CVE Vulnerability Advisory Database

[Affected Scope] FFmpeg versions 2.1 through 9.0.2 containing the PCX image decoder

[Impact] Attackers can leak sensitive heap memory contents into visible decoded pixels by crafting truncated PCX images

[Mitigation] Apply the official FFmpeg patch commit or upgrade to a non-vulnerable release version

[Affected Scope] FFmpeg versions 2.0 through 9.0.2 containing the Go2Meeting (G2M) decoder

[Impact] Attackers can leak sensitive stack memory, including pointers and stack guards, by triggering out-of-range palette index copies

[Mitigation] Upgrade to a patched version of FFmpeg or disable the vulnerable G2M decoder during compilation

[Affected Scope] PostyBirb Plus versions up to and including 3.1.75

[Impact] Remote attackers can inject malicious scripts via the Submission Description Editor, leading to arbitrary code execution in the user's browser context

[Mitigation] Immediately upgrade to version 3.1.76 or later to apply the official security patch

[Affected Scope] Perl XS::libbrotli modules before version 1.2.1.0 and dependent XS modules statically linked against them

[Impact] Memory corruption, process crash, information disclosure, or potential Remote Code Execution (RCE) via crafted Brotli streams

[Mitigation] Upgrade XS::libbrotli to version 1.2.1.0 or later, and rebuild all dependent Perl XS modules

[Affected Scope] Java-based applications and services utilizing Apache Thrift versions prior to 0.24.0

[Impact] Processing maliciously crafted nested messages can trigger a Stack Overflow, leading to an unrecoverable JVM crash and Denial of Service (DoS)

[Mitigation] Immediately upgrade the Apache Thrift Java library dependency to version 0.24.0 or later

[Affected Scope] Inactive Apache MINA 3.0.0 branch and applications utilizing its codec module

[Impact] Unrestricted Remote Code Execution (RCE) via gadget chains due to unfiltered deserialization of frame bytes from untrusted peers

[Mitigation] Decommission the unsupported 3.0.0 branch and migrate to the actively maintained Apache MINA 2.2.X branch

[Affected Scope] Microsoft Visual Studio product suites

[Impact] An unauthorized network attacker can perform Man-in-the-Middle (MitM) spoofing attacks to intercept sensitive data or spoof trusted endpoints

[Mitigation] Apply the latest security updates via the Microsoft Security Update Guide

[Affected Scope] WebDyne versions from 2.014 before 3.022 for Perl

[Impact] Remote attackers can execute arbitrary scripts in the context of the victim's browser session, leading to session hijacking or credential theft

[Mitigation] Upgrade the WebDyne module to version 3.022 or later immediately

[Affected Scope] WebDyne Perl module versions from 2.014 before 3.022

[Impact] Session cookies lack Secure, HttpOnly, and SameSite attributes, enabling session hijacking via network sniffing, XSS, or CSRF attacks

[Mitigation] Immediately upgrade the WebDyne module to version 3.022 or later

[Affected Scope] Applications and systems utilizing the GNOME json-glib library to evaluate user-controlled JSONPath queries via json_path_query()

[Impact] An attacker can trigger an infinite loop by supplying a JSONPath slice expression with a negative step, leading to 100% CPU utilization and a complete Denial of Service (DoS)

[Mitigation] Upgrade the json-glib package to the latest patched version, or implement input validation to reject JSONPath expressions containing negative slice steps

[Affected Scope] All Node.js environments running Aedes MQTT broker versions prior to 1.1.1.

[Impact] An attacker can trigger an uncaught exception by sending messages with excessively deep topic structures, leading to a complete broker crash.

[Mitigation] Immediately update the Aedes package to version 1.1.1 or higher.

[Affected Scope] Rust applications utilizing sevenz-rust2 library versions prior to 0.21.1.

[Impact] Extraction of a malicious 7z archive can lead to writing or overwriting files outside the intended directory, potentially resulting in Remote Code Execution (RCE).

[Mitigation] Immediately upgrade sevenz-rust2 dependency to version 0.21.1 or later.

[Affected Scope] All web servers, browsers, Node.js environments, and backend applications using Google Brotli library versions 1.0.3 through 1.2.0

[Impact] Remote unauthenticated attackers can corrupt decoder state memory via crafted compressed streams, leading to sensitive data disclosure, DoS, or Remote Code Execution (RCE)

[Mitigation] Immediately update Brotli libraries and dependent packages to the latest secure versions (1.0.10, 1.1.1, 1.2.1 or higher)

[Affected Scope] GitLab CE/EE versions 19.2 (< 19.2.8), 19.3 (< 19.3.5), and 19.4 (< 19.4.2)

[Impact] Unauthenticated attackers can execute arbitrary code on the GitLab server via crafted CI/CD configurations, leading to full system compromise

[Mitigation] Immediate upgrade to patched versions 19.2.8, 19.3.5, or 19.4.2 is mandatory

[Affected Scope] GitLab CE/EE versions from 18.7 through 19.3.1.

[Impact] Unauthenticated remote attackers can read arbitrary files from the server, potentially leading to full system compromise and credential theft.

[Mitigation] Immediate upgrade to patched versions: 18.11.12, 19.0.9, 19.1.8, 19.2.6, or 19.3.2.

[Affected Scope] JFrog Artifactory Self-Managed instances running under default configurations

[Impact] Unauthenticated network-facing attackers can bypass authentication mechanisms to obtain full administrative privileges

[Mitigation] Immediately upgrade to the latest patched version recommended by JFrog and restrict network access to the instance

[Affected Scope] Gitea versions prior to 1.27.1

[Impact] Unauthenticated remote attackers can install malicious Git hooks via the diffpatch API, leading to arbitrary system command execution with Gitea server privileges.

[Mitigation] Immediately upgrade Gitea instances to version 1.27.1 or later, and disable Git Hook functionality in the configuration.

[Affected Scope] All JFrog Artifactory Self-Managed instances

[Impact] Unauthenticated attackers can obtain internal anonymous tokens even when anonymous access is disabled, leading to unauthorized access to sensitive artifacts

[Mitigation] Immediate upgrade to the latest patched version and verification of security configurations

[Affected Scope] JFrog Artifactory Self-Managed instances under specific remote-repository conditions

[Impact] An authenticated attacker can write data outside the intended Docker cache path, potentially compromising system integrity

[Mitigation] Immediately upgrade JFrog Artifactory to the latest patched version and restrict untrusted remote repository configurations

[Affected Scope] JFrog Artifactory Self-Hosted versions prior to 7.133.11

[Impact] Low-privileged users can escalate to administrative privileges by exploiting insufficient token scope validation, leading to full system compromise

[Mitigation] Immediately upgrade to version 7.133.11 or later and conduct a comprehensive audit of all existing access tokens