tox-dev filelock: Processing logic error vulnerability

The tox-dev filelock version 4.1.0 to 4.2.1 contained a processing logic vulnerability. This vulnerability stemmed from the SoftFileLock component reusing outdated observation results when at least two lock user processes were waiting. An attacker could set and delete their own markers, and use...

Apostrophe Technologies ApostropheCMS Resource Management Vulnerability

Apostrophe Technologies' ApostropheCMS has a resource management vulnerability. This vulnerability arises because authenticated importers can submit archived files whose number of decompressed bytes, number of entries, and size are not restricted before document type authorization. Failure in...

Oracle Autonomous Health Framework security vulnerabilities

A security vulnerability exists in Oracle Autonomous Health Framework versions 26.3 through 26.8. This vulnerability stems from issues within the Trace File Analyzer component and may allow low-privilege attackers to log in and execute infrastructure tasks. They could gain unauthorized access to...

DokuWiki.org DokuWiki deserialization injection vulnerability

DokuWiki.org: Versions prior to DokuWiki 2026-07-14c contained a deserialization injection vulnerability. This vulnerability stemmed from the use of Draft::getDraftText, which passed the content of the draft file to unserialize, without restricting the classes allowed. Authentication users with...

Oracle Autonomous Health Framework security vulnerabilities

A security vulnerability exists in Oracle Autonomous Health Framework versions 26.3 through 26.8. This vulnerability stems from issues within the Trace File Analyzer component and may allow low-privilege attackers to log in, execute infrastructure tasks, and take control of Oracle Autonomous Heal...

Python Packaging Authority virtualenv path traversal vulnerability

The Python Packaging Authority identifies a path traversal vulnerability in virtualenv versions prior to 21.14.9. This vulnerability arises because PipInstall.uninstallpreviousversion accepts metadata from existing seed packages. Additionally, uninstalldist fails to verify whether entries within...

uTox path traversal vulnerability

uTox versions 0.18.1 and earlier contain a path traversal vulnerability. This vulnerability arises from path traversal, allowing attackers to write arbitrary files by sending absolute paths or ../ filenames when the victim enables auto-accepting connections. This can overwrite shell startup files...

Apache Cocoon information disclosure vulnerability

All versions of Apache Cocoon are affected by an information disclosure vulnerability. This vulnerability arises when sensitive system information is exposed to unauthorized control domains. Unauthenticated attackers can access the diagnostic interface, triggering caching mechanisms and resulting...

WordPress Aspose Doc Exporter path traversal vulnerability

Versions of Aspose Doc Exporter 2.0 prior to version 2.0 contain a path traversal vulnerability. This vulnerability arises from the lack of cleaning the path passed to the readfile function. Unauthenticated attackers can download arbitrary files by sending a GET request with the file parameter...

DrayTek Vigor2960: Permissions, licensing, and access control issues

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a security vulnerability. This vulnerability stems from improper handling of parameters uploadpath/uploadname in the commonupload component of the file/cgi-bin/mainfunction.cgi. It could allow remote attackers to upload files without restrictions...

Vite launch-editor command injection vulnerability

Vite launch-editor has a command injection vulnerability. This vulnerability arises when an attacker can create file system entries in the working directory that start with a plus sign or minus sign. In such cases, launch-editor does not enforce the path as a positional file name. As a result, th...

TYPO3 FAL Protect authorization issue vulnerability

The TYPO3 FAL Protect version 1.7.1 up to 1.8.2 had an authorization issue vulnerability. This vulnerability stemmed from extensions not applying access protection to files stored in file storage that used non-default relative base paths. As a result, these files were directly provided by the web...

Stormshield Network Security Authorization Issue Vulnerability

Stormshield Network Security versions 4.3.0 to 4.3.44, 4.8.0 to 4.8.19, 5.0.0 to 5.0.9, and 5.1.0 to 5.1.3 have an authorization issue vulnerability. This vulnerability arises from a failure in the dynamic data file signature check; there are logical errors in the signature verification routine,...

Advantech Adam-3600 path traversal vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a path traversal vulnerability. This vulnerability allows for attacks where path traversal is possible, potentially enabling authenticated attackers to access any file on the system...

DrayTek Vigor2960 path traversal vulnerability

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a path traversal vulnerability. This vulnerability stems from incorrect handling of the setSWMProfile parameter in the function setSWMProfile located in the file/cgi-bin/mainfunction.cgi. This could lead to path traversal attacks, and attackers could...

TYPO3 File Manager SQL Injection Vulnerability

Versions of the TYPO3 File Manager prior to 3.1.3 have a SQL injection vulnerability. This vulnerability arises from the file search function, which escapes LIKE wildcards only when constructing database query conditions, but does not escape quotes. Attackers can alter the database queries with...

Aspose PDF Exporter path traversal vulnerability

Versions of Aspose PDF Exporter 2.0 prior to version 2.0 have a path traversal vulnerability. This vulnerability stems from the use of the file parameter, which is not properly cleaned up when passed to the readfile function. This allows for path traversal attacks; unauthenticated attackers can...

Oracle Autonomous Health Framework security vulnerabilities

The Oracle Autonomous Health Framework versions 26.3 to 26.8 have security vulnerabilities. These vulnerabilities stem from issues with the Trace File Analyzer component. They could allow low-privilege attackers to log in to the infrastructure that runs Oracle Autonomous Health Framework and take...

Python Packaging Authority virtualenv encryption vulnerability

The Python Packaging Authority virtualenv version 21.14.8 has a security vulnerability. This vulnerability stems from downloadwheel, which downloads the package index into a reusable cache before validating the target based on the Saved output from pip. Due to a flaw in the digest comparison, a...

tox-dev filelock backend link vulnerability

In versions of tox-dev FileLock from 4.0.0 to 4.2.1, there was a post-processing link vulnerability. This vulnerability stemmed from SoftReadWriteLock’s mechanism for refreshing holder records by name. Local users with permission to rename lock directories could replace the records with named...