Drupal Central Authentication System Server input validation error vulnerability

The Drupal Central Authentication System Server versions prior to 0.0.0 and 2.0.4, as well as versions prior to 2.1.0 and 2.1.3, contain an input validation error vulnerability. This vulnerability stems from URL redirection to untrusted sites open redirect, potentially leading to forged data...

Marcos Penelas Cámara Next.js Ecommerce Template Input validation error vulnerability

The Marcos Penelas Cámara Next.js Ecommerce Template contains an input validation error vulnerability. This vulnerability arises because external control assumes that web parameters are immutable in the shopping cart and checkout processes. The POST /api/user/cart endpoint accepts two independent...

Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability stems from an email header injection issue during Bounce operations. The function rcubemime::decodeaddresslist fails to remove control characte...

Drupal SAML SSO – Service Provider input validation error vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain an input validation error vulnerability. This vulnerability stems from URL redirection to untrusted sites open redirect, potentially allowing attackers to forge data sources...

oretnom23 file-management-system-php input validation error vulnerability

The oretnom23 file-management-system-php contains an input validation error vulnerability. This vulnerability arises because the include function in the index.php file processes the ‘page’ parameter, resulting in file inclusion and potential remote exploitation...

WSO2 API Manager input validation error vulnerability

Versions prior to WSO2 API Manager 3.1.0.313; versions prior to 3.2.0.406 for 3.2.0; versions prior to 3.2.1.30 for 3.2.1; versions prior to 4.0.0.324 for 4.0.0; versions prior to 4.1.0.185 for 4.1.0; versions prior to 4.2.0.124 for 4.2.0; versions prior to 4.3.0.36 for 4.3.0 and versions prior t...

Vyper input validation error vulnerability

Vyper versions prior to 0.3.1 contain an input validation error vulnerability. This stems from the absence of a uint8 type, allowing interface returns declared as uint8—such as ERC20.decimals—to be stored in uint256 variables without boundary checks. Malicious contracts can then return values...

ekko-studio input validation error vulnerability

Versions 1.0.6 and earlier of ekko-studio contain an input validation error vulnerability. This vulnerability stems from improper handling of the outputpath parameter in the saveGeneratedImages function within the Media Generation API component, specifically in the file...

WSO2 API Manager input validation error vulnerability

Versions 4.1.0 through 4.1.0.153, 4.2.0 through 4.2.0.105, and 4.3.0 through 4.3.0.20 of WSO2 API Manager contain an input validation error vulnerability. This vulnerability arises because the callback URL parameter fails to validate user-supplied inputs; it may be exploited by malicious actors t...

Apache Traffic Server input validation error vulnerability

A input validation error vulnerability exists in Apache Traffic Server versions 8.0.0 through 8.1.11, 9.0.0 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0. This vulnerability stems from improper handling when Content-Length or Transfer-Encoding is included in HEAD requests, potentially leading...

Cisco Emergency Responder: Input validation error vulnerability

Cisco Emergency Responder has a vulnerability related to input validation errors. This vulnerability stems from improper control of resource lifecycle, which may lead to injection attacks...

Splunk Enterprise input validation error vulnerability

Versions prior to Splunk Enterprise 10.4.4 10.4.x, prior to version 10.2.8 10.2.x, prior to version 10.0.11 10.0.x, and prior to version 9.4.16 9.4.x contain an input validation error vulnerability. This vulnerability stems from improper handling of input data...

Apache Traffic Server has a vulnerability related to input validation errors.

The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation error vulnerability. This vulnerability arises from the forwarding of302 responses that should be treated as resolution errors. Additionally, the Transfer-Encoding: chunked...

Coraza - Web Application Firewall: Input validation error vulnerability

Coraza – Web Application Firewall versions 3.0.0 to 3.8.1 had a vulnerability related to input validation errors. This vulnerability arose when the JSON flattened nested properties into dot-separated ARGSPOST names without escaping the literal dots. This led to conflicts between different...

Michelle Tilley TOML Parser for Node.js input validation error vulnerability

Versions prior to 5.0.1 of the Michelle Tilley TOML Parser for Node.js contain an input validation error vulnerability. This vulnerability arises because quoteDottedString in lib/compiler.js generates identical bookkeeping strings for different quote key paths, allowing addTableArray to bypass...

Coraza - Web Application Firewall: Input validation error vulnerability

Coraza – Web Application Firewall versions 3.0.4 to 3.8.1 had a vulnerability related to input validation errors. This issue arose from an exact comparison of the entire Content-Type value during the request body processor selection. As a result, URL-encoded request bodies containing media type...

Cisco Secure Client input validation error vulnerability

Cisco Secure Client versions 4.9.00086, 4.9.01095, 4.9.02028, 4.9.03047, 4.9.03049, 4.9.04043, 4.9.04053, 4.9.05042, 4.9.06037, 4.10.00093, 4.10.01075, 4.10.02086, 4.10.03104, 4.10.04065, 4.10.04071, 4.10.05085, 4.10.05095, 5.0.00238, 4.10.05111, 5.0.00529, 5.0.00556, 4.10.06079, 5.0.01242,...

SvelteKit input validation error vulnerability

Versions of SvelteKit prior to 3.0.0 contain an input validation error vulnerability. This vulnerability arises because enhanced form actions use:enhance allow open redirection when accepting paths starting with a double slash. Attackers can craft action paths beginning with // to form...

Pypdf input validation error vulnerability

Versions of pypdf prior to 6.21.1 contain an input validation error vulnerability. This vulnerability allows attackers to craft PDF files containing image data with /DCTDecode filter tags; upon loading these images, Pillow selects and invokes an unintended image parser...

Velneo vServer input validation error vulnerability

Versions 36.0 and 37.0 prior to Velneo vServer 36.6 contain an input validation error vulnerability. This vulnerability stems from improper array index validation and may lead to a denial of service...