Koozali SME Server has a vulnerability related to input validation errors.

The Koozali SME Server version 11.0rc1-215 has a security vulnerability. This vulnerability stems from the domain creation feature, which allows high-privilege attackers to inject reserved Apache configuration directives, damaging the httpd.conf file. As a result, Apache cannot be started after t...

MISP input validation error vulnerability

Versions of MISP 2.5.48 and earlier contain a vulnerability related to input validation errors. This vulnerability arises from the remote event preview feature improperly validating tag value colors before directly writing them into inline CSS style properties. This can lead to arbitrary CSS...

Viraj Potdar Criminal Management System: Input validation error vulnerability

The Viraj Potdar Criminal Management System has a security vulnerability. This vulnerability stems from incorrect handling of parameters such as id/name/offName/crime/dob/arrDate/crimeDate/sex/address/folder/more in the Submission Form component’s file home.php. This could lead to SQL injection...

Yamaha VOCALOID6 Editor has a vulnerability in input validation.

Yamaha VOCALOID6 Editor 6.13.2 and earlier versions have a vulnerability in input validation. This vulnerability stems from improper restrictions on XML external entity references. Loading specially crafted project files may lead to unexpected communications, resulting in the exposure of sensitiv...

Apache Camel input validation vulnerability

Versions of Apache Camel prior to 4.18.5, specifically 4.0.0 and 4.22.1 prior to 4.19.0, have a vulnerability related to input validation errors. This vulnerability arises from the Saga processor using a Long-Running-Action header without the Camel prefix to determine which saga the exchange...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.7.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper restrictions on external entities by the camel-smooks component. The default XML parser allows for the parsing of external...

Sunkaifei FlyCms input validation error vulnerability

Sunkaifei FlyCms has a vulnerability in input validation. This vulnerability stems from the batch assignment issue in the /ucenter/accountupdate interface. It allows authenticated users to submit additional User Bean fields to override protected account columns. This may result in changes such as...

Docling Project: "docling-core" input validation error vulnerability

The Docling Project’s docling-core 2.102.0 and earlier versions have a vulnerability in input validation. This vulnerability stems from the fact that the ImageRef URI accepts pure file system paths and bypasses the allowimagefileuri restriction. Attackers can exploit this vulnerability by...

Element X iOS Input Validation Vulnerability

Element X iOS versions prior to 26.05.0 have a vulnerability in input validation. This vulnerability arises from failing to check the URL allowlist when parsing io.element.call://. It may allow attackers to trick users into opening a specially crafted URL, causing the WKWebView in the call...

Apache Camel input validation vulnerability

Versions of Apache Camel Netty HTTP from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability arises due to the camel-netty-http security constraint using case-sensitive matching when comparing the request path with the configure...

Hono input validation vulnerability

Versions of Hono from 4.12.4 to 4.13.11 had a vulnerability in input validation. This vulnerability stemmed from serveStatic’s secondary decoding of routing request paths before file system lookup. As a result, malformed percent-encoded paths bypassed the protection provided by upstream middlewar...

Progressive Robot hMailServer input validation vulnerability

The Progressive Robot hMailServer version 6.0.0 to 6.3.6 has a vulnerability related to input validation. This vulnerability arises from insufficient validation of the X-hMailServer-LoopCount header, where symbolic conversions are used. Negative values can bypass the loop iteration limit, allowin...

aircheng-org iWebShop: Input validation error vulnerability

aircheng-org iWebShop versions 5.16 and earlier have a vulnerability in input validation. This vulnerability stems from an improper handling of the callback parameter in the IController::redirect function within the Login Redirect component. This could lead to open redirection issues...

Craft CMS input validation vulnerability

Craft CMS has a vulnerability in input validation. This vulnerability stems from a bypass of the blacklist in the Twig create function. Due to the case-sensitive checking of class names, PHP class resolution is case-insensitive. Attackers with template execution privileges can instantiate...

Antoine clawhost input validation vulnerability

Antoine clawhost versions 0.0.45 and earlier have a vulnerability in input validation. This vulnerability stems from an improper handling of the token parameter in the handleRequest function within the Reverse Proxy component. It may lead to open redirection, and remote attackers can exploit this...

MLJAR mercury input validation error vulnerability

The MLJAR Mercury version 3.0.0 to 3.2.4 had a security vulnerability. This vulnerability stemmed from the lack of a comma in BLOCKEDPATTERNS, allowing the concatenation of /lab and/api/terminals regular expression literals. As a result, API/terminals requests bypassed the anonymous endpoint...

Red Hat Enterprise Linux Input Validation Vulnerability

Red Hat Enterprise Linux versions 8, 9, and 10, as well as Red Hat Hardened Images version 1, have a vulnerability in input validation. This vulnerability arises from bootc, under the default container signature policy, automatically or manually upgrading variable image tags that fall under...

sgl-project SGLang Input Validation Vulnerability

The sgl-project SGLang version 0.5.22 and earlier have a vulnerability related to input validation errors. This vulnerability arises because the API client can terminate other users’ ongoing generation requests by providing a short client-side control rid. An attacker can submit a...

LangBot input validation vulnerability

LangBot versions 4.11.0 and earlier have a vulnerability related to input validation. This vulnerability stems from the lack of authenticity verification; signatures are not checked, allowing unauthorized attackers to inject forged Lark/Feishu events with knowledge of the robot’s UUID. These...

Viraj Potdar Criminal Management System: Input validation error vulnerability

The Viraj Potdar Criminal Management System has a security vulnerability, which stems from incorrect handling of the Search parameter in the file search.php. This could lead to SQL injection attacks...