196789 matches found
Complianz GDPR/CCPA Cookie Consent Banner Cross-site Script Vulnerability
The Complianz GDPR/CCPA Cookie Consent Banner versions 7.5.5 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping. It involves stored cross-site scripting, enabled by the yotu-wp Cookie-Blocker filter. Unverifi...
Mattermost authorization issue vulnerabilities
Mattermost versions 11.10.0 and earlier of 11.10.x series, 11.7.9 and earlier of 11.7.x series, 11.9.1 and earlier of 11.9.x series, and 11.8.5 and earlier of 11.8.x series have an authorization issue. This issue arises from failing to properly restrict private teams from appearing in public team...
tinyhumansai OpenHuman Cross-Site Request Forgery Vulnerability
The tinyhumansai OpenHuman version prior to 0.56.0 has a security vulnerability. This vulnerability stems from an unauthenticated GET /auth/telegram loopback callback, which is vulnerable to cross-site request forgery attacks. The telegramauthhandler consumes a one-time Telegram login token...
WordPress FluentCart: A New Era of eCommerce – Authorization Issues and Vulnerabilities
WordPress FluentCart: A New Era of E-commerce. Versions 1.7.0 and earlier have vulnerabilities related to authorization. This vulnerability stems from the lack of user-controlled validation for the orderid, billingaddressid, and shippingaddressid parameters. Unsafe direct object references allow...
WordPress Schema & Structured Data for WP & AMP Cross-site Script Vulnerabilities
WordPress Schema & Structured Data for WP & AMP 1.67 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping of the saswpreviewtext parameter. Additionally, the nonce field, which serves as the only...
Netcore NR256CN Authorization Issue Vulnerability
Netcore NR256CN versions 1.5.140116 and earlier have an authorization issue vulnerability. This vulnerability stems from adding a public routing prefix to URIs, which can bypass authentication. Unauthenticated attackers can access protected management CGI handlers through routes with the .ico...
WordPress User Profile Builder has vulnerabilities related to permissions and access control.
WordPress User Profile Builder 4.0.3 and earlier versions have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from the activation function wppbaddmetatouseronactivation, which lacks validation for the role parameter before it is directly passed to...
WordPress Broken Link Checker: Code Injection Vulnerability
WordPress Broken Link Checker 2.4.14.1 and earlier versions have a code injection vulnerability. This vulnerability arises from insufficient validation of values before running doshortcode, which may allow unauthenticated attackers to execute arbitrary short codes. The href or src attributes...
Tandoor Recipes: Permissions, licensing, and access control issues
Versions of Tandoor Recipes prior to 2.6.12 have security vulnerabilities. This vulnerability arises from the fact that the StepViewSet and IngredientViewSet only filter by activity space, and they use role-level CustomIsUser checks instead of private recipe owners or shared predicates. When...
jfarthing84 Theme My Login Permission and Access Control Vulnerabilities
jfarthing84 Theme: Versions 7.2.1 and earlier have vulnerabilities related to permission authorization and access control. These vulnerabilities arise from plugins failing to correctly verify user identities before updating user passwords. This allows unauthorized attackers to change any user’s...
Mattermost input validation vulnerability
Mattermost versions 11.10.0 and earlier of 11.10.x series, 11.7.9 and earlier of 11.7.x series, 11.9.1 and earlier of 11.9.x series, and 11.8.5 and earlier of 11.8.x series have a input validation vulnerability. This vulnerability stems from the failure to verify the integrity of the SAML...
IBM i Authorization Issues Vulnerabilities
Versions of IBM i such as 7.3, 7.4, 7.5, and 7.6 have authorization-related vulnerabilities. These vulnerabilities stem from improper validation of transaction identifiers provided to attackers, which could allow unauthorized remote attackers to manipulate distributed transactions...
FasterXML Jackson-core resource management vulnerability
FasterXML Jackson-core versions prior to 2.16.0 through 2.18.10, 2.19.0 through 2.21.6, 2.22.0 through 2.22.2, 3.0.0 through 3.1.6, and 3.2.0 through 3.2.2 contain a resource management vulnerability. This vulnerability arises from the character input parser failing to apply the maxNameLength lim...
Gemini Labs Site Reviews: Authorization Issues and Vulnerabilities
Gemini Labs sites versions 8.3.4 and earlier have an authorization issue vulnerability. This vulnerability stems from a lack of authorization, which may allow attackers to exploit improperly configured access control levels...
IBM i Authorization Issues Vulnerabilities
Versions of IBM i 7.3, 7.4, 7.5, and 7.6 have authorization-related vulnerabilities. These vulnerabilities stem from improper authentication procedures, which may allow remotely authenticated attackers to bypass security restrictions...
Gravity Forms deserialization injection vulnerability
Versions of Gravity Forms prior to 3.1.1 have a deserialization injection vulnerability. This vulnerability stems from deserializing untrusted data, which may lead to object injection...
Mattermost information leakage vulnerability
Mattermost versions 11.9.1 and earlier of 11.9.x series, 11.8.5 and earlier of 11.8.x series, 11.7.10 and earlier of 11.7.x series, and 11.10.1 and earlier of 11.10.x series have a vulnerability related to information leakage. This vulnerability arises from the fact that the activity channel fiel...
Frappe ERPNext Authorization Issues Vulnerability
Frappe ERPNext versions prior to 15.121.0 and 16.34.0 have an authorization issue vulnerability. This vulnerability stems from certain endpoints that modify states not performing appropriate authorization checks. Users with low privileges can call methods that alter states without writing,...
53AI 53AIHub Authorization Issue Vulnerability
53AI and 53AIHub versions prior to 0.5.3 have an authorization issue vulnerability. This vulnerability stems from a lack of authentication; unverified attackers can overwrite arbitrary enterprise information by sending a PUT request to /api/enterprises/:id. Since UpdateEnterprise only performs...
sgl-project SGLang Input Validation Vulnerability
The sgl-project SGLang version 0.5.21 and earlier have a vulnerability related to input validation errors. This vulnerability arises from using the mmhashes value provided by the trusted caller as a multi-modal prefix for caching keys. A remote attacker can send different images with known or...
WordPress YITH PayPal Express Checkout for WooCommerce: Authorization Issues Vulnerability
WordPress YITH PayPal Express Checkout for WooCommerce 1.61.0 and earlier versions have a licensing issue vulnerability. This vulnerability stems from the lack of proper authorization, allowing unauthorized access or sensitive information leakage due to improperly configured access control levels...
WordPress Vitepos SQL Injection Vulnerability
WordPress Vitepos 3.6.1 and earlier versions have a SQL injection vulnerability. This vulnerability stems from improper cleaning of user input for the parameters srcby.val.start / srcby.val.end operator 'bt', and insufficient preparation of existing SQL queries. This leads to blind SQL injections...
MariaDB Server has a vulnerability related to input validation errors.
MariaDB Server versions prior to 10.6.28 10.6.x series, 10.11.19 10.11.x series, 11.4.13 11.4.x series, 11.8.9 11.8.x series, 12.3.3 12.3.x series, and 13.0.2 13.0.x series have a input validation vulnerability. This vulnerability arises from the ability of the mysql50 prefix to bypass the...
Anthropic Claude Agent SDK for Python: Input validation vulnerability
The Anthropic Claude Agent SDK for Python versions prior to 0.2.121 contain security vulnerabilities. These vulnerabilities stem from the resumption option being passed as an independent token to the Claude CLI without verification. Values starting with a dash are interpreted as independent CLI...
Arcadia Technology Crafty Controller has a vulnerability related to improper output processing
The Arcadia Technology Crafty Controller 4.10.8 and earlier versions have a vulnerability in output processing. This vulnerability stems from improper output escaping in the Audit Logs component. A remote, unauthenticated attacker can execute a stored-xss attack through HTTP header injection...
WordPress Salon Booking System Cross-Site Script Vulnerability
The WordPress Salon Booking System versions 10.31.9 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the sln parameter. It may lead to storage-based cross-site scripting attacks. Unverified attackers can injec...
Amauri CHAMPEAUX tarteaucitron.js cross-site scripting vulnerabilities
Amauri CHAMPEAUX’ tarteaucitron.js version 1.20.1 to 1.37.0 had a cross-site scripting vulnerability. This vulnerability stemmed from the getElemAttr function parsing attributes with a “data-” prefix. However, the https-only protection mechanism only validated attributes without a prefix, leading...
WordPress Flexible Quantity Authorization Issue Vulnerability
WordPress versions 2.3.23 and earlier have a vulnerability related to authorization. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...
Microsoft Office buffer error vulnerability
Microsoft Office has a buffer overflow vulnerability that stems from a heap buffer overflow, which may allow unauthorized attackers to execute code via the network...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
Microsoft Office Word numerical error vulnerability
Microsoft Office Word has a numerical error vulnerability, which stems from the rounding error in Microsoft Office Word. This vulnerability could allow unauthorized attackers to execute code via the network...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer error vulnerability. This vulnerability stems from an insecure pointer dereferencing issue in Microsoft Office Word, which may allow unauthorized attackers to leak information through the network...
WordPress Strong Testimonials: Authorization Issue Vulnerability
WordPress versions 3.3.12 and earlier have a vulnerability related to authorization. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit incorrectly configured access control levels...
Mat Trudel Bandit has a vulnerability in input validation.
In versions prior to 1.13.0 of Mat Trudel Bandit, version 0.6.0, there was an input validation vulnerability. This vulnerability stemmed from the lack of validation for the authority in HTTP/1 requests. As a result, unauthenticated remote attackers could set conn.host and conn.port to values that...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability, which stems from a heap buffer overflow in Microsoft Office Word. This vulnerability could allow unauthorized attackers to execute code via the network...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a security vulnerability caused by a numerical truncation error in Microsoft Office Word. This vulnerability may allow unauthorized attackers to execute code through the network...
WordPress Kirki cross-site scripting vulnerabilities
WordPress Kirki versions 6.2.0 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping, allowing for cross-site scripting attacks via Page Builder Text Content. Certified attackers with the kirkicontentaccess...
Libical buffer error vulnerability
Libical 4.0.6 and earlier versions have a buffer error vulnerability. This vulnerability stems from the icalvaluedecodeicalstring function, which performs decoding of inputs ending with a slash. During this process, the function accesses heap memory in src/libical/icalvalue.c beyond its bounds,...
DaKheera47 JobOps server-side request forgeing vulnerability
DaKheera47 JobOps 0.13.1 and earlier versions have a server-side request forgeing vulnerability. This vulnerability stems from the POST /api/manual-jobs/fetch handler, which allows for server-side request forgeing. Attackers can provide loopback, private, or cloud metadata addresses in the URL...
COOL cool-admin-midway Authorization Issue Vulnerability
COOL cool-admin-midway versions 8.0.0 and earlier have an authorization issue. This vulnerability stems from improper permission verification. An attacker with ordinary sys:role permissions can call the /admin/sys/role/info, update, or delete interfaces, allowing them to read, modify, or delete t...
Papermark authorization issue vulnerability
Papermark versions 0.22.0 and earlier have an authorization issue. This vulnerability stems from a lack of authorization verification in the data room viewer group API. It may allow authenticated users to send DELETE requests to delete viewership groups and share links for other teams, or to read...
zhontai Admin.Core Authorization Vulnerability
The zhontai Admin Core versions 10.1.0 and earlier have an authorization issue vulnerability. This vulnerability stems from an authorization bypass mechanism. Attackers can provide record IDs that exceed the allowed range, bypassing DataScope’s restrictions. Attackers who possess user or...
AtalayaLabs OxiCloud Authorization Issue Vulnerability
The AtalayaLabs OxiCloud versions 0.9.1 to 0.9.3 have an authorization issue vulnerability. This vulnerability stems from improper authorization handling. Attackers can access shared files or folder contents by making a GET /api/files/id request, even after password protection has been applied...
APITable Authorization Issue Vulnerability
APITable 1.14.0-beta and earlier versions have an authorization issue. This vulnerability stems from an authorization bypass, allowing authenticated users to read node descriptions of other spaces by providing a user-controllable nodeId. When a GET request is made to /node/nodeId/description, the...
Apache Airflow Permission Authorization and Access Control Vulnerabilities
Versions of Apache Airflow prior to 0.11.1 have vulnerabilities related to permission granting and access control. This vulnerability stems from the attachteampermissions function in the multi-team configuration, which grants global read access to audit logs for each team role. This could allow...
JetBrains DataloR path traversal vulnerability
Versions of JetBrains DataLore prior to 2026.2.1 have a path traversal vulnerability. This vulnerability stems from unauthenticated path traversal through the report blob endpoint, which may lead to the reading of arbitrary files...
JetBrains Junie CLI software supply chain issue vulnerabilities
Versions of JetBrains Junie CLI prior to version 26.8.3 have vulnerabilities related to the software supply chain. These vulnerabilities stem from misconfigured MCP servers in untrusted projects, which may lead to code execution...
Ivanti Connect Secure software supply chain issue vulnerabilities
The Ivanti Connect Secure version 22.8R2.4 has a software supply chain vulnerability. This vulnerability stems from the improper handling of trust in DSCache configuration data by the dsinvoked broker, which may lead to permission escalation to root access...