Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
680533 source statements · aliases may refer to the same vulnerabilitySecurity Hardening in Splunk Enterprise - October 2026
cve-program ·
Vendor product: Splunk Enterprise
Improper Neutralization in Splunk SOAR
cve-program ·
Vendor product: Splunk SOAR
An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded campaign archive, the application copies the bundled asset files into a publicly accessible media directory without res…
cve-program ·
https://packagist.org: mautic/core
A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic. The sandbox introduced to restrict user-uploaded theme templates (the fix for GHSA-9fx4-7cmj-47vg) does not fully enforce its restrictions,…
cve-program ·
https://packagist.org: mautic/core
An insecure deserialization (PHP object injection) vulnerability exists in Mautic's handling of segment filters and custom field properties. Several code paths that read these stored values from the database deserialize them without restric…
cve-program ·
https://packagist.org: mautic/core
A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface (/s/ajax). A request parameter that selects the contact field to search by is not properly validated before it is used in a databa…
cve-program ·
https://packagist.org: mautic/core
An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data/{type}). Chart filter parameters supplied by the client are not properly validated before they are used in the database queries that build dashboard …
cve-program ·
https://packagist.org: mautic/core
A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7. Values of HTML-type custom contact fields are rendered without output sanitization. A user or integration able to write a value to such a field…
cve-program ·
https://packagist.org: mautic/core
A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through the API, the supplied file path is not restricted to the asset upload directory. An authenticated API user with permission to create assets c…
cve-program ·
https://packagist.org: mautic/core
A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}). The endpoint did not enforce permissions for several internal tables: an intended administrator-only restriction was never applied, and tables withou…
cve-program ·
https://packagist.org: mautic/core
An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic. After a form is submitted, the application redirects the visitor to a return address supplied with the submission without verifying that …
cve-program ·
https://packagist.org: mautic/core
Unauthenticated RCE Vulnerability in WolfProt interface implementation
cve-program ·
Vendor product: Cynap Pure (Next Gen), Cynap Bridge · Vendor product: Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro · Vendor product: Cynap Videobar, Firmware Version
HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
Chunk extensions accept bare LF and CR, enabling request smuggling in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
Quadratic bignum parsing of Content-Length and Host port values in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney
cve-program ·
https://repo.hex.pm: hackney · https://github.com: benoitc/hackney
Unbounded response body buffering and decompression in hackney
cve-program ·
https://repo.hex.pm: hackney · https://github.com: benoitc/hackney
Insufficient length validation when parsing Zoom chat transcriptions
cve-program ·
Vendor product: Mattermost
TOCTOU Race Condition in boneIO
cve-program ·
https://pypi.python.org: boneio
Incorrect Permission Assignment for Critical Resource in boneIO
cve-program ·
Vendor product: black_debian_images
Missing Authentication for Critical Function in boneIO
cve-program ·
https://pypi.python.org: boneio
Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token Cache
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.camel:camel-oauth
Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Default Parser Settings, so an External Entity Declared in That Body Was Resolved
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.camel:camel-saxon
OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE
cve-program ·
Vendor product: OpenHands Software Agent SDK
Apache Vysper: Authorization bypass
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.vysper:vysper
DeepSeek Harness sandbox.ts createContext
cve-program ·
Vendor product: Harness
Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions
cve-program ·
https://access.redhat.com/downloads/content/package-browser/: Red Hat JBoss Enterprise Application Platform 7.4.25 · https://access.redhat.com/downloads/content/package-browser/: eap7-activemq-artemis · https://access.redhat.com/downloads/content/package-browser/: eap7-glassfish-jsf
Picketlink-federation: auth bypass in picketlink saml unsolicited-response
cve-program ·
https://access.redhat.com/downloads/content/package-browser/: Red Hat JBoss Enterprise Application Platform 7.4.25 · https://access.redhat.com/downloads/content/package-browser/: eap7-activemq-artemis · https://access.redhat.com/downloads/content/package-browser/: eap7-glassfish-jsf
GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()
cve-program ·
Vendor product: GitPython
WordPress Dental Care CPT plugin < 21.6 - PHP Object Injection vulnerability
cve-program ·
https://wordpress.org/plugins: dentalcare-cpt
MoviePilot 3.1.5 Command Injection via ExecuteCommandTool
cve-program ·
Vendor product: MoviePilot
Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets
cve-program ·
Vendor product: renovate · Vendor product: renovate-ce · Vendor product: renovate-ee-server
Nodemailer before 10.0.13 Improper Input Validation via Angle-Bracket Address Comments
cve-program ·
Vendor product: nodemailer
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.