VyperLang Vyper Processing Logic Vulnerability

VyperLang Vyper 0.1.0b10 to 0.2.3 versions have a processing logic error. This bug stems from incorrect code generated by return statements within for loops in internal functions that call other functions at least two levels deep. This results in invalid jump targets stack underflow, causing...

ATSUMI Electric ADX5004: Processing logic error vulnerability

The ATSUMI Electric ADX5004 has a processing logic vulnerability. This vulnerability stems from a hidden function issue, allowing users with administrator privileges to execute arbitrary operating system commands...

ATSUMI Electric ADX5004: Processing logic error vulnerability

The ATSUMI Electric ADX5004 has a processing logic vulnerability, which stems from a hidden function issue. This vulnerability could allow logged-in users with administrative privileges to upgrade affected products to unauthorized firmware...

Bandisoft Bandizip processing logic error vulnerability

Versions of Bandisoft Bandizip prior to 7.47 contain a processing logic vulnerability. This vulnerability arises from the failure to propagate the Mark-of-the-Web to the extracted.ps1 and.psm1 files. As a result, attackers may be able to bypass zone-based execution protection and execute unsigned...

tox-dev filelock: Processing logic error vulnerability

The tox-dev filelock version 4.1.0 to 4.2.1 contained a processing logic vulnerability. This vulnerability stemmed from the SoftFileLock component reusing outdated observation results when at least two lock user processes were waiting. An attacker could set and delete their own markers, and use...

@fastify/middie: Processing logic error vulnerability

The @fastify/middie version from 9.0.0 to 9.3.5 contains a processing logic vulnerability. This vulnerability arises from the use function, which may deviate from the path provided by the Fastify router when concatenating the mount path of the middleware with the plugin scope prefix. As a result,...

Dolibarr processing logic error vulnerability

Dolibarr versions 23.0.2 and earlier have a processing logic vulnerability. This vulnerability stems from improper handling of an unknown function in the file htdocs/document.php within the CSP component. As a result, the protection mechanism becomes ineffective, allowing attackers to exploit thi...

Radare2 processing logic error vulnerability

Radare2 versions 6.2.0 and 6.2.2 have a processing logic vulnerability. This vulnerability stems from the operation of the rcorecmdstrpipe function in the libr/core/rtrhttp.inc.c library within the HTTP Sandbox Policy Handler component. This operation causes the protection mechanism to fail,...

Netis EAP930 processing logic error vulnerability

The Netis EAP930 1.250905.115454 version has a processing logic vulnerability. This vulnerability stems from the incorrect handling of the parameter SIGNATURE by the return200 function in the CGI Endpoint component/cgi-bin/debug file. This could potentially lead to the installation of a backdoor...

light0011 CMS processing logic error vulnerability

Light0011 CMS has a processing logic vulnerability. This vulnerability stems from the operation of the parameter X-Requested-With in the file App/Home/Controller/VoteController.class.php within the Vote Handler component. It may lead to logical errors in business operations and can be exploited...

OpenClaw ClawScan processing logic error vulnerability

OpenClaw ClawScan versions 0.1.6 and earlier have a processing logic vulnerability. This vulnerability stems from improper operation of the shouldSkipTargetPath function in the internal/runner/runner.go file of the Static Scanner component, which may lead to the failure of the protection mechanis...

Siemens RUGGEDCOM CROSSBOW processing logic error vulnerability

Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have a processing logic vulnerability. This vulnerability stems from the failure to properly execute server-side authorization checks for requests involving special operations. As a result, attackers with extremely low permissions may be able to...

Siemens RUGGEDCOM CROSSBOW processing logic error vulnerability

Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have a processing logic vulnerability. This vulnerability stems from the failure to properly execute server-side authorization checks for requests that modify the operation status of plans. As a result, authenticated attackers with minimal...

Mistral AI Mistral Vibe processing logic error vulnerability

Mistral AI Mistral Vibe versions prior to 2.25.5 have a processing logic vulnerability. This vulnerability stems from differences in the parsing of escaped newline characters by the extractcommands function in bash.py between tree-sitter-bash and bash. As a result, permission verification is...

Podman-container-tools: Podman processing logic error vulnerability

The podman-container-tools project has a processing logic error vulnerability in versions of Podman from 4.4.0 to 5.8.8, and from 6.0.0 to 6.1.3. This vulnerability arises because the podman run command treats images with the io.podman.annotations.checkpoint.runtime.name annotation as checkpoints...

HCCTG MPOS M6 PLUS processing logic error vulnerability

The HCCTG MPOS M6 PLUS 1.31-N version contains a processing logic vulnerability. This vulnerability stems from an unknown function of the Display QR Code Rendering component, which leads to improper parameter handling related to alignment operations. As a result, the rendering UI layer is...

Eleveo Quality Management processing logic error vulnerability

Eleveo Quality Management version 9.7.0 has a security vulnerability. This vulnerability stems from the operation of the parameter createdBy in the Conversation Handler component, which allows dynamic determination of object properties. This could potentially allow remote attackers to exploit thi...

Huawei HarmonyOS processing logic error vulnerability

Huawei HarmonyOS is an operating system from Huawei, China. It provides a microkernel-based, fully distributed operating system. Huawei HarmonyOS is vulnerable to a processing logic error that could be exploited by an attacker to cause a WLAN denial of service...

YetiForceCrm processing logic error vulnerability

YetiForceCrm is an open source crm system from the Polish company YetiForce. Yetiforcecrm suffers from a processing logic error vulnerability, which stems from Yetiforcecrm being vulnerable to business logic errors. No detailed vulnerability details are currently available...

YetiForceCrm has a vulnerability related to input validation.

YetiForceCrm is an open source crm system from the Polish company YetiForce. Yetiforcecrm suffers from a processing logic error vulnerability, which stems from Yetiforcecrm being vulnerable to business logic errors. No detailed vulnerability details are currently available...