Apostrophe Technologies ApostropheCMS Resource Management Vulnerability

Apostrophe Technologies' ApostropheCMS has a resource management vulnerability. This vulnerability arises because authenticated importers can submit archived files whose number of decompressed bytes, number of entries, and size are not restricted before document type authorization. Failure in...

Oracle Autonomous Health Framework security vulnerabilities

A security vulnerability exists in Oracle Autonomous Health Framework versions 26.3 through 26.8. This vulnerability stems from issues within the Trace File Analyzer component and may allow low-privilege attackers to log in and execute infrastructure tasks. They could gain unauthorized access to...

Apostrophe Technologies ApostropheCMS Path Traversal Vulnerability

Apostrophe Technologies ApostropheCMS has a path traversal vulnerability. This vulnerability arises when the paths controlled by attackers reach the local backend, including segments of the parent directory. This allows for the escape of the configured upload directory, leading to path traversal...

Arizu Fast Tunnel permission permissions and access control issues

Arizu Fast Tunnel 1.0.0 version has a security vulnerability. This vulnerability stems from the improper handling of the pluginfile parameter in the ZipArchive::extractTo function within the Plugin Installer component. It may lead to unlimited file uploads...

Apple macOS numerical error vulnerability

Apple macOS versions prior to Golden Gate 27, Apple macOS Sequoia 15.8, and Apple macOS Tahoe 26.7 have security vulnerabilities. These vulnerabilities stem from integer underflow, which may lead to unexpected system termination when attackers control network file servers...

ArmorX Global ArmorX Spam Code Injection Vulnerability

The ArmorX Global ArmorX versions prior to 8.15.2-3.282.133-1.90.061 have a code injection vulnerability. This vulnerability stems from path traversal, causing the application to contain PHP files that are outside of the expected directories. This may lead to local file inclusion...

Optimal IdM OptimalCloud: Input validation error vulnerability

The Optimal IdM OptimalCloud 5.0 version has a vulnerability related to input validation errors. This vulnerability stems from improper handling of the state parameter in the file/v5.0/social, which may lead to open redirection. Attackers can trigger this remotely...

Eosphoros DB-GPT Trust Management Vulnerabilities

eosphoros DB-GPT versions 0.8.2 and earlier have a trust management vulnerability. This vulnerability stems from hard-coded credentials in the default docker-compose.yml file. A static MYSQLROOTPASSWORD is set, and port 3306 is exposed on all interfaces. An attacker can authenticate as root@% and...

TYPO3 Fluid-Form: Encryption issue vulnerability due to coding.ms

TYPO3 Fluid-Form: Versions from 6.0.0 to 6.0.6 and before, as well as 5.0.10, have security vulnerabilities. These vulnerabilities stem from the use of a predictable token in the download link for uploading files via forms. Additionally, the filename in the request does not undergo anti-guessing...

Finsys Dockhand authorization issue vulnerability

Finsys Dockhand versions prior to 1.0.46 have an authorization vulnerability. This vulnerability arises because non-administrator users with the stacks:edit permission can use the /api/system/files/content path parameter to provide absolute paths for file reading, potentially leading to the...

tox-dev filelock: Processing logic error vulnerability

The tox-dev filelock version 4.1.0 to 4.2.1 contained a processing logic vulnerability. This vulnerability stemmed from the SoftFileLock component reusing outdated observation results when at least two lock user processes were waiting. An attacker could set and delete their own markers, and use...

WordPress Aspose Doc Exporter path traversal vulnerability

Versions of Aspose Doc Exporter 2.0 prior to version 2.0 contain a path traversal vulnerability. This vulnerability arises from the lack of cleaning the path passed to the readfile function. Unauthenticated attackers can download arbitrary files by sending a GET request with the file parameter...

DrayTek Vigor2960: Permissions, licensing, and access control issues

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a security vulnerability. This vulnerability stems from improper handling of parameters uploadpath/uploadname in the commonupload component of the file/cgi-bin/mainfunction.cgi. It could allow remote attackers to upload files without restrictions...

uTox path traversal vulnerability

uTox versions 0.18.1 and earlier contain a path traversal vulnerability. This vulnerability arises from path traversal, allowing attackers to write arbitrary files by sending absolute paths or ../ filenames when the victim enables auto-accepting connections. This can overwrite shell startup files...

Apache Cocoon information disclosure vulnerability

All versions of Apache Cocoon are affected by an information disclosure vulnerability. This vulnerability arises when sensitive system information is exposed to unauthorized control domains. Unauthenticated attackers can access the diagnostic interface, triggering caching mechanisms and resulting...

DokuWiki.org DokuWiki deserialization injection vulnerability

DokuWiki.org: Versions prior to DokuWiki 2026-07-14c contained a deserialization injection vulnerability. This vulnerability stemmed from the use of Draft::getDraftText, which passed the content of the draft file to unserialize, without restricting the classes allowed. Authentication users with...

Vite launch-editor command injection vulnerability

Vite launch-editor has a command injection vulnerability. This vulnerability arises when an attacker can create file system entries in the working directory that start with a plus sign or minus sign. In such cases, launch-editor does not enforce the path as a positional file name. As a result, th...

Python Packaging Authority virtualenv path traversal vulnerability

The Python Packaging Authority identifies a path traversal vulnerability in virtualenv versions prior to 21.14.9. This vulnerability arises because PipInstall.uninstallpreviousversion accepts metadata from existing seed packages. Additionally, uninstalldist fails to verify whether entries within...

Oracle Autonomous Health Framework security vulnerabilities

A security vulnerability exists in Oracle Autonomous Health Framework versions 26.3 through 26.8. This vulnerability stems from issues within the Trace File Analyzer component and may allow low-privilege attackers to log in, execute infrastructure tasks, and take control of Oracle Autonomous Heal...

TYPO3 File Manager SQL Injection Vulnerability

Versions of the TYPO3 File Manager prior to 3.1.3 have a SQL injection vulnerability. This vulnerability arises from the file search function, which escapes LIKE wildcards only when constructing database query conditions, but does not escape quotes. Attackers can alter the database queries with...