Keycloak processing logic error vulnerability

Keycloak contains a processing logic error vulnerability stemming from the implementation of push authorization requests PAR in the keycloak-services component. Upon restarting the authentication process, this flaw fails to properly clear internal markers used to track PAR consumption while still...

Microsoft Edge (Chromium-based) processing logic error vulnerability

A processing logic error vulnerability exists in Microsoft Edge Chromium-based versions from 1.0.0.0 up to and including 156.0.4314.42. This vulnerability stems from improper restrictions on the rendering UI layer or framework, potentially allowing unauthorized attackers to deceive users via the...

Acronis Cyber Protect 17 processing logic error vulnerability

Versions of Acronis Cyber Protect prior to build 42587 contain a processing logic error vulnerability. This vulnerability arises from the lack of binary hardening in Linux executables, resulting in the failure of the protection mechanisms...

Mozilla Firefox for iOS processing logic error vulnerability

Mozilla Firefox for iOS contains a processing logic error vulnerability. This vulnerability allows malicious web pages to insert arbitrary text into FaceTime call prompts displayed on iOS, potentially leading to the display of phishing messages within the system interface...

Node.js Node processing logic error vulnerability

Node.js versions 26.12.0 and earlier contain a processing logic error vulnerability. This vulnerability arises because the zlib.ZipFile API fails to validate local headers and central directory headers locally; as a result, it caches the parsed local header without setting a content offset...

baserproject baserCMS processing logic error vulnerability

Versions prior to 5.3.2 of baserproject baserCMS, as well as versions 5.0.0 and 5.4.0 prior to 5.4.2, contain a security vulnerability. This vulnerability arises because the /bc/api/bc-mail/mailmessages/add/mailContentId.json endpoint fails to enforce authcaptcha settings and does not validate...

Storybook processing logic error vulnerability

A security vulnerability exists in Storybook versions from 8.0.0 up to and including 8.6.19, from 9.0.0 up to and including 9.1.21, from 10.0.0 up to and including 10.6.2, and from 11.0.0-alpha.0 up to and including 11.0.0-alpha.6. This vulnerability stems from insufficient iframe embedding and...

VyperLang Vyper Processing Logic Vulnerability

VyperLang Vyper 0.1.0b10 to 0.2.3 versions have a processing logic error. This bug stems from incorrect code generated by return statements within for loops in internal functions that call other functions at least two levels deep. This results in invalid jump targets stack underflow, causing...

Orphan Open Source Software Object-Graph Navigation Language processing logic error vulnerability

Versions of Orphan Open Source Software Object-Graph Navigation Language prior to 3.4.13 contain a processing logic error vulnerability. This vulnerability arises because the strict invocation mode of OgnlRuntime.invokeMethod only checks the method declaration class; it fails to block...

tox-dev filelock: Processing logic error vulnerability

The tox-dev filelock version 4.1.0 to 4.2.1 contained a processing logic vulnerability. This vulnerability stemmed from the SoftFileLock component reusing outdated observation results when at least two lock user processes were waiting. An attacker could set and delete their own markers, and use...

ATSUMI Electric ADX5004: Processing logic error vulnerability

The ATSUMI Electric ADX5004 has a processing logic vulnerability. This vulnerability stems from a hidden function issue, allowing users with administrator privileges to execute arbitrary operating system commands...

@fastify/middie: Processing logic error vulnerability

The @fastify/middie version from 9.0.0 to 9.3.5 contains a processing logic vulnerability. This vulnerability arises from the use function, which may deviate from the path provided by the Fastify router when concatenating the mount path of the middleware with the plugin scope prefix. As a result,...

ATSUMI Electric ADX5004: Processing logic error vulnerability

The ATSUMI Electric ADX5004 has a processing logic vulnerability, which stems from a hidden function issue. This vulnerability could allow logged-in users with administrative privileges to upgrade affected products to unauthorized firmware...

Bandisoft Bandizip processing logic error vulnerability

Versions of Bandisoft Bandizip prior to 7.47 contain a processing logic vulnerability. This vulnerability arises from the failure to propagate the Mark-of-the-Web to the extracted.ps1 and.psm1 files. As a result, attackers may be able to bypass zone-based execution protection and execute unsigned...

Netis EAP930 processing logic error vulnerability

The Netis EAP930 1.250905.115454 version has a processing logic vulnerability. This vulnerability stems from the incorrect handling of the parameter SIGNATURE by the return200 function in the CGI Endpoint component/cgi-bin/debug file. This could potentially lead to the installation of a backdoor...

Radare2 processing logic error vulnerability

Radare2 versions 6.2.0 and 6.2.2 have a processing logic vulnerability. This vulnerability stems from the operation of the rcorecmdstrpipe function in the libr/core/rtrhttp.inc.c library within the HTTP Sandbox Policy Handler component. This operation causes the protection mechanism to fail,...

Dolibarr processing logic error vulnerability

Dolibarr versions 23.0.2 and earlier have a processing logic vulnerability. This vulnerability stems from improper handling of an unknown function in the file htdocs/document.php within the CSP component. As a result, the protection mechanism becomes ineffective, allowing attackers to exploit thi...

light0011 CMS processing logic error vulnerability

Light0011 CMS has a processing logic vulnerability. This vulnerability stems from the operation of the parameter X-Requested-With in the file App/Home/Controller/VoteController.class.php within the Vote Handler component. It may lead to logical errors in business operations and can be exploited...

OpenClaw ClawScan processing logic error vulnerability

OpenClaw ClawScan versions 0.1.6 and earlier have a processing logic vulnerability. This vulnerability stems from improper operation of the shouldSkipTargetPath function in the internal/runner/runner.go file of the Static Scanner component, which may lead to the failure of the protection mechanis...

Podman-container-tools: Podman processing logic error vulnerability

The podman-container-tools project has a processing logic error vulnerability in versions of Podman from 4.4.0 to 5.8.8, and from 6.0.0 to 6.1.3. This vulnerability arises because the podman run command treats images with the io.podman.annotations.checkpoint.runtime.name annotation as checkpoints...