Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the H5Omtimenewencode function. An attacker can cause a crash or disrupt service availability by providing specially crafted input to the affected component. Remediation A fix was pushed into the master...

Incorrect Privilege Assignment

Overview Affected versions of this package are vulnerable to Incorrect Privilege Assignment via the installation process of the Import Page component in /admin-cp/imports. An attacker can gain unauthorized access to restricted actions or data by exploiting incorrect privilege assignments during...

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the deserializeArray function in the src/oatpp/json/Deserializer.cpp file. An attacker can cause a crash or disrupt service by sending specially crafted input that triggers a stack-based buffer overflow...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via the defaultAlloc function. An attacker can cause resource exhaustion by repeatedly triggering memory allocations without proper deallocation. Remediation There is no fixed version f...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the hashmapgetwithhash function in the gumbo-parser/src/hashmap.c file. An attacker can cause a crash or disrupt service by providing crafted input. Note: According to the maintainer of the package the cod...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the hashmapsetwithhash function in the gumbo-parser/src/hashmap.c file. An attacker can cause a crash or disrupt service by providing crafted input. Note: According to the maintainer of the package the cod...

Arbitrary Code Injection

Overview org.webjars.npm:jsonpath is a Query JavaScript objects with JSONPath expressions. Robust / safe JSONPath engine for Node.js. Affected versions of this package are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions. The library relies on th...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the H5FSsectfindnode function. An attacker can execute arbitrary code or cause a denial of service by providing specially crafted input that triggers a heap-based buffer overflow. Remediation A fix was...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds via the H5Creconstructcacheentry function in the file H5Cimage.c. An attacker can execute arbitrary code, cause a denial of service, or potentially alter data by providing crafted input that triggers a heap-based overflow...

Weak Password Requirements

Overview Affected versions of this package are vulnerable to Weak Password Requirements due to support of clear-text passwords. An attacker can brute-force a shorter password to get access to the system. Note: OpenC3 supports authentication using an authentication token, users are advised to use ...

PT-2025-35976

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the drm/xe subsystem related to DMA fence handling. The driver may free data pointed to by DMA fences before all references are released,...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to improper security controls. An attacker can gain unauthorized access and control over active sessions by exploiting this security oversight. Note: The maintainers of BackendAI do not consider this report to...

Incomplete Filtering of Special Elements

Overview org.webjars:angular-sanitize is an AngularJS module for sanitizing HTML Affected versions of this package are vulnerable to Incomplete Filtering of Special Elements through the ngSanitize module. An attacker can manipulate image sources and perform content spoofing by injecting malicious...

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload through the /upload/GoodsCategory/image component. An attacker can cause code execution by uploading a malicious file. Remediation There is no fixed version for xyz.erupt:erupt. References - GitHub Gist - Vulnerabl...

Origin Validation Error

Overview gradio is a Python library for easily interacting with trained machine learning models Affected versions of this package are vulnerable to Origin Validation Error through the isvalidorigin function. An attacker can manipulate the origin validation by altering the localhostaliases argumen...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow through the SRBRoot::addTag function. An attacker can corrupt memory and execute arbitrary code locally by overflowing the subtag struct. Remediation There is no fixed version for icu. References - Red Hat Bugzilla Bug -...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the SkipSpaces function, where the pointer is checked after dereferencing it in the while loop condition. This allows an attacker to read memory locations that should not be accessible by supplying crafted inp...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the MDLImporter::InternReadFileQuake1 function. An attacker can read data outside the intended buffer boundaries by manipulating the input data to the function. Remediation There is no fixed version for assimp...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the LWOImporter::GetS0 function. An attacker can read data outside the intended buffer boundaries by manipulating the 'out' argument. Remediation There is no fixed version for assimp. References - GitHub Issue...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the MDCImporter::InternReadFile function. An attacker can read data outside the intended buffer boundaries by manipulating the pcVerts argument. Remediation A fix was pushed into the master branch but not yet...