16538 matches found
CVE-2024-11302
A missing checkaccess function in the lollmsbindinginfos module of the parisneo/lollms repository, version V14, allows attackers to add, modify, and remove bindings arbitrarily. This vulnerability affects the /installbinding and /reinstallbinding endpoints, among others, enabling unauthorized...
Azure Linux 3.0 Security Update: kernel (CVE-2024-57802)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57802 advisory. - In the Linux kernel, the following vulnerability has been resolved: netrom: check buffer length before...
CVE-2025-26138
Systemic Risk Value =2.8.0 is vulnerable to improper access control in /RiskValue/GroupingEntities/Controls/GetFile.aspx?ID=. Uploaded files are accessible via a predictable numerical ID parameter, allowing unauthorized users to increment or decrement the ID to access and download files they do n...
CVE-2025-26138
Systemic Risk Value =2.8.0 is vulnerable to improper access control in /RiskValue/GroupingEntities/Controls/GetFile.aspx?ID=. Uploaded files are accessible via a predictable numerical ID parameter, allowing unauthorized users to increment or decrement the ID to access and download files they do n...
PT-2025-11633
Name of the Vulnerable Software and Affected Versions Systemic Risk Value versions =2.8.0 Description The issue allows an unauthenticated attacker to exploit Local File Inclusion via the /GetFile.aspx?ReportUrl= endpoint. This can be done by supplying a crafted file path, potentially exposing...
CVE-2025-26137
Systemic Risk Value =2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=. An unauthenticated attacker can exploit this issue to read arbitrary system files by supplying a crafted file path, potentially exposing sensitive information...
389 Directory Server code-related vulnerabilities
389 Directory Server is a highly available, fully functional, reliable and secure LDAP server implementation of 389 Directory Server open source. A code issue vulnerability exists in 389 Directory Server that stems from an untested return value from an ldap MODDN operation, which could result in ...
CVE-2025-26138
The Systemic Risk Value software (versions
PT-2025-11634
Name of the Vulnerable Software and Affected Versions Systemic Risk Value versions =2.8.0 Description The issue concerns improper access control. Specifically, in the /RiskValue/GroupingEntities/Controls/GetFile.aspx endpoint, the ID parameter is predictable and numerical, allowing unauthorized...
CVE-2025-26138
Systemic Risk Value =2.8.0 is vulnerable to improper access control in /RiskValue/GroupingEntities/Controls/GetFile.aspx?ID=. Uploaded files are accessible via a predictable numerical ID parameter, allowing unauthorized users to increment or decrement the ID to access and download files they do n...
CVE-2025-26138
Systemic Risk Value =2.8.0 is vulnerable to improper access control in /RiskValue/GroupingEntities/Controls/GetFile.aspx?ID=. Uploaded files are accessible via a predictable numerical ID parameter, allowing unauthorized users to increment or decrement the ID to access and download files they do n...
Updated libarchive packages fix security vulnerability
listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custo...
ffmpeg:ffmpeg_dem_ASF_fuzzer: Use-of-uninitialized-value in av_strdup
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4754281823797248 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemASFfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment
Impact An attacker may be able to exploit this vulnerability to bypass authentication or authorization mechanisms in systems that rely on xml-crypto for verifying signed XML documents. The vulnerability allows an attacker to modify a valid signed XML message in a way that still passes signature...
SUSE CVE-2025-24855
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...
cpython3:fuzz_json_loads: Use-of-uninitialized-value in mark_stacks
Project: https://github.com/python/cpython.git Detailed Report: https://oss-fuzz.com/testcase?key=5445337833865216 Project: cpython3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsonloads Job Type: libfuzzermsancpython3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
vxlan: Fix uninit-value in vxlan_vnifilter_dump()
...
UBUNTU-CVE-2025-24855
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...
CVE-2024-47573: Improper Validation of Integrity Check Value
An improper validation of integrity check value vulnerability CWE-354 in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, version 7.0.6 and below may allow an authenticated attacker with at least Read/Write permission on system maintenance to install a corrupted...