ekko-studio input validation error vulnerability

Versions 1.0.6 and earlier of ekko-studio contain an input validation error vulnerability. This vulnerability stems from improper handling of the outputpath parameter in the saveGeneratedImages function within the Media Generation API component, specifically in the file...

Splunk SOAR side-channel information disclosure vulnerability

Versions of Splunk SOAR prior to 8.7.0 contain a side-channel information disclosure vulnerability. This vulnerability arises when Basic authentication values are decrypted prior to completing authentication checks. Unauthenticated users can submit these Basic authentication data to the REST API,...

WSO2 API Manager side-channel information disclosure vulnerability

WSO2 API Manager versions prior to 3.1.0 through 3.1.0.310, 3.2.0 through 3.2.0.401, 3.2.1 through 3.2.1.26, 4.0.0 through 4.0.0.318, 4.1.0 through 4.1.0.180, 4.2.0 through 4.2.0.119, and 4.3.0 through 4.3.0.30; WSO2 Identity Server as Key Manager versions prior to 5.10.0 through 5.10.0.320; WSO2...

Splunk Enterprise cross-site request forgery vulnerability

Versions prior to Splunk Enterprise 10.4.4, 10.2.8, 10.0.11, and 9.4.16 contain a cross-site request forgery vulnerability. This vulnerability arises because the REST API of the federated provider accepts GET requests to modify its status. Unauthenticated attackers can trick users with...

WSO2 API Manager input validation error vulnerability

Versions 4.1.0 through 4.1.0.153, 4.2.0 through 4.2.0.105, and 4.3.0 through 4.3.0.20 of WSO2 API Manager contain an input validation error vulnerability. This vulnerability arises because the callback URL parameter fails to validate user-supplied inputs; it may be exploited by malicious actors t...

OpenStack Cinder permission and access control issues

OpenStack Cinder versions 29.0.0 and earlier have vulnerabilities related to permission permissions and access control. These vulnerabilities stem from information leakage across projects due to the Messages API. When non-administrator users with project-wide member or reader roles call the Block...

Apache Traffic Server resource management error vulnerability

Versions 10.0.0 through 10.1.4 and 10.2.0 of Apache Traffic Server contain a resource management error vulnerability. This vulnerability stems from post-free reuse in the transaction close handler within an experimental WASM plugin, which forwards unvalidated metric IDs provided by guests to an...

hMailServer authorization issue vulnerability

hMailServer has an authorization issue vulnerability stemming from improper authorization in its REST management API. The DELETE /api/v1/role-assignments/address endpoint only checks whether the currently held credentials grant sufficient permissions; it fails to verify whether those permissions...

Splunk SOAR information disclosure vulnerability

Versions of Splunk SOAR prior to 8.7.0 contain an information disclosure vulnerability. This vulnerability arises because the REST API query filter applies to user records prior to protecting sensitive fields. Users with the Observer role can exploit this filter to infer other users’ password...

Storybook path traversal vulnerability

A security vulnerability exists in Storybook versions prior to 8.0.0 through 8.6.19, 9.0.0 through 9.1.21, 10.0.0 through 10.6.2, and 11.0.0-alpha.0 through 11.0.0-alpha.6. This vulnerability arises because the development server exposes WebSocket authentication tokens to clients capable of loadi...

Splunk SOAR authorization issue vulnerability

Versions of Splunk SOAR prior to 8.7.0 contain an authorization issue vulnerability. This vulnerability arises because Splunk SOAR validates requests via the REST API only and does not authenticate the caller. As a result, authenticated users may modify Enterprise Security versions and apply...

Chris Trudesk path traversal vulnerability

Chris Trudesk versions 1.2.11 and earlier have a path traversal vulnerability. This vulnerability stems from path traversal attacks, where administrators can delete any file by providing encoded traversal sequences for the DELETE /api/v1/backup/:backup request. Additionally, unvalidated file valu...

Chris Trudesk Authorization Issue Vulnerability

Chris Trudesk versions 1.2.11 and earlier have an authorization issue vulnerability. This vulnerability stems from the fact that authorization checks only verify the permissions for the default “tickets:update” role. Any authenticated user can use PUT /api/v1/tickets/:id and PUT...

Apache IoTDB security vulnerabilities

A security vulnerability exists in Apache IoTDB versions 2.0.0 through 2.0.11. This vulnerability arises because the Legacy Pipe receive protocol handshake/sendPipeData utilizes a hard-coded SUPERUSER root identity for data loading and deletion operations. Users possessing only SYSTEM-level...

Splunk SOAR information disclosure vulnerability

Versions of Splunk SOAR prior to 8.7.0 contain an information disclosure vulnerability. This vulnerability arises because the REST API accepts query filters controlled by callers on sensitive user record fields. As a result, users with read permissions for Users and Roles may infer authentication...

Apache Pulsar authorization issue vulnerability

Versions 2.8.0 through 4.0.14 and 4.1.0 through 4.2.5 of Apache Pulsar contain an authorization issue vulnerability. This vulnerability arises because multiple operations within the subscription management REST API fail to apply prefix-based subscription authentication or subscription permission...

CVE-2026-112954 ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses publicApiProjection can expose excluded searchable or sortable field information through search membership and sort ordering oracles. Returned fields remain filtered by the...

CVE-2026-112954 ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses publicApiProjection can expose excluded searchable or sortable field information through search membership and sort ordering oracles. Returned fields remain filtered by the...

CVE-2026-112954 ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses publicApiProjection can expose excluded searchable or sortable field information through search membership and sort ordering oracles. Returned fields remain filtered by the...

CVE-2026-112954

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses publicApiProjection can expose excluded searchable or sortable field information through search membership and sort ordering oracles. Returned fields remain filtered by the...