CVE Vulnerability Catalog

JupyterLab is an extensible environment for interactive and reproducible computing. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installation but passes uninstall names to PyPIExtensionManager.uninstall and python -m pip uninstall without rejecting option-like values. An authenticated user with extension API access can supply a pip requirements option to make the server read a local file or fetch an internal URL, and reflected parse errors can return the first unparsable line or response content.

A vulnerability was found in Poppler versions 26.06.0, 26.07.0 and 26.08.0 in the function FoFiTrueType::cvtSfnts of file fofi/FoFiTrueType.cc, causing an integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized.

iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdown of the signaling association for the cell. This results in a temporary service disruption until the eNodeB and core network re-establish connectivity.

Stack-based buffer overflow in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. Reachable via /boafrm/formAjaxSet with topicurl=setting/setWiFiRepeaterConfig and the ApCliWEPKey field.

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio (createTransport, STDIO branch, routers/mcp-proxy/server.ts).

IDOR vulnerability in MetaMCP up to 2.4.22 in MCP transport. Sessions are keyed only by client-supplied mcp-session-id header without owner binding, and /metamcp/health/sessions discloses active session IDs. An attacker can use another tenant's session to execute private MCP tools and exfiltrate data.

SQL injection vulnerability in dbhub v1.2.0 in the /utils/sql-parser.ts component. Attackers can access sensitive database information via crafted SQL statements.

OS Command Injection vulnerability in VoiceMode up to 8.10.1. The update_config MCP tool and 'voicemode config set' CLI write caller-supplied values to ~/.voicemode/voicemode.env without shell-safe escaping.

Directory Traversal vulnerability in mcp-filesystem-server v0.11.1 due to improper link resolution in validatePath. When EvalSymlinks returns os.IsNotExist for a dangling symlink, the fallback validates only the parent directory and returns the unresolved path, allowing file writes outside allowed directories.

Improper Access Control in ArgusMonitor.sys in Argotronic ArgusMonitor 7.4.02 and earlier allows local low-privileged users to bypass device handle access restrictions via a TOCTOU condition in IRP_MJ_CREATE and send a crafted IOCTL 0x9C4024A8 request, causing denial-of-service.

An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint.

KitchenAsty through 0.3.0 contains an IDOR vulnerability in the reservations API. The endpoint GET /api/reservations/:id applies authentication middleware but lacks ownership or role checks, and the getReservation handler returns the record by client-supplied identifier without comparing reservation.customerId to the authenticated principal.

A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could interrupt the normal operation of the affected service, which recovers without manual intervention.

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of the affected service.

A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege authenticated local attacker to interrupt the normal operation of the affected service.

A sensitive information disclosure vulnerability exists in the underlying OS of HPE Networking Instant On. Successful exploitation by an authenticated local attacker with high privileges could retrieve information useful for further access to network services, but only if certain preconditions outside attacker's control are met.

A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could interrupt normal operation and access limited information within the component.

A denial-of-service vulnerability in the API endpoint of HPE Networking Instant On could allow an authenticated attacker with administrative privileges to cause a denial of service. The service resumes without manual intervention.

A local privilege-escalation vulnerability in the affected daemon of HPE Networking Instant On could allow a local attacker to achieve arbitrary code execution with root privileges if certain preconditions are met.