Integer Underflow (Wrap or Wraparound)

Overview Affected versions of this package are vulnerable to Integer Underflow Wrap or Wraparound via the PubSub signature verification process. An attacker can cause a denial of service by sending a specially crafted UDP packet. Remediation Upgrade open62541 to version 1.4.20, 1.5.8 or higher...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the magick when invalid command-line options are provided. An attacker can cause memory exhaustion by repeatedly supplying malformed command-line arguments. Remediation A fix was...

SQL Injection

Overview @budibase/server is a Budibase Web Server Affected versions of this package are vulnerable to SQL Injection in the json field enrichment process. An attacker can access unauthorized data, execute arbitrary JavaScript on the database server, perform cross-collection queries, or modify and...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the gssapi-keyex process due to missing verification of the Kerberos principal's authorization for the requested local user. An attacker can gain unauthorized access as arbitrary users by exploiting this flaw...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the hough lines. An attacker can cause increased memory consumption by triggering a failure during this operation. Remediation A fix was pushed into the master branch but not yet...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the color transformation to the log colorspace when the operation fails. An attacker can cause a small amount of memory to be leaked by triggering a failure during color transformati...

Use After Free

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Use After Free

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Symlink Attack

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Unchecked Return Value

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the changegroup process. An attacker can access sensitive information by merging crafted changesets through local interaction. Remediation A fix was pushed into the master branch but not yet published. References ...

Improper Validation of Specified Quantity in Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input due to improper handling of command-line arguments in the internal-sftp process. An attacker can bypass intended security restrictions by supplying more than nine arguments, causing...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the ssh process when a server changes its host key during a key re-exchange. An attacker can potentially execute arbitrary code or cause a denial of service by triggering a use-after-free condition on the client side...

Missing Authorization

Overview kiwitcms is a Test Case Management System Affected versions of this package are vulnerable to Missing Authorization in the /init-db/ process. An attacker can access administrative setup functionality by sending requests to this endpoint after initial use. This is only exploitable if the...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free when identifying images and handling a crafted 8BIM profile with a specific format string. An attacker can cause a denial of service by supplying a specially crafted image file. Remediation A fix was pushed into the maste...

Incorrect Authorization

Overview mythic is an Interact with Mythic C2 Framework Instances Affected versions of this package are vulnerable to Incorrect Authorization due to a broken permission filter in the payloadbuildstep table, which uses an always-satisfied or condition that bypasses operation-scoped access controls...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the webhook registration process. An attacker can access internal network resources by registering internal URLs and triggering alarm threshold breaches, which causes the server to issue POST requests...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in the handling of HTTP/1.1 Upgrade requests containing a Content-Length header and body on reusable keep-alive backend connections. An attacker can manipulate backend responses by crafting ambiguous HTTP messages...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the Watch API handler. An attacker can gain unauthorized access to private repository activity by exploiting an inverted access check, allowing them to monitor commit messages, branch names, issue titles, and...

Cross-site Request Forgery (CSRF)

Overview @budibase/server is a Budibase Web Server Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the handoffChatLinkSession process. An attacker can gain unauthorized access to another user's account by crafting a malicious link containing their own...