IBM MQ versions 9.4.0.0 through 9.4.0.26, 9.4.1.0 through 9.4.5.3, and 10.0.0.1 through 10.0.0.5 contain a vulnerability where improper validation of message header structure length fields could allow an authenticated attacker to obtain sensitive information or cause a denial of service.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD contain a vulnerability that allows an authenticated attacker to execute arbitrary code by injecting malicious environment variables through transfer request metadata.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD are vulnerable to an XML external entity (XXE) injection vulnerability. This flaw allows a remote attacker with limited privileges to exploit XML processing to expose sensitive information or cause memory resource consumption. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity. No public exploits or known exploitation in the wild have been reported. Patch status is not confirmed as no patch or remediation details are provided.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD contain a vulnerability that allows an authenticated user with command queue access to execute arbitrary code by injecting malicious arguments into Ant script commands. This vulnerability is tracked as CVE-2026-12356 and has a CVSS v3.1 base score of 7.5, indicating high severity.
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a vulnerability that allows a remote attacker to perform an out-of-bounds read, potentially exposing sensitive information. The flaw is identified as CWE-125 and has a medium severity rating with a CVSS score of 5.3. No public exploits or known active exploitation have been reported. No patch or remediation information is currently available.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD contain a vulnerability that allows a remote authenticated attacker to cause denial of service and limited memory corruption due to an integer overflow.
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a use-after-free vulnerability that could allow a remote attacker to execute arbitrary code. This vulnerability is critical with a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a path traversal vulnerability that allows a remote authenticated attacker to read arbitrary files from the local filesystem. This vulnerability could expose sensitive information stored on the affected system.
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD contain a vulnerability that allows an authenticated attacker to obtain sensitive information or cause a denial of service. This is due to improper validation of message selection parameters.
Powerlevel10k versions prior to 1.20.19 have a symlink following vulnerability in the _p9k_dump_instant_prompt function. This flaw allows local attackers to overwrite files writable by the victim by creating symlinks in a predictable temporary file path. The attack requires guessing the victim's shell process ID to pre-plant symlinks named p10k-instant-prompt-output-<user>-<pid> in the TMPDIR directory, causing the shell startup to truncate and overwrite the targeted files.
Mistral Vibe versions before 3.0.3 have a remote code execution vulnerability. This flaw allows attackers to execute arbitrary commands by exploiting the repository-configured gpg.program during project context collection. Specifically, a crafted repository setting for gpg.program combined with log.showSignature and a signed commit causes git log to run the attacker's program at session start, before any trust prompt appears.
Powerlevel10k versions before 1.20.19 have a vulnerability in the bundled gitstatus/install script where an insecure temporary directory is reused if mktemp fails. Local attackers can exploit this by pre-creating a predictable temporary directory named gitstatus-install.tmp, allowing them to replace the extracted gitstatusd binary. This malicious binary then executes with the victim's privileges, potentially leading to privilege escalation.
blueprintUE Self-Hosted Edition versions before 4.3.3 have an account enumeration vulnerability in the ForgotPasswordMiddleware.php component. This flaw allows unauthenticated attackers to determine whether an email address is registered by observing differences in password reset redirect behavior. The vulnerability is exacerbated by the lack of rate limiting on failed lookup attempts, enabling unlimited enumeration.
Trawl versions from 1.5.0 up to but not including 1.10.0 have a server-side request forgery (SSRF) vulnerability. This flaw allows unauthenticated attackers to bypass the MCP outbound URL policy by using IPv4-mapped IPv6 addresses. Attackers can supply hex-normalized addresses or use redirects to access internal resources such as loopback, private networks, and cloud metadata services, potentially reading sensitive responses.
BlueprintUE Self-Hosted Edition versions from 4.2.0 up to but not including 4.3.4 have a login rate limit bypass vulnerability. The flaw exists because the login middleware keys failed-login counters on case-sensitive usernames, while the underlying MySQL lookups are case-insensitive. This mismatch allows unauthenticated attackers to bypass per-account lockout by varying username casing and thus gain additional brute-force attempts.
Mistral Vibe versions before 2.25.7 have a remote code execution vulnerability. This flaw allows attackers to execute arbitrary commands by configuring malicious Git clean or process filter drivers in a repository. When a user opens such a crafted repository, the application runs git status at startup, triggering the malicious filters and executing commands with the user's privileges before any trust prompt appears.
WebVirtCloud contains a missing authorization vulnerability in certain API endpoints due to lack of permission declarations. This allows low-privileged authenticated users to access migration and instance creation functions without proper restrictions, potentially enabling unauthorized migration or undefinition of other users' virtual machines and creation of volumes and domains on any compute host.
jsondiffpatch versions before 0.7.7 have a cross-site scripting (XSS) vulnerability. This flaw allows attackers to inject malicious markup by providing an unescaped array-move destination index in a delta. If an attacker controls the delta passed to the formatters.html.format() or formatters.annotated.format() functions, they can embed scripts that execute in the context of the application's origin when the output is rendered.
FrankenPHP versions before 1.13.4 have an information disclosure vulnerability in worker mode. The vulnerability arises because HTTP stream response headers are not cleared between requests, allowing subsequent requests on the same worker thread to access headers from previous requests. This can expose sensitive headers such as Set-Cookie or tokens from backend APIs to other users.
CESNET ipfixcol2 versions 2.7.1 up to but not including 2.9.0 contain a memory allocation vulnerability in the Lz4Decoder::read_start_header() function. This flaw allows unauthenticated attackers to exhaust server memory by sending TCP connections with LZ4 start headers that declare very large ring buffer sizes, potentially forcing allocations up to 4 GiB per connection. The vulnerability can lead to denial of service by exhausting collector service resources.