Apache Traffic Server input validation error vulnerability

A input validation error vulnerability exists in Apache Traffic Server versions 8.0.0 through 8.1.11, 9.0.0 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0. This vulnerability arises when a client sends a POST request containing Expect: 100-continue, and the source server responds before readin...

Vyper buffer error vulnerability

Vyper versions prior to 0.2.9 contain a buffer error vulnerability. This vulnerability arises because the forwarder proxy deployed via the built-in createforwarderto function reports a fixed value of 4096 bytes for RETURNDATASIZE instead of the actual size of returned data. When the function...

Splunk SOAR processing logic error vulnerability

Versions of Splunk SOAR prior to 8.7.0 contain a logic error vulnerability stemming from a failure in protection mechanisms...

ekko-studio input validation error vulnerability

Versions 1.0.6 and earlier of ekko-studio contain an input validation error vulnerability. This vulnerability stems from improper handling of the outputpath parameter in the saveGeneratedImages function within the Media Generation API component, specifically in the file...

WSO2 API Manager input validation error vulnerability

Versions 4.1.0 through 4.1.0.153, 4.2.0 through 4.2.0.105, and 4.3.0 through 4.3.0.20 of WSO2 API Manager contain an input validation error vulnerability. This vulnerability arises because the callback URL parameter fails to validate user-supplied inputs; it may be exploited by malicious actors t...

Apache Traffic Server resource management error vulnerability

Versions 8.1.11, 9.2.5 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0 of Apache Traffic Server contain a resource management error vulnerability. This vulnerability arises when proxy.config.http.dropchunkedtrailers is enabled; the service then waits for the dropped trailing bytes, causing...

VyperLang Vyper Processing Logic Vulnerability

VyperLang Vyper 0.1.0b10 to 0.2.3 versions have a processing logic error. This bug stems from incorrect code generated by return statements within for loops in internal functions that call other functions at least two levels deep. This results in invalid jump targets stack underflow, causing...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.21.0 have a resource management error vulnerability. This vulnerability allows attackers to create PDFs that cause excessive memory usage or prolonged processing times when the application retrieves document form fields...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.20.0 have a resource management error vulnerability. This vulnerability arises when accessing a specially crafted PDF stream that contains a large number of filters or multiple filters and transmits a large amount of data, potentially leading to excessive memory...

Cisco Emergency Responder: Input validation error vulnerability

Cisco Emergency Responder versions 14, 14SU1, 14SU2, 14SU3, 14SU3a, 15, 15SU1, 15SU1a, 14SU4, 15SU2, 15SU3, 14SU5, 15SU4, and 14SU6 have a vulnerability related to input validation errors. This vulnerability arises from improper input validation, which may allow attackers to exploit custom inputs...

Michelle Tilley TOML Parser for Node.js resource management error vulnerability

Versions prior to 5.0.1 of the Michelle Tilley TOML Parser for Node.js contain a resource management error vulnerability. This vulnerability arises because toml.parse passes unbounded sequences of hexadecimal, octal, binary, and decimal digits from lib/parser.js to BigInt before performing checks...

Cisco Open Source Snort3 buffer error vulnerability

Cisco Open Source Snort3 contains a buffer error vulnerability. This vulnerability stems from the lack of error checking in the Snort 3 SMTP MIME Decoder when parsing the SMTP header’s MIME field. As a result, unauthenticated remote attackers can send specially crafted SMTP packets over an...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability stems from heap reuse after heap deallocation in the RTMP protocol component. Remote attackers can send specially crafted Abort control messages without authentication, causing the bRPC...

Cisco Emergency Responder: Input validation error vulnerability

Cisco Emergency Responder has a vulnerability related to input validation errors. This vulnerability stems from improper control of resource lifecycle, which may lead to injection attacks...

Splunk Enterprise input validation error vulnerability

Versions prior to Splunk Enterprise 10.4.4 10.4.x, prior to version 10.2.8 10.2.x, prior to version 10.0.11 10.0.x, and prior to version 9.4.16 9.4.x contain an input validation error vulnerability. This vulnerability stems from improper handling of input data...

Apache Traffic Server has a vulnerability related to input validation errors.

The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation error vulnerability. This vulnerability arises from the forwarding of302 responses that should be treated as resolution errors. Additionally, the Transfer-Encoding: chunked...

Coraza - Web Application Firewall: Input validation error vulnerability

Coraza – Web Application Firewall versions 3.0.0 to 3.8.1 had a vulnerability related to input validation errors. This vulnerability arose when the JSON flattened nested properties into dot-separated ARGSPOST names without escaping the literal dots. This led to conflicts between different...

Electron buffer error vulnerability

Versions of Electron prior to 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9 contain a buffer error vulnerability. This vulnerability arises from the main process failing to properly verify the webContents.beginFrameSubscription frame data received from the GPU process. An attacker who gains code...

vLLM processing logic error vulnerability

Versions of vLLM prior to 0.31.0 contain a logic error vulnerability. This vulnerability stems from a cross-request mask leakage in InputBatch.condense, where an outdated line of allowedtokenids remains. Attackers can submit concurrent requests via unauthenticated /invocations, causing the recycl...

gitpython-developers GitPython processing logic error vulnerability

GitPython developers: Versions prior to 3.2.1 contain a logic error vulnerability. This vulnerability arises because createsubmodule accepts submodule paths influenced by attackers—such as .git/hooks—and calls clonerepo before performing a secure target rejection. This could allow the insertion o...