197146 matches found
Siemens RUGGEDCOM CROSSBOW authorization issue vulnerability
Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have an authorization issue vulnerability. This vulnerability stems from improper access restrictions on database queries used for subnet management. It may allow authenticated attackers to read, modify, or delete subnet configurations, resulting ...
NSPC911 rovr command injection vulnerability
NSPC911 rovr 0.10.3 and earlier versions have a command injection vulnerability. This vulnerability occurs when opening malicious file names on Windows that contain shell metacharacters like "&" via openfile, potentially leading to OS command injection and execution with user privileges...
The-40-Thieves obsidian-tc backend link vulnerability
The The-40-Thieves obsidian-tc versions before 1.3.1 have a security vulnerability. This vulnerability stems from reading the access control list, where the check for lexical paths includes checking resolved paths as well. This allows symbolic links within libraries that are allowed by wildcarded...
WordPress Pay for Payment for WooCommerce authorization issue vulnerability
WordPress Pay for Payment in WooCommerce 3.0.1 and earlier versions has an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, which may allow attackers to exploit improperly configured access control levels...
KeePassXC resource management error vulnerability
Versions of KeePassXC prior to 2.8.0-beta1 contain a resource management vulnerability. This vulnerability arises from the import of older versions of KeePass1/KDB, which retains the original Entry pointer after deleting metastream entries. When a specially crafted .kdb file contains a...
MikroTik RouterOS Authorization Issues Vulnerability
MikroTik RouterOS versions 7.0.0 to 7.24.5 have a vulnerability related to authorization. This vulnerability stems from improper authorization checks in the WinBox authentication process. Remotely authenticated users with low privileges can obtain full management access by specifying a...
Karuppiah Natarajan – Easy-PDF-Merge command injection vulnerability
Karuppiah Natarajan’s easy-pdf-merge tool versions from 0.1.0 to 0.2.6 and earlier contain a command injection vulnerability. This vulnerability stems from an OS command injection issue. Attackers can inject shell metacharacters into the source path, target path, or maxHeap option. By passing fil...
mher flower Cross-Site Request Forgery Vulnerability
Mher Flower versions prior to 2.2.0 had a cross-site request forgeing vulnerability. This vulnerability stemmed from the Tornado xsrfcookies being disabled and the absence of the SameSite header in OAuth session cookies. This made it vulnerable to cross-site request forgeing attacks. Attackers...
Parse Platform Parse Server Authorization Vulnerability
The Parse Platform’s Parse Server versions from 8.2.2 to 8.6.94 and from 9.0.0 to 9.10.1-alpha.14 contain authorization issue vulnerabilities. This vulnerability stems from GraphQL implicit control, which only applies to operations where requests are sent directly. It does not cover operations...
Parse Platform Parse Server Improper Exception Handling Vulnerability
The Parse Platform and Parse Server versions prior to 8.6.95, as well as versions from 9.0.0 to 9.10.2-alpha.3, have a vulnerability related to improper exception handling. This vulnerability arises from the lack of parsing of URL references in files when objects are passed to Cloud Code triggers...
Parse Platform Parse Server Authorization Vulnerability
The Parse Platform, versions prior to 8.6.93 and 9.0.0 up to 9.10.1-alpha.13, have an authorization issue vulnerability. This vulnerability stems from the lack of enforcing the identity scope’s protectedFields during count queries using the $relatedTo operator. As a result, the size of the...
Hyper-MCP encryption issue vulnerabilities
Hyper-MCP versions 0.8.3 and earlier have an encryption-related vulnerability. This vulnerability stems from the fact that cosignverifyargs accepts any signer