CVE Vulnerability Catalog

Sharp, a Laravel content management framework, from version 9.0.0 to before 9.22.3 does not enforce authorization checks on the create and store endpoints of the Quick Creation Command feature. An authenticated Sharp user without create permission on a given entity can bypass authorization and create new records for that entity if a Quick Creation Command handler is configured.

Russh before version 0.61.0 does not strictly enforce SSH identification-string rules. The server-side identification reader uses a permissive path, allowing pre-banner lines from clients and not bounding their number. A remote attacker can hold connection setup resources in the cleartext pre-authentication phase with malformed identification input.

Russh (Rust SSH client & server library) versions 0.37.0 through 0.61.0 contain a vulnerability in the keyboard-interactive authentication path. A malicious SSH server can send USERAUTH_INFO_REQUEST with a controlled prompt count, and the client uses that count directly in Vec::with_capacity(...) before validation, potentially causing memory issues.

Russh before version 0.61.0 has a vulnerability in the server authentication path where internal authentication state is not reset when the username or service changes between requests. This can affect later requests for a different (user, service).

ImageMagick is free and open-source software for image editing. Prior to versions 7.1.2.23 and 6.9.13-48, a crafted MSL image can trigger a heap-use-after-free. Versions 7.1.2.23 and 6.9.13-48 fix the issue.

ImageMagick before versions 6.9.13-47 and 7.1.2-22 has a resource exhaustion vulnerability in the MNG coder. Missing check of the image list limit allows reading more images than allowed, leading to excessive resource use.

In ImageMagick prior to versions 6.9.13-47 and 7.1.2-22, performing a polynomial distortion with specific arguments can cause an out-of-bounds over-read of 24 bytes. This issue has been fixed in the mentioned versions.

The bit7z library prior to version 4.0.12 has an arbitrary file overwrite vulnerability via symlink attack on predictable temp files during archive update.

In ImageMagick prior to versions 6.9.13-48 and 7.1.2-22, an invalid connected-components:keep-top value can cause a heap buffer over-read during connected components operation. This has been fixed.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, an off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder.

In ImageMagick prior to versions 6.9.13-47 and 7.1.2-22, a missing check in the PSD decoder allows bypassing the list-length resource policy when decoding a PSD image. Other security limits still apply.

In ImageMagick prior to versions 6.9.13-47 and 7.1.2-22, writing an IPTC output file with a malicious input can cause an out-of-bounds read of one byte. This has been fixed.

In OpenVPN ovpn-dco-win versions 2.0.0 through 2.8.3, an incorrect buffer size calculation in the epoch key generator allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption via a crafted data packet, causing a system crash.

A memory corruption vulnerability in tunnel traffic processing in PAN-OS allows an authenticated user to initiate system reboots using a maliciously crafted packet. Repeated attempts can put the firewall into maintenance mode.

A security control bypass vulnerability was found in Prisma Access Agent for Linux. A local attacker can route network traffic outside the VPN tunnel, bypassing security policies.

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS allows a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the app. After obtaining the passcode, the user can perform these actions even if the configuration would not normally permit it.

Palo Alto Networks PAN-OS software has a cross-site scripting (XSS) vulnerability that allows a malicious authenticated administrator to store a JavaScript payload using the web interface. This affects PA-Series and VM-Series firewalls and Panorama (virtual and M-Series). Cloud NGFW and Prisma Access are not affected.

Weblate is a web based localization tool. From version 5.15 to before version 2026.6, VCS_RESTRICT_PRIVATE did not properly account for some transitional IPv6 ranges, multicast addresses, or some semi-private IPv4 ranges, which allowed some addresses to bypass private range restrictions.

Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.0, there is a SSRF and local file read vulnerability via the xsl-style-sheet option.

Weblate is a web based localization tool. Prior to version 2026.5, Weblate's live search preview renders unit source and context as HTML without escaping, potentially allowing malicious code execution.