-gallery) contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions up to and including 1.3.7.

The WordPress Button Block plugin (button-block) contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions up to and including 1.2.7.

The WordPress Content Slider Block plugin (content-slider-block) contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions up to and including 3.2.1.

The WordPress Typing Text plugin (text-typing) contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions up to and including 2.2.0.

Backstage is an open framework for building developer portals. Prior to 3.9.2 and from 4.0.0 until 4.0.2, DefaultCatalogRulesEnforcer in @backstage/plugin-catalog-backend compares the raw location.target URL against catalog.rules, while URL readers canonicalize the same URL before fetching it. An authenticated user with catalog.location.create permission can use percent-encoded path segments to make an untrusted URL match a trusted location pattern even though the canonical URL resolves outside that scope.

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, _unpack_2bit() and _unpack_4bit() resize unpacked arrays according to attacker-controlled TensorProto.dims without verifying that raw_data or int32_data encodes the declared number of elements. Materializing an untrusted UINT2, INT2, UINT4, INT4, or FLOAT4E2M1 tensor through onnx.numpy_helper.to_array() or onnx.reference.ReferenceEvaluator can therefore expand a small packed payload into a disproportionately large allocation and exhaust memory.

ONNX versions from 1.4.0 until 1.22.0 do not safely validate the required num_scan_inputs attribute in ScanInferenceFunction, ScanInferenceFunction_opset8, and ScanInferenceFunction_opset9. A missing attribute is dereferenced as a null pointer, while a negative value is converted to size_t and can reach an oversized allocation path. An untrusted model can terminate or disrupt shape inference, including a negative-value model that passes onnx.checker.check_model().

ONNX versions from 1.2.1 until 1.22.0, during ConvTranspose shape inference, process a weight tensor with fewer than three dimensions without a kernel_shape attribute by deriving an empty effective_kernel_shape and indexing it for spatial dimensions. An untrusted model that passes onnx.checker.check_model() can crash onnx.shape_inference.infer_shapes(), causing denial of service without confidentiality or integrity impact.

ONNX before 1.22.0, in RNNShapeInference_opset1_to_6(), processes malformed RNN and LSTM nodes from opsets 1 through 6 and GRU nodes from opsets 3 through 6 without verifying that the first input has rank three. The function accesses dim(0) and dim(1) on an undersized protobuf shape, which can read outside the intended repeated field and terminate an application when onnx.shape_inference.infer_shapes() processes an untrusted model.

vLLM from 0.16.0 until 0.32.0 allows an authenticated caller to place an attacker-controlled template in chat_template_kwargs[chat_template] when no server template is configured. ChatParams.get_apply_chat_template_kwargs() preserves that value without enforcing trust_request_chat_template, bypassing the trust policy and causing CPU or memory exhaustion through Jinja rendering.

vLLM before 0.32.0, in vllm/tokenizers/hf.py, computes max_token_id with an off-by-one upper bound, allowing a pre-tokenized prompt ID equal to the vocabulary size to pass validation. For tensor-parallel size one and an exact multiple-of-64 vocabulary, VocabParallelEmbedding.forward does not mask that value before F.embedding uses it, causing a CUDA device-side assertion and terminating the engine.

vLLM from 0.11.1 until 0.32.0, in the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image path, allows a remote client reaching the OpenAI-compatible API to submit a legal image whose normalized pixels sum to zero when alone in its per-step encoder batch. _parse_and_validate_image_input returns no embedding, embed_multimodal propagates that value, and sanity_check_mm_encoder_outputs triggers a fatal assertion that shuts down the engine for all users.

HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may allow an authenticated user to modify health checks belonging to another service on the same node. This vulnerability is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19.

The Customer Coupons for WooCommerce plugin by VillaTheme has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. The issue affects versions through 1.3.14.

A vulnerability in the Zephyr Bluetooth Classic stack affects the Hands-Free Profile Audio Gateway role. When bt_rfcomm_dlc_connect() fails after SDP discovery starts, bt_hfp_ag_connect() memset()s the entire AG object while the SDP node is still linked and ag->slc_work may still be queued. Later SDP request-list processing dereferences the zeroed pool, uuid and func pointers, causing a crash or hang of the Bluetooth stack.