WordPress FluentBoards authorization issue vulnerability

WordPress FluentBoards versions 2.1.0 and earlier have a licensing issue vulnerability. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...

Jumpserver code injection vulnerability

Versions of Jumpserver 4.10.17-lts and earlier contain a code injection vulnerability. This vulnerability stems from automated rendering based on Ansible, which allows attackers to evaluate template expressions under their control. Attackers with permission to create or execute affected automated...

Microsoft SQL Server resource management error vulnerabilities

Microsoft SQL Server has a resource management vulnerability that arises from insufficient or ineffective restrictions on resource allocation. This vulnerability could allow authorized attackers to cause denial-of-service attacks through the network...

Xorbits Xoscar deserialization injection vulnerability

Xorbits Xoscar versions 0.11.2 and earlier have a deserialization injection vulnerability. This vulnerability stems from the use of SocketChannel.recv, which passes unvalidated data to cloudpickle.loads. This triggers the pickle reduce utility before message type validation. Unauthorized remote...

Siemens RUGGEDCOM CROSSBOW SQL injection vulnerability

Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have a SQL injection vulnerability. This vulnerability stems from improper validation or cleaning of the filename of the uploaded firmware. It may allow authenticated attackers with specific privileges to execute arbitrary SQL commands on the...

The-40-Thieves obsidian-tc backend link vulnerability

The The-40-Thieves obsidian-tc versions before 1.3.1 have a security vulnerability. This vulnerability stems from reading the access control list, where the check for lexical paths includes checking resolved paths as well. This allows symbolic links within libraries that are allowed by wildcarded...

Parse Platform Parse Server Conflict Issues Vulnerability

The Parse Platform, including versions from 5.4.0 to 8.6.96, as well as 9.0.0 to 9.10.2-alpha.5, have a concurrency issue involving shared transaction batch processing states. This issue allows for transaction batch processing requests from one client to interfere with database writes by other...

Parse Platform Parse Server Authorization Vulnerability

The Parse Platform’s Parse Server versions from 8.2.2 to 8.6.94 and from 9.0.0 to 9.10.1-alpha.14 contain authorization issue vulnerabilities. This vulnerability stems from GraphQL implicit control, which only applies to operations where requests are sent directly. It does not cover operations...

MikroTik RouterOS Authorization Issues Vulnerability

MikroTik RouterOS versions 7.0.0 to 7.24.5 have a vulnerability related to authorization. This vulnerability stems from improper authorization checks in the WinBox authentication process. Remotely authenticated users with low privileges can obtain full management access by specifying a...

Parse Platform Parse Server Improper Exception Handling Vulnerability

The Parse Platform and Parse Server versions prior to 8.6.95, as well as versions from 9.0.0 to 9.10.2-alpha.3, have a vulnerability related to improper exception handling. This vulnerability arises from the lack of parsing of URL references in files when objects are passed to Cloud Code triggers...

Parse Platform Parse Server Authorization Vulnerability

The Parse Platform, versions prior to 8.6.93 and 9.0.0 up to 9.10.1-alpha.13, have an authorization issue vulnerability. This vulnerability stems from the lack of enforcing the identity scope’s protectedFields during count queries using the $relatedTo operator. As a result, the size of the...

mher flower Cross-Site Request Forgery Vulnerability

Mher Flower versions prior to 2.2.0 had a cross-site request forgeing vulnerability. This vulnerability stemmed from the Tornado xsrfcookies being disabled and the absence of the SameSite header in OAuth session cookies. This made it vulnerable to cross-site request forgeing attacks. Attackers...

WordPress MultiVendorX Authorization Issues Vulnerability

WordPress MultiVendorX 5.0.19 and earlier versions have a vulnerability related to authorization. This vulnerability arises from improper authorization settings. Attackers with the storeowner role can send POST requests via the settings REST endpoint, limited only by the editstores permission,...

Highwarden Super Store Finder has a vulnerability in input validation.

Highwarden Super Store Finder versions 3.8 and earlier have a security vulnerability. This vulnerability stems from incorrect handling of the parameters lat/lng in the file /products/superstorefinder/index.php, which may lead to SQL injection attacks...

JupyterHub processing logic vulnerability

JupyterHub 6.0.1 and earlier versions have a processing logic vulnerability caused by identifier conflicts. Users who have been authenticated can override another user’s named server OAuth client by using hyphenated usernames. For example, a user with the username “alice-prod” can override the...

