Gitea AddTime Function DoS

The vulnerability of the AddTime function in the routers/api/v1/repo/issuetrackedtime.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

OpenCode AI Uncontrolled Resource Consumption

The vulnerability of the OpenCode artificial intelligence-based software development agent is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Gitea ServeAttachment Disclosure

The vulnerability of the ServeAttachment function in the routers/web/repo/attachment.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to disclose sensitive informatio...

Gitea ListMembers Disclosure

The vulnerability of the ListMembers function in the routers/api/v1/org/member.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Gitea RSS Atom Disclosure

The vulnerability of RSS and Atom feed handlers in the Git repository management system Gitea is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

Gitea parseKeyString SSH Key Parse

The vulnerability of the parseKeyString function in the models/asymkey/sshkeyparse.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service failures...

Gitea UpdatePullRequest Function Use-After-Free

The vulnerability of the UpdatePullRequest function in the routers/api/v1/repo/pull.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and...

Gitea Action ListWorkflowRuns Disclosure Sensitive Information

The vulnerabilities of the Action.ListWorkflowRuns and Action.ListWorkflowJobs methods in the routers/api/v1/org/action.go file of the Git repository management system Gitea are related to insufficient resource control during its existence. Exploiting these vulnerabilities could allow a malicious...

Gitea AddPackageTag Heap Buffer Overflow DoS

The vulnerability of the AddPackageTag function in the routers/api/packages/npm/npm.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Gitea CheckAuthToken Function Heap Buffer Overflow

The vulnerability of the CheckAuthToken function in the services/auth/authtoken.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the...

Gitea oauth2UpdateAvatarIfNeed Disclosure

The vulnerability of the oauth2UpdateAvatarIfNeed function in the routers/web/auth/oauth.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Gitea SSRF

The vulnerability of the GetPullRequests function in the services/migrations/restore.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a attacker to perform an SSRF attack...

Gitea GetActionsUserRepoPermission Heap Buffer Overflow

The vulnerability of the GetActionsUserRepoPermission function in the models/perm/access/repopermission.go file of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the...

Gitea EditReleasePost UpdateRelease Data Compromise

The vulnerability of the EditReleasePost function in the routers/web/repo/release.go file and the UpdateRelease function in the services/release/release.go file of the Git repository management system Gitea is related to the use of names with incorrect links. Exploiting this vulnerability could...

Gitea API Disclosure Protected Information

The vulnerability of the /api/v1/user/starred and /api/v1/user/subscriptions endpoints of the Git repository management system Gitea is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

Gitea Disclosure Sensitive Information

The vulnerability of the httpBase function in the routers/web/repo/githttp.go file and the EarlyResponseForGoGetMeta function in the services/context/repo.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a...

Gitea ParseControlFile Function DoS

The vulnerability of the ParseControlFile function in the modules/packages/debian/metadata.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Gitea Clone SSRF

The vulnerability of the Clone function in the modules/git/repo.go file of the Git repository management tool Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a remote attacker to perform an SSRF attack...

Gitea Name Link DoS

The vulnerability of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

Gitea Open Disclosure Information Disclosure

The vulnerability of the Open function in the modules/uri/uri.go file of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

FortiMail Graphical Interface Arbitrary File Write

The vulnerability of the FortiMail email protection system’s graphical interface is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to write arbitrary files using specially crafted HTTP requests...

pbkdf2 library DoS

The vulnerability in the lib/sync.js script of the pbkdf2 library on the Node.js software platform involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PyJWT HMAC Algorithm Use-After-Free

The vulnerability of the HMACAlgorithm.preparekey function in the PyJWT library is related to errors in the verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms and gain unauthorized access to protected informati...

Piscina ThreadPoolOptions Code Execution

The vulnerability of the ThreadPoolOptions component in the Piscina library of the Node.js software platform is related to uncontrolled changes to prototype attributes of objects. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Gitea UpdateIssueAttachments Function

The vulnerability of the UpdateIssueAttachments function in the models/issues/issueupdate.go file and the UpdateCommentAttachments function in the models/issues/comment.go files of the Git repository management system Gitea is related to the use of names with incorrect references. Exploiting this...

mako TemplateLookup Function Unauthenticated Access

The vulnerability of the TemplateLookup.gettemplate function in the mako/lookup.py file of the Sqlalchemy mako template library in Python is related to an incorrect path name limitation for accessing restricted directories. Exploiting this vulnerability could allow an attacker to gain unauthorize...

PyJWT HMAC Algorithm Bypass

The vulnerability of the HMACAlgorithm.preparekey function in the jwt/algorithms.py library of PyJWT is related to errors in cryptographic signature verification. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms remotely...

PyJWT _load() DoS

The vulnerability of the PyJWS.load function in the jwt/apijws.py file of the PyJWT library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

AEM Forms Server-Side Validation Exploitation

The vulnerability of the corporate platform for creating, managing, and processing Adobe Experience Manager AEM Forms on JEE is related to insufficient validation of requests at the server side. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Flysystem normalizePath() Path Traversal

The vulnerability of the normalizePath function in the src/WhitespacePathNormalizer.php file of the Flysystem library is related to the failure to take measures to eliminate special elements. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected...

AEM Forms Code Execution

The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager AEM Forms on JEE is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a...

AEM Platform Security Bypass

The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager AEM Forms on JEE is related to the exploitation of cross-site requests. Exploiting this vulnerability could allow a malicious acto...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

ColdFusion Code Execution

The vulnerability of the ColdFusion software platform lies in the lack of measures taken to neutralize instructions in dynamically executed code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Gitea IsMigrateURLAllowed Function Information Disclosure

The vulnerability of the IsMigrateURLAllowed function in the services/migrations/migrate.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Gitea IsPublicMember Function Disclosure

The vulnerability of the IsPublicMember function in the routers/api/v1/org/member.go file of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a remote attacker to expose protected information...

Gitea IntrospectOAuth Disclosure

The vulnerability of the IntrospectOAuth function in the routers/web/auth/oauth2provider.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Gitea Data Compromise

The vulnerability of the services/lfs/server.go and routers/private/serv.go files of the Git repository management system Gitea is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected...

Gitea LocalUploader Function Information Disclosure

The vulnerability of the GiteaLocalUploader.CreateReleases function in the services/migrations/giteauploader.go file of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to disclose sensiti...

Gitea Locale DoS

The vulnerability of the Locale function in the modules/web/middleware/locale.go file of the Git repository management system Gitea is related to the improper implementation of flow control. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Gitea ChangeTargetBranch Privilege Bypass

The vulnerability of the ChangeTargetBranch function in the services/pull/pull.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to enhance their privileges or circumvent security restrictio...

Gitea Disclosure Information Disclosure

The vulnerability of the getStarredRepos function in the routers/api/v1/user/star.go file and the ListMyTrackedTimes function in the routers/api/v1/repo/issuetrackedtime.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability...

PyJWT decode bypass

The vulnerability of the PyJWT.decode function in the PyJWT library is related to modifications to the assumed data. Exploiting this vulnerability allows a remote attacker to bypass existing security mechanisms...

basic-ftp FTP Client DoS

The vulnerability of the Client.list function in the FTP-client library of the basic-ftp software platform for Node.js lies in the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

PyJWT jwt/utils.py Function Disclosure

The vulnerability of the ispemformat function in the jwt/utils.py library of PyJWT is related to errors in the verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms and disclose sensitive information...

PyJWT HMAC Algorithm Unauthorized Access

The vulnerability of the HMACAlgorithm.fromjwk method in PyJWT is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Adobe Connect Code Execution

The vulnerability of the Adobe Connect instant messaging program relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Adobe Connect Path Traversal

The vulnerability of the Adobe Connect instant messaging program is related to an incorrect limitation on the path to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to read arbitrary files...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...