ROS-20260921-73-0104

The vulnerability of the 389 Directory Server catalog service server is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

389 Directory Server Memory Exhaustion DoS

The vulnerability of the 389 Directory Server catalog service server lies in the provision of unlimited memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

org.apache.polaris:polaris-admin (>=1.0.0-incubating, <=1.4.0), org.apache.polaris:polaris-api-catalog-service (>=1.0.0-incubating, <=1.4.0) +23 more potentially affected by CVE-2026-42810 via org.apache.polaris:polaris-core (>=1.0.0-incubating, <=1.4.0)

org.apache.polaris:polaris-core MAVEN version =1.0.0-incubating, =1.0.0-incubating, =1.0.0-incubating, =1.0.0-incubating, =1.0.0-incubating, =1.0.0-incubating, =1.3.0-incubating, =1.3.0-incubating, =1.1.0-incubating, =1.1.0-incubating, =1.0.0-incubating, =1.0.0-incubating, =1.4.0 and more Source...

org.apache.polaris:polaris-admin (>=1.0.0-incubating, <=1.4.0), org.apache.polaris:polaris-api-catalog-service (>=1.0.0-incubating, <=1.4.0) +23 more potentially affected by CVE-2026-42810 via org.apache.polaris:polaris-core (>=1.0.0-incubating, <=1.4.0)

org.apache.polaris:polaris-core MAVEN version =1.0.0-incubating, =1.0.0-incubating, =1.0.0-incubating, =1.0.0-incubating, =1.0.0-incubating, =1.0.0-incubating, =1.3.0-incubating, =1.3.0-incubating, =1.1.0-incubating, =1.1.0-incubating, =1.0.0-incubating, =1.0.0-incubating, =1.4.0 and more Source...

org.apache.polaris:polaris-admin (>=1.0.1-incubating, <=1.4.0), org.apache.polaris:polaris-api-catalog-service (>=1.0.1-incubating, <=1.4.0) +23 more potentially affected by CVE-2026-42812 via org.apache.polaris:polaris-core (>=1.0.1-incubating, <=1.4.0)

org.apache.polaris:polaris-core MAVEN version =1.0.1-incubating, =1.0.1-incubating, =1.0.1-incubating, =1.0.1-incubating, =1.0.1-incubating, =1.0.1-incubating, =1.3.0-incubating, =1.3.0-incubating, =1.1.0-incubating, =1.1.0-incubating, =1.0.1-incubating, =1.0.1-incubating, =1.4.0 and more Source...

Active Directory catalog service Code Execution

The vulnerability of the Active Directory catalog service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

EUVD-2026-22138

Due to a Cross-Site Scripting XSS vulnerability in the SAP Supplier Relationship Management SICF Handler in SRM Catalog, an unauthenticated attacker could craft a malicious URL, that if accessed by a victim, results in execution of malicious content within the victim's browser. This could allow t...

CVE-2025-14262

A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other users as if there were saved by the job owner. The attacker must have permissions to access the jobs but then they were saved into the catalog service using the wrong owner...

CVE-2025-14262 Jobs can be saved as workflows with wrong permissions on KNIME Business Hub

A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other users as if there were saved by the job owner. The attacker must have permissions to access the jobs but then they were saved into the catalog service using the wrong owner...

CVE-2025-14262

KNIME Business Hub vulnerability CVE-2025-14262 affects KNIME Business Hub prior to 1.17.0. A wrong permission check allowed an authenticated user to save another user’s jobs as if owned by the job owner, potentially enabling saves into spaces where the attacker lacked write permissions. The atta...

CVE-2025-14262 Jobs can be saved as workflows with wrong permissions on KNIME Business Hub

A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other users as if there were saved by the job owner. The attacker must have permissions to access the jobs but then they were saved into the catalog service using the wrong owner...

EUVD-2025-201697

A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other users as if there were saved by the job owner. The attacker must have permissions to access the jobs but then they were saved into the catalog service using the wrong owner...

CVE-2025-14262: Incorrect Ownership Assignment

A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other users as if there were saved by the job owner. The attacker must have permissions to access the jobs but then they were saved into the catalog service using the wrong owner...

389 Directory Server Information Disclosure

The vulnerability of the 389 Directory Server catalog service service server is related to the disclosure of information. Exploiting this vulnerability allows an attacker to access confidential data...

389 Directory Server DoS

The vulnerability of the 389 Directory Server catalog service server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

389 Directory Server DoS

The vulnerability of the 389 Directory Server catalog service server is related to incorrect handling of missing values. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Security Bulletin: IBM Fusion Data Catalog Service is vulnerable to elevated container linux kernel privileges (CVE-2022-0185)

Summary IBM Fusion's Data Catalog Service containers previously required certain elevated linux kernel privileges. CVE-2022-0185. Vulnerability Details CVEID:CVE-2022-0185 DESCRIPTION: A heap-based buffer overflow flaw was found in the way the legacyparseparam function in the Filesystem Context...

DR Restore - Internal error occurred: Could not retrieve artifacts for prefix

Challenge A Veeam Kasten for Kubernetes DR Restore fails with the following error: Internal error occurred: "message":"Could not retrieve artifacts for prefix...

389 Directory Server Resource Leak DoS

The vulnerability of the 389 Directory Server catalog service server is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failures...

VulnCheck KEV: CVE-2018-6055

Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted HTML page...