Hatchet Resource Management Error Vulnerability

Hatchet versions 0.110.5 and earlier have a resource management vulnerability. This vulnerability stems from unlimited resource allocation. Unauthenticated attackers can send arbitrary or concurrent request bodies via the SNS ingestion endpoint to POST /api/v1/sns/tenant/event. The SnsUpdate...

Konstanty Bialkowski libmodplug resource management error vulnerability

The Konstanty Bialkowski libmodplug versions 0.8.9.0 and 0.8.9.1 have a resource management vulnerability. This vulnerability arises from manipulation of the abcaddgchord function in the file src/loadabc.cpp within the ABC Music Format Parser component, resulting in excessive resource consumption...

WordPress Booking System SQL Injection Vulnerability

The WordPress Booking System 2.1.0.1 and earlier versions have a SQL injection vulnerability. This vulnerability arises from insufficient escaping of the currentmonth parameter provided to users, as well as inadequate preparation of existing SQL queries. This leads to time-based SQL injections...

WordPress GeoDirectory code injection vulnerability

WordPress GeoDirectory 2.8.187 and earlier versions have a code injection vulnerability. This vulnerability stems from the designtype parameter, which involves local file inclusion. It may allow unauthenticated attackers to include and execute any.php file on the server, thereby bypassing access...

Helicone server request forgery vulnerability

Helicone v2025.08.21-1 and earlier versions have a server-side request forgeing vulnerability. This vulnerability stems from the Jawn webhook sender’s server-side request forgeing feature, which allows authenticated organizational users to access internal services by accessing hostnames that poin...

WordPress Academy LMS has vulnerabilities related to permissions and access control systems.

WordPress Academy LMS versions 4.0.3 and earlier have vulnerabilities related to permission permissions and access control. These vulnerabilities arise from the addchild function, which calls addrole'academystudent' on existing accounts before Store::link verifies the guardianship relationship...

WordPress PayPal deserialization injection vulnerability

WordPress Payee versions 4.8.2 and earlier have a deserialization injection vulnerability. This vulnerability stems from unvalidated PHP object injections, which may lead to remote code execution...

Themegoods DK authorization issue vulnerability

Themegoods DK 3.2.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from improper access control without authentication, which may allow attackers to modify data without proper authorization...

WordPress GeoDirectory cross-site scripting vulnerability

WordPress GeoDirectory versions 2.8.188 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping of the email parameter Contact Email custom field’s htmlvarname. It may lead to storage-based cross-site scripting attacks...

Themegoods Grand News Authorization Issue Vulnerability

Themegoods Grand News versions 3.4 and earlier have a vulnerability related to authorization issues. This vulnerability arises because unverified attackers can exploit improper access control mechanisms, allowing unauthorized modifications to data...

GnuTLS security vulnerabilities

GnuTLS version 3.8.13 has a security vulnerability. This vulnerability stems from improper certificate verification, causing the application to reject legitimate certificates of legitimate users, potentially leading to denial-of-service attacks...

GnuTLS security vulnerabilities

GnuTLS version 3.8.13 has security vulnerabilities. These vulnerabilities arise from the rejection of legitimate CA certificates, which may lead to denial-of-service attacks...

GnuTLS security vulnerabilities

GnuTLS version 3.8.13 has security vulnerabilities. These vulnerabilities stem from a failure to reject X.509 certificates that contain contradictory combinations of key usage KU and extended key usage EKU. This could allow attackers to obtain sensitive information...

Splunk Enterprise: Permissions licensing and access control issues

Versions of Splunk Enterprise prior to 10.4.3, 10.2.7, 10.0.10, and 9.4.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper access control mechanisms, which may allow unauthorized access...

Splunk Enterprise resource management error vulnerability

Splunk Enterprise versions prior to 10.4.3, 10.2.7, 10.0.10, and 9.4.15 have a resource management vulnerability caused by improper control of the resource lifecycle...

Splunk Enterprise processing logic error vulnerability

Versions of Splunk Enterprise prior to 10.4.3, 10.2.7 prior to version 10.2.7, 10.0.10 prior to version 10.0.0, and 9.4.15 prior to version 9.4.15 have a processing logic vulnerability that stems from a failure of the protection mechanism...

Foreman permission and access control vulnerabilities

Foreman has vulnerabilities related to permission checks and access control. These vulnerabilities stem from improper permission verification by the template preview endpoint. As a result, authenticated users with low-level Viewer permissions can submit requests to obtain sensitive data such as t...

GNOME libsoup buffer error vulnerability

GNOME libsoup has a buffer overflow vulnerability. This vulnerability arises when the max-incoming-payload-size is set to infinity 0. In such cases, libsoup’s SoupWebsocketConnection will expand the incoming GByteArray based on the length of the frame controlled by the attacker. This can lead to ...

GNOME libsoup buffer error vulnerability

GNOME libsoup has a buffer error vulnerability. This vulnerability arises from the handling of incoming WebSocket Pong frames. SoupWebsocketConnection sends the ::pong signal using a GByteArray pointer. Since this signal is declared to be passed as GBytes, processes that follow the GBytes API may...

GNOME libsoup buffer error vulnerability

GNOME libsoup has a buffer overflow vulnerability. This vulnerability arises because when libsoup constructs WebSocket client frames for extremely large outbound payloads, the size value passed to the GByteArray allocation API may be truncated. However, the masking routine still uses the full...

GNOME libsoup buffer error vulnerability

GNOME libsoup has a buffer overflow vulnerability. This vulnerability stems from libsoup’s failure to properly limit the total size of WebSocket messages when reassembling them into GByteArray objects. A remote attacker can send specially crafted fragments, leading to size truncation and ultimate...

Cockpit Files: Backlink Vulnerability

Cockpit Files has a postback link vulnerability. This vulnerability arises from Cockpit-Files’ improper handling of directories that contain symbolic links. Low-privilege local users can exploit the “Paste as owner” feature to change the ownership of files anywhere other than the intended...

Cockpit Files: Race Condition Issues

The Cockpit Files vulnerability involves a race condition issue. This issue arises due to a race condition occurring when the cockpit-files directory is created and its owner is assigned. Local, low-privilege attackers can exploit this by controlling the writable parent directory. By replacing th...

Environment Module Command Injection Vulnerability

Environment modules have a command injection vulnerability. This vulnerability arises when a local attacker places a maliciously named modulefile in a visible location within the victim’s MODULEPATH. When the victim uses Bash completion for the module or the ml command, the malicious module name,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.13 contains a security vulnerability. This vulnerability arises from the lack of verification of the cumulative length of multiple Read segments against the budget of the rqpages array. This may lead to accessing empty pointer slots during DMA mapping, resulting in empt...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from svcrdma not verifying the RPC/RDMA Read chunk position field provided by the remote client. As a result, integer underflow may occur, potentially exposing adjacent slab memory to the upper-level XDR decoder or causing...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the fact that the dm-array does not validate the fields of the array block header structure during reading. As a result, out-of-bound reads of the dm-bufio buffer occur when the count exceeds the capacity of the block...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from svcrdma not checking whether the size of the reply exceeds the pull-up buffer when handling RPC-over-RDMA inline replies. As a result, svcrdmaxblinearize copies data beyond the end of the buffer, causing damage to adjace...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the bpfgetstack function in bpf, which does not disable preemption during the process of obtaining per-CPU callchain entries and copying them to the caller’s buffer. This allows other tasks on the same CPU to reuse this...

OpenPrinting CUPS: CUPS input validation error vulnerability

OpenPrinting CUPS has a vulnerability in input validation. This vulnerability stems from the CUPS scheduler’s failure to properly validate usernames during the printer ACL verification and private attribute filtering, when the path exceeds the main authorization path. As a result, the comparison ...

Rsyslog buffer error vulnerability

Rsyslog has a buffer error vulnerability. This vulnerability stems from the RainerScript replace function in rsyslog, which incorrectly calculates the buffer size during string replacement. This leads to memory corruption. Unauthorized remote attackers can trigger a heap buffer overflow by sendin...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.16 to 6.18.57, 7.1.10 before the release, and 7.2 before the release contain security vulnerabilities. These vulnerabilities stem from the release of the AEAD conversion in RCU callbacks. The cryptofreeaead function may become dormant, which could lead to calls to...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 7.1 to 7.1.10 contain security vulnerabilities. These vulnerabilities stem from the use of the zcryptmsgtype6sendep11cprb function, which accesses and modifies the domain field in the EP11 CPRB payload by using a vulnerable struct overlays. Additionally, proper...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the absence of input validation in the xcrbmsgtotype6ep11cprbmsgx function. The function does not verify the ep11cprb structure and the minimum buffer length of subsequent payload fields. Additionally, the CEIL4 alignmen...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that stems from the lack of verification for allocated pointers in opteeffalendprotmem, which may lead to null pointer dereferencing...