SQL Injection

Overview vanna is a Generate SQL queries from natural language Affected versions of this package are vulnerable to SQL Injection via the removetrainingdata function in the file bigqueryvector.py. An attacker can execute arbitrary SQL commands by supplying crafted input to the ID argument...

Server-side Request Forgery (SSRF)

Overview vanna is a Generate SQL queries from natural language Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the runsql function. An attacker can access internal resources or services by sending crafted requests remotely. Remediation There is no fixed...

SQL Injection

Overview vanna is a Generate SQL queries from natural language Affected versions of this package are vulnerable to SQL Injection via the updatesql function. An attacker can execute arbitrary SQL commands by supplying crafted input remotely. Remediation There is no fixed version for vanna...

Command Injection

Overview openakita is a 全能自进化AI Agent - 基于Ralph Wiggum模式，永不放弃 Affected versions of this package are vulnerable to Command Injection via the run function in the Chat API Endpoint component when processing the Message argument. An attacker can execute arbitrary operating system commands by supplyin...

Insertion of Sensitive Information into Log File

Overview jimeng-web-mcp is a MCP服务器项目，直接访问即梦AI Web端进行图像和视频生成（仅供学习研究使用） Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the logging process. An attacker can access sensitive information by reviewing improperly sanitized log files. Remediation...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the dopnm2png function. An attacker can achieve code execution, data corruption, or application crash by providing specially crafted width or height arguments that trigger a heap-based buffer overflow duri...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the fireWebhook function in the file /internal/service/webhook/webhook.go. An attacker can cause the server to initiate arbitrary requests to internal or external systems by supplying crafted input t...

Improper Validation of Syntactic Correctness of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input via inadequate validation of hostnames in the libsoup client. An attacker can inject malicious HTTP headers by supplying specially crafted URLs, potentially enabling HTTP smuggling o...

Timing Attack

Overview @perfood/couch-auth is an Easy and secure authentication for CouchDB/Cloudant. Based on SuperLogin, updated and rewritten in Typescript. Affected versions of this package are vulnerable to Timing Attack via a timing side-channel in the authentication process. An attacker can obtain...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the handling of Protobuf messages within multiple server handlers due to missing nil-pointer validation after unmarshalling. An attacker can cause the server process to terminate unexpectedly by sending a...

Origin Validation Error

Overview org.webjars.npm:darkreader is a Dark mode for every website Affected versions of this package are vulnerable to Origin Validation Error via the process of requesting style sheets from a locally running web server. An attacker can access sensitive information by tricking a user into...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the SQL function. An attacker can gain unauthorized access to sensitive database content and potentially modify data by sending crafted SQL queries to the /api/query/sql endpoint as a low-privileged user...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the xlnt::detail::binarywriter::append function in the Compound Document Parser process. An attacker can cause a heap-based buffer overflow by providing specially crafted input to this function during loca...

Use of Default Credentials

Overview Affected versions of this package are vulnerable to Use of Default Credentials via the default administrative account setup. An attacker can gain unauthorized administrative access and take full control of the management service by authenticating with default credentials over the network...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the sqstdrexnewnode function in sqstdlib/sqstdrex.cpp. An attacker can cause a denial of service by triggering a null pointer dereference through local manipulation. Remediation There is no fixed version for...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the FunctionPushPop. An attacker can cause excessive resource consumption and application instability by triggering deep or infinite recursion through crafted input to the affected process. Remediation There is...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the getas function of the boxednumber.hpp file. An attacker can cause memory corruption by manipulating input locally, potentially leading to application instability or a denial of service. Remediation There is no fixe...

Division by zero

Overview Affected versions of this package are vulnerable to Division by zero via the go function in the chaiscript::BoxedNumber class. An attacker can cause a denial of service by triggering a division by zero operation through local access. Remediation There is no fixed version for chaiscript...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the Whois component. An attacker can access internal resources and potentially exfiltrate sensitive information or manipulate server behavior by sending crafted requests through the affected process...

Improper Handling of Insufficient Permissions or Privileges

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Improper Handling of Insufficient Permissions or Privileges via improper enforcement of roles in the UMA 2.0...