Or Peles

**Name of the Vulnerable Software and Affected Versions** Bifrost HTTP transport versions prior to 2.0.0 **Description** An issue exists where the management API accepts custom plugins via an HTTP URL through the 'POST /api/plugins' endpoint when management authentication is disabled (default setting `governance.auth config.is enabled=false`). The shared-object loader downloads the remote object, writes it as a temporary `.so` file, and passes it to Go's `plugin.Open` function, which then executes the plugin's optional `Init()` function with the privileges of the Bifrost process user. On dynamically linked builds, this leads to unauthenticated remote code execution. On statically linked Docker images, the process results in server-side request forgery (SSRF), which is a vulnerability where the server is coerced into making unauthorized requests to internal or external resources. Successful remote code execution requires the plugin to match the host's Go version, operating system, CPU architecture, and linkage configuration. **Recommendations** Update Bifrost HTTP transport to version 2.0.0 or later. Enable management authentication by setting `governance.auth config.is enabled=true`. Restrict network access to the 'POST /api/plugins' endpoint.

**Name of the Vulnerable Software and Affected Versions** mcp-remote versions 0.0.5 through 0.1.15 **Description** mcp-remote, a local proxy server that allows MCP clients to interact with remote servers, is susceptible to OS command injection. The issue occurs during the OAuth handshake when the proxy requests metadata from a remote server. A malicious server can provide a crafted `authorization endpoint` response URL containing system commands. Due to improper sanitization, mcp-remote attempts to open this URL directly via the system shell, leading to arbitrary code execution on the client machine. On Windows, this allows full control over parameters, while on macOS and Linux, it enables the execution of arbitrary files with limited parameter control. The package had over 437,000 downloads. **Recommendations** Update to version 0.1.16 or later. Connect only to trusted MCP servers using secure connection methods such as HTTPS.

Name of the Vulnerable Software and Affected Versions: NVIDIA Nemo Framework (affected versions not specified) Description: The issue is related to a relative path traversal problem caused by arbitrary file write, which could lead to code execution and data tampering. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apache CouchDB versions prior to 3.3.3 IBM Cloudant versions prior to 8413 **Description** Design document functions that receive a user HTTP request object may expose authorization or session cookie headers of the user who accesses the document. These design document functions include `list`, `show`, `rewrite`, and `update`. An attacker can leak the session component using an HTML-like output, insert the session as an external resource, or store the credential in a local document with an `update` function. For the attack to succeed, the attacker must be able to insert the design documents into the database and then manipulate a user to access a function from that design document. **Recommendations** For Apache CouchDB versions prior to 3.3.3, upgrade to version 3.3.3 or later. For IBM Cloudant versions prior to 8413, upgrade to version 8413 or later. As a temporary workaround, consider avoiding the use of design documents from untrusted sources that may attempt to access or manipulate request object headers. Restrict access to the vulnerable design document functions `list`, `show`, `rewrite`, and `update` to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** ClickHouse (affected versions not specified) **Description** A heap out-of-bounds read issue exists in ClickHouse's LZ4 compression codec when parsing a malicious query. The `LZ4::decompressImpl()` loop reads a 16-bit unsigned user-supplied value (`offset`) from the compressed data. This `offset` is later used in the length of a copy operation without checking the lower bounds of the source of the copy operation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ClickHouse (affected versions not specified) **Description** A heap out-of-bounds read issue exists in ClickHouse's LZ4 compression codec when parsing a malicious query. The `LZ4::decompressImpl()` loop reads a 16-bit unsigned user-supplied value (`offset`) from the compressed data, which is later used in the length of a copy operation without checking the upper bounds of the source of the copy operation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Clickhouse (affected versions not specified) **Description** The issue is related to a divide-by-zero error in Clickhouse's Delta compression codec. This error occurs when parsing a malicious query, where the first byte of the compressed buffer is used in a modulo operation without being checked for 0. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Clickhouse (affected versions not specified) **Description** The issue is related to a divide-by-zero error in Clickhouse's DeltaDouble compression codec. This occurs when parsing a malicious query, where the first byte of the compressed buffer is used in a modulo operation without being checked for 0. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ClickHouse (affected versions not specified) **Description** The issue is related to a divide-by-zero error in ClickHouse's Gorilla compression codec. This occurs when parsing a malicious query, where the first byte of the compressed buffer is used in a modulo operation without being checked for 0. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ClickHouse (affected versions not specified) **Description** The issue is related to a heap buffer overflow in ClickHouse's LZ4 compression codec. This occurs when parsing a malicious query, as there is no verification that copy operations do not exceed the destination buffer's limits. Specifically, the arbitrary copy operation in the LZ4::decompressImpl loop can lead to this overflow. An attacker could potentially exploit this vulnerability to execute arbitrary code remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ClickHouse (affected versions not specified) **Description** The issue is related to a heap buffer overflow in ClickHouse's LZ4 compression codec. This occurs when parsing a malicious query, as there is no verification that copy operations in the LZ4::decompressImpl loop do not exceed the destination buffer's limits. The vulnerable copy operation is in a different wildCopy call, making it similar to a previously identified issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Axis IP Cameras (affected versions not specified) **Description** An issue was discovered that allows for a bypass of access control. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Axis IP Cameras (affected versions not specified) **Description** An issue was discovered in multiple models of Axis IP Cameras, where there is an exposed insecure interface. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Axis IP Cameras (affected versions not specified) **Description** An issue was discovered in multiple models of Axis IP Cameras, where there is Shell Command Injection. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ESRI ArcGis Runtime SDK versions prior to 10.2.6-2 for Android **Description** The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the improper passing of an attacker-controlled pointer to a native function. **Recommendations** For versions prior to 10.2.6-2, update to version 10.2.6-2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** PJSUA2 SDK versions prior to SVN Changeset 51322 for Android **Description** The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This method improperly passes an attacker-controlled pointer to a native function, potentially leading to code execution. **Recommendations** For versions prior to SVN Changeset 51322, update to a version that includes the fix for this issue to prevent potential code execution attacks.

**Name of the Vulnerable Software and Affected Versions** GraceNote GNSDK SDK versions prior to SVN Changeset 1.1.7 **Description** The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This method improperly passes an attacker-controlled pointer to a native function. **Recommendations** For versions prior to SVN Changeset 1.1.7, update to a version that includes the fix for this issue.

**Name of the Vulnerable Software and Affected Versions** MyScript SDK versions prior to 1.3 for Android **Description** The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the class improperly passing an attacker-controlled pointer to a native function. **Recommendations** For MyScript SDK versions prior to 1.3 for Android, update to version 1.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** MetaIO SDK versions prior to 6.0.2.1 **Description** The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the class improperly passing an attacker-controlled pointer to a native function. **Recommendations** For versions prior to 6.0.2.1, update to version 6.0.2.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Jumio SDK versions prior to 1.5.0 for Android **Description** The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is done by improperly passing an attacker-controlled pointer to a native function. **Recommendations** For versions prior to 1.5.0, update to version 1.5.0 or later to resolve the issue.