CVE Vulnerability Catalog

The _load_model() function in the neural_magic_training.py script of the optimate project is vulnerable to insecure deserialization. The lack of enabling the weights_only=True security parameter when loading the state_dict.pt file allows for the deserialization of arbitrary Python objects, potentially leading to arbitrary code execution.

Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension. This issue affects Pandora FMS from versions 777 to 800.

Session Fixation vulnerability allows Session Hijacking via crafted session ID. This issue affects Pandora FMS: from 777 through 800.

The Cross-Site Request Forgery (CSRF) vulnerability allows an attacker to perform unauthorized actions via a crafted web page. This issue affects Pandora FMS versions from 777 to 800.

An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file.

SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution.

In Ivanti Endpoint Manager before version 2024 SU6, incorrect permissions assignment in the agent allows a local authenticated attacker to escalate their privileges.

Ivanti Virtual Traffic Manager before version 22.9r4 has an OS command injection vulnerability that allows a remote authenticated attacker with admin privileges to achieve remote code execution.

A race condition in Ivanti Secure Access Client before version 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM.

A vulnerability related to the initialization of a resource with an insecure default setting exists, which could lead to unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances.

Pocket ID, as an OIDC provider, prior to version 2.6.0, did not re-validate the user's current authorization state when issuing new tokens. The createTokenFromRefreshToken function allowed indefinite token refreshing after authorization revocation.

YetAnotherForum.NET (YAF.NET) prior to versions 4.0.5 and 3.2.12 has a vulnerability that allows for the injection of unsafe HTML code by users in posts and replies. This content is stored server-side and rendered back into the thread page without adequate HTML sanitization.

In YetAnotherForum.NET prior to versions 4.0.5 and 3.2.12, there is a vulnerability related to improper handling of the User-Agent header. The application logs this header in the event log and then interpolates it directly into HTML without proper encoding, which may lead to XSS attacks.

In YetAnotherForum.NET (YAF.NET) prior to version 4.0.5, there is a vulnerability that allows arbitrary SQL execution by low-privileged users. The issue is related to the OnPost… handler in the admin panel, where there are insufficient checks for SQL queries.

Open-WebSearch prior to version 2.1.7 has a vulnerability that does not recognize bracketed IPv6 literals and does not resolve DNS, allowing non-blind SSRF with the response body returned to the caller.

An SQL injection vulnerability in the Elixir.Postgrex.Notifications module of the postgrex library for Elixir. The channel argument passed to listen/3 and unlisten/3 is interpolated directly into LISTEN/UNLISTEN SQL statements without escaping the double-quote character. An attacker who can influence the channel name can inject arbitrary SQL commands, including DDL and DML, using the PostgreSQL simple query protocol. This affects versions from 0.16.0 before 0.22.2.

A use-after-free vulnerability was found in the JavaScript: WebAssembly component of Firefox. This flaw was fixed in Firefox 150.0.3.

A JIT miscompilation vulnerability exists in the JavaScript Engine of Firefox, which could lead to unexpected behavior. This issue was fixed in Firefox 150.0.3.

CVE-2026-6865 is a vulnerability related to improper limitation of a pathname to a restricted directory, which may lead to unauthorized access to sensitive files. The issue arises when user-supplied input is improperly handled during server-side file path processing.

The PAM session module pam_authnft, which binds nftables firewall rules to authenticated sessions, had a vulnerability related to heap buffer over-reads in versions prior to 0.2.0-alpha. This allowed a crafted NETLINK_SOCK_DIAG reply to bypass the message-size check, leading to dereferencing past the end of the allocation.