Apache Airflow Permission Authorization and Access Control Vulnerabilities

Versions of Apache Airflow prior to 0.11.1 have vulnerabilities related to permission granting and access control. This vulnerability stems from the attachteampermissions function in the multi-team configuration, which grants global read access to audit logs for each team role. This could allow...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 155.0.8059.84 have a buffer overflow vulnerability. This vulnerability stems from memory corruption in the V8 engine, which could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 155.0.8059.84 have a buffer overflow vulnerability. This vulnerability stems from memory corruption in Workers, which could allow remote attackers to execute arbitrary code within the sandbox through a specially crafted HTML page...

Libraw buffer error vulnerability

Libraw versions 0.22.2 and earlier have a buffer error vulnerability. This vulnerability stems from a stack-based out-of-bounds read in LibRaw::parseNikonMakernote. An attacker could provide a custom Nikon NEF/TIFF file with a 5-byte ShotInfo tag labeled with version 243. By reading the...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 155.0.8059.84 contain a buffer overflow vulnerability caused by core memory corruption. This vulnerability could allow remote attackers to read memory through specially crafted HTML pages...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 155.0.8059.84 have a buffer overflow vulnerability, which stems from SVG memory corruption. This vulnerability could allow remote attackers to read memory through specially crafted HTML pages...

Papermark authorization issue vulnerability

Papermark versions 0.22.0 and earlier have an authorization issue. This vulnerability stems from a lack of authorization verification in the data room viewer group API. It may allow authenticated users to send DELETE requests to delete viewership groups and share links for other teams, or to read...

Konstanty Bialkowski libmodplug buffer error vulnerability

Konstanty Bialkowski’s libmodplug versions 0.8.9.1 and earlier have a buffer error vulnerability. This vulnerability stems from the fact that the nPat parameter in the CSoundFile::ReadDSM function is not validated against MAXPATTERNS. Attackers can exploit this vulnerability by providing a...

COOL cool-admin-midway Authorization Issue Vulnerability

COOL cool-admin-midway versions 8.0.0 and earlier have an authorization issue vulnerability. This vulnerability stems from improper permission verification. An attacker with the 'sys:user:' permission can call the '/admin/sys/user/info', '/update', or '/delete' interfaces. By providing arbitrary...

BMC Helix Network Management Authorization Issues Vulnerability

Versions of BMC Helix Network Management prior to 26.3.01 have an authorization issue vulnerability. This vulnerability stems from the bypass of authentication when configuring SAML single-sign-on. Unverified attackers can log in as a local administrator using any password. By submitting an...

Likeshop authorization issue vulnerability

Likeshop 3.5.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from insecure direct object references in AfterSale.php and AfterSaleLogic.php. Attackers can access other customers’ after-sales records by providing user IDs, thereby enabling them to read...

Apache Airflow session mechanism vulnerability

Versions of Apache Airflow prior to 0.11.1 have a session mechanism vulnerability. This vulnerability arises from the improper termination of sessions when users log out. Although the logout route revokes the issued tokens, KeycloakJWTMiddleware issues new, unrevoked tokens in the same response. ...

Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 155.0.8059.84 have a resource management vulnerability. This vulnerability stems from the use of reusing V8 objects after they are released, which may allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 155.0.8059.84 contain a resource management vulnerability. This vulnerability stems from the use of reusing Prerender objects after they are released, which may allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML pa...

Google Chrome: Input validation error vulnerability

Versions of Google Chrome prior to 155.0.8059.84 contain a vulnerability related to input validation. This vulnerability arises from improper input validation, and it could allow remote attackers to execute arbitrary code outside of the sandbox through a specially crafted HTML page...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 155.0.8059.84 contain a buffer overflow vulnerability. This vulnerability stems from DOM memory corruption, and it could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

BeyondTrust Remote Support Authorization Issues Vulnerability

BeyondTrust Remote Support versions 26.2.3 and earlier have an authorization issue vulnerability. This vulnerability stems from internal components failing to properly verify the origin of the received messages, allowing attackers to execute file operations on the device...

Junrar Resource Management Error Vulnerability

Versions of Junrar prior to 7.6.1 contained a resource management vulnerability. This vulnerability stems from the RarVMExecuteCode feature, which allows for the repeated execution of VMJMP instructions where the target is greater than or equal to the program’s codeSize. The setIP function return...

CRMEB crmeb_java authorization issue vulnerability

CRMEB crmebjava 3.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from an authorization bypass. Attackers can obtain order information from other members by requesting APIs like/api/front/order/express/orderId or/api/front/order/apply/refund/orderId. Thi...

Eclipse Jetty information leakage vulnerability

Eclipse Jetty 12.1.12 and earlier versions of 12.1.x, 12.0.38 and earlier versions of 12.0.x, 11.0.32 and earlier versions of 11.0.x, 10.0.32 and earlier versions of 10.0.x, and 9.4.64 and earlier versions of 9.4.x have a vulnerability involving information leakage. This vulnerability arises from...

JetBrains Junie CLI software supply chain issue vulnerabilities

Versions of JetBrains Junie CLI prior to version 26.8.3 have vulnerabilities related to the software supply chain. These vulnerabilities stem from misconfigured MCP servers in untrusted projects, which may lead to code execution...

Microsoft Office Outlook buffer error vulnerability

Microsoft Office Outlook has a buffer error vulnerability, which stems from a heap buffer overflow. This vulnerability could allow unauthorized attackers to execute code via the network...

MsgByte Tianji SQL Injection Vulnerability

Versions of MsgByte Tianji before 1.31.29 have a SQL injection vulnerability. This vulnerability stems from the getDateQuery function in src/server/utils/prisma.ts, which interpolates the timezone request value using Prisma.sql. Without parameter binding, attackers can inject SQL statements throu...

WordPress Sunshine Photo Cart authorization issue vulnerability

WordPress Sunshine Photo Cart versions 3.7.4 and earlier have a vulnerability related to authorization. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...

Microsoft Office Excel resource management error vulnerabilities

Microsoft Office Excel has a resource management vulnerability. This vulnerability stems from a problem with reusing resources after they are released, which may allow unauthorized attackers to execute code through the network...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer error vulnerability, which stems from a heap buffer overflow. This vulnerability could allow unauthorized attackers to execute code via the network...

Microsoft ASP.NET Core resource management vulnerability

Microsoft ASP.NET Core has a resource management vulnerability. This vulnerability arises from insufficient or ineffective restrictions on ASP.NET Core resources, which may allow unauthenticated attackers to launch denial-of-service attacks via the network...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a security vulnerability caused by a numerical truncation error in Microsoft Office Word. This vulnerability may allow unauthorized attackers to execute code through the network...

Kitae Park Mang Board Cross-site Scripting Vulnerability

Kitae Park Mang Board 2.4.0 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient cleaning of the 'datatype' parameter input and inadequate escaping of output, allowing for storage-type cross-site scripting attacks. Unauthenticated attackers ca...

WordPress YITH WooCommerce Compare: Cross-site Script Vulnerability

WordPress YITH WooCommerce Compare 3.15.0 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation, which may lead to storage-based cross-site scripting attacks...

Microsoft Office PowerPoint buffer error vulnerability

Microsoft Office PowerPoint has a buffer error vulnerability. This vulnerability stems from the possibility of out-of-bounds reading in Microsoft Office PowerPoint, which could allow unauthorized attackers to leak information through the network...

ZoneMinder authorization issue vulnerability

The ZoneMinder versions 1.34.0 to 1.36.63 contain security vulnerabilities. These vulnerabilities stem from improper handling of token authentication in the web/includes/auth.php file. The validateToken function returns false for or invalid tokens. However, the calling party assigns this value to...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute arbitrary code through the network...

Ivanti Connect Secure software supply chain issue vulnerabilities

The Ivanti Connect Secure version 22.8R2.4 has a software supply chain vulnerability. This vulnerability stems from the improper handling of trust in DSCache configuration data by the dsinvoked broker, which may lead to permission escalation to root access...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a security vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...

JetBrains DataloR path traversal vulnerability

Versions of JetBrains DataLore prior to 2026.2.1 have a path traversal vulnerability. This vulnerability stems from unauthenticated path traversal through the report blob endpoint, which may lead to the reading of arbitrary files...

Microsoft Office Word resource management error vulnerability

Microsoft Office Word has a resource management vulnerability. This vulnerability stems from a problem with reusing resources after they are released, which may allow unauthorized attackers to leak information through the network...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...

Microsoft Office SharePoint Path Traversal Vulnerability

Versions of Microsoft Office SharePoint 16.0.0 to 16.0.20326.20190 contain a path traversal vulnerability. This vulnerability stems from improper restrictions on path names in restricted directories, allowing authorized attackers to execute code through the network...

WordPress FluentCRM has vulnerabilities related to permission levels and access control mechanisms.

WordPress FluentCRM versions 3.2.5 and earlier have vulnerabilities related to permission granting and access control. These vulnerabilities stem from improper permission allocation, which may lead to unauthorized privilege escalation...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in Microsoft Office Word, which could allow unauthorized attackers to leak information through the network...

Microsoft Office Word input validation error vulnerability

Microsoft Office Word has a vulnerability related to input validation. This vulnerability stems from relying on untrusted inputs in security decisions, which may allow unauthorized attackers to bypass security features locally...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...

WordPress Kirki cross-site scripting vulnerabilities

WordPress Kirki versions 6.2.0 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping, allowing for cross-site scripting attacks via Page Builder Text Content. Certified attackers with the kirkicontentaccess...

Microsoft Office Word buffer error vulnerability

Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...

jxxghp MoviePilot prompt injection vulnerability

Jxxghp MoviePilot versions 3.1.5 and earlier have a vulnerability related to prompt injection. This vulnerability arises when tools such as browsewebpage, searchweb, and torrent metadata parser process unreliable content, embedding malicious instructions. These contents are transmitted through...