CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

Prototype Pollution

dot-lens is vulnerable to Prototype Pollution. The vulnerability exists due to insufficient conditional checks in the set function of index.js which allows an attacker to inject and modify malicious properties such as proto, resulting in prototype pollution...

Cross-Site Request Forgery (CSRF)

com.xuxueli:xxl-job is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability exists in xxl-job-admin/user/add, which allows an attacker to use a crafted .html file to cause CSRF attacks due to insufficient checks, resulting in arbitrary code execution and privilege escalations...

The vulnerability of the CMPv2 protocol implementation in Juniper Networks’ Junos OS allows a attacker to trigger a service failure.

The vulnerability of the CMPv2 certification management protocol implementation in Juniper Networks’ Junos OS lies in insufficient checks for exceptional states. Exploiting this vulnerability allows a malicious actor to trigger a service failure remotely...

dottie vulnerable to Prototype Pollution

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set function and the current variable in the /dottie.js file...

Out-of-bounds Read

libgpac.so is vulnerable to Out-of-bounds Reads. The vulnerability exists in the GFErr gffiltergetstats function of filtersession.c due to insufficient checks for user supplied inputs which allows an attacker to cause Out-of-bounds Reads, resulting in a system crash or sensitive information...

Type Confusion

hermes-engine is vulnerable to Type Confusion. A remote attacker is able to inject malicious content due to insufficient checks in TypeInference.cpp, which results in type confusion, leading arbitrary code execution via untrusted JavaScript...

Apache Jena 安全漏洞

Apache Jena is the United States Apache Apache Foundation of a Java Semantic Web framework. Used to build semantic Web and linked data applications. A cross-site scripting vulnerability exists in Apache Jena. The vulnerability stems from insufficient checking of user queries when calling custom...

Authentication Bypass

org.apache.iotdb:iotdb-grafana-connector is vulnerable to Authentication Bypass. The vulnerability exists due to insufficient checks in preHandle function of LoginInterceptor.java, which allows a remote attacker to bypass authentication mechanisms...

PT-2023-21449 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 iOS versions prior to 16.4 iPadOS versions prior to 16.4 macOS Monterey versions prior to 12.6.4 tvOS versions prior to 16.4 macOS Big Sur versions prior to 11.7.5 Description: The issue allows an app to potential...

PT-2023-19010 · Apple · Macos Big Sur +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Big Sur versions prior to 11.7.5 iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: The issue allows an app to potentially gain root privileges due to inadequate checks. The estimated numb...

CVE-2021-36400

In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions...

CVE-2021-26403

Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality...

CVE-2021-26403

Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality...

Authorization Bypass

apiman-manager-api-rest-impl is vulnerable to authorization bypass. The vulnerability exists due to insufficient checks for read permissions which allows an attacker to access information and resources via malicious HTTP request...

Design/Logic Flaw

Apiman 1.5.7 through 2.2.3.Final has insufficient checks for read permissions within the Apiman Manager REST API. The root cause of the issue is the Apiman project's accidental acceptance of a large contribution that was not fully compatible with the security model of Apiman versions before...

CVE-2022-43548

A OS Command Injection vulnerability exists in Node.js versions 14.21.1, 16.18.1, 18.12.1, 19.0.1 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.Th...

Cross-site Scripting (XSS)

github.com/eolinker/apinto-dashboard is vulnerable to cross-site scriptingXSS attacks. A remote authenticated attacker is able to inject and execute malicious JavaScript on the victim's machine due to insufficient checks in /api/discoveries/ file...

Improper Authorization

apacheairflow is vulnerable to improper authorization. A deactivated user is able to continue using the UI or the API with an already authenticated session due to the insufficient checks in createapp function...