Search: 5.1.8.7

A regular expression denial of service (ReDoS) vulnerability exists in Datadog's dd-trace-py library affecting the URL query string obfuscation pattern used in HTTP tracing integrations. The vulnerable regex can cause excessive CPU consumption and stall request processing when handling certain attacker-controlled inputs, leading to denial of service. This issue affects ddtrace versions from 1.5.0 up to but not including 3.19.9, and from 4.0.0 up to but not including 4.15.6. A fix is available in versions 3.19.9 and 4.15.6. Workarounds involve setting environment variables to use a fixed regex pattern. The vulnerability is enabled by default in affected HTTP integrations that include query strings in URL span tags.

PowerProtect Data Domain versions 7.7.1.0 through 8.7, including certain LTS2024, LTS2025, and LTS2026 releases, contain a Relative Path Traversal vulnerability in the certificate handling. This flaw allows a high privileged attacker with remote access to potentially cause a denial of service condition. The vulnerability has a CVSS score of 6.5, indicating medium severity. No public exploits or patches are currently documented.

Artalk versions prior to 2.10.1 have a server-side request forgery (SSRF) vulnerability that can be exploited without authentication. Remote attackers can submit anonymous comments to the /api/v2/comments endpoint with a crafted page_key pointing to internal URLs. The server fetches the URL to retrieve the page title with only scheme validation, allowing attackers to read internal page titles via the public comment list. This vulnerability has a medium severity with a CVSS score of 5.3.

A heap out-of-bounds read vulnerability exists in zchunk versions before 1.5.5 in the read_preface() function. This flaw occurs because the function passes the total header length instead of the remaining bytes to compressed integer parsing functions, allowing crafted .zck files to cause reads beyond the heap buffer and crash the application.

A vulnerability in Keepnet Labs Cybersecurity Inc.'s Agentic AI / Agentic Ally allows an attacker to bypass authentication by spoofing. This flaw affects versions before commit 0ef61f2e. The vulnerability has a high severity score of 7.5 and impacts confidentiality without requiring privileges or user interaction.

A denial of service vulnerability exists in a2aproject a2a-go up to version 2.4.0 in the Cancel function of the Distributed Manager component. This vulnerability can be exploited remotely and leads to service disruption. Upgrading to version 2.5.0 resolves the issue.

An observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis before version 4.8 allows attackers to perform account footprinting. This vulnerability has a high severity with a CVSS score of 7.5 and impacts confidentiality but not integrity or availability.

CVE-2026-107590 is an out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding within the Qt 5 Compatibility APIs module. Under certain conditions, encoding text may write outside an internal buffer, potentially causing application crashes and impacting data integrity. The vulnerability affects Qt Core in Qt 5 and earlier versions. No specific affected versions or patches are provided. The CVSS 4.0 base score is 5.8, indicating a medium severity level.

CVE-2026-12887 is a path traversal vulnerability in Octopus Server that allows a user with permission to upload a malicious NuGet package to deploy a script step executing outside the intended directory. This could lead to unauthorized script execution beyond the parent directory boundaries. The vulnerability affects multiple versions of Octopus Server prior to fixed releases in 2026.1.674, 2026.2.973, and 2026.3.5839. The CVSS 4.0 score is 5.1, indicating a medium severity risk.

mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info tools. Attackers can embed $(), backticks or a closing double quote in an existing file or directory name to break out of the child_process.exec command string and execute commands as the MCP server user.

Codefriar sf-mcp versions up to 1.3.2 contain an OS command injection vulnerability. This flaw arises because the escapeValue() function does not properly neutralize shell metacharacters such as backticks and $() substitutions. As a result, crafted Salesforce CLI tool flag values can lead to arbitrary shell command execution with the privileges of the MCP server user. The vulnerability has a high severity score of 8.5 and affects all versions from 0 up to and including 1.3.2. A patch is available, and since this is a cloud service, the vendor manages remediation server-side.

CVE-2026-15586 is a vulnerability in İdvlabs Software and Consulting Services Inc.'s Ontime product that allows brute force attacks due to improper restriction of excessive authentication attempts. The vulnerability affects versions up to and including 2026-10-27. The vendor was contacted but did not respond to the disclosure. The CVSS score is 5.3, indicating a medium severity level.

Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 (Feature Release), 7.13.1.0 through 7.13.1.80 (LTS2024), 8.3.1.0 through 8.3.1.40 (LTS2025), and 8.6.1.0 through 8.6.1.20 (LTS2026) contain an improper access control vulnerability. This flaw allows an unauthenticated remote attacker to potentially cause a denial of service. The vulnerability does not impact confidentiality but can affect system availability. No public exploits or known active exploitation have been reported. The CVSS v3.1 base score is 6.5, indicating a medium severity level.

A denial of service vulnerability exists in svg-sanitizer versions from 0.5.3 up to but not including 1.1.0. The flaw occurs in the Sanitizer::sanitize() function, which repeatedly rescans the entire input while stripping PHP tags. This behavior allows unauthenticated attackers to craft SVG files containing many overlapping PHP tag openers and closers, causing excessive CPU usage and service disruption.

REDAXO versions prior to 5.21.0 have a reflected cross-site scripting (XSS) vulnerability in the backend packages API. The flaw arises because a function parameter is concatenated into an error message without proper HTML escaping. An attacker can exploit this by tricking an authenticated backend user into clicking a crafted link containing a valid CSRF token, leading to execution of malicious JavaScript that can perform same-origin actions or read DOM data.

REDAXO versions before 5.21.4 have a broken access control vulnerability that allows authenticated editors to modify slices in categories they are not authorized to access. By pairing a permitted article with a foreign slice ID, attackers can abuse content editing, deletion, and slice status or movement APIs to delete, toggle, move, or overwrite slices belonging to other editors.

REDAXO versions from 5.18.0 up to but not including 5.21.4 contain a stored cross-site scripting (XSS) vulnerability. This occurs because the rex_media_service component moves uploaded SVG files into the public media folder before sanitizing them. Authenticated users with mediapool upload rights can exploit a race condition or exhaust memory limits to leave malicious script-laden SVG files accessible, leading to script execution in victims' backend sessions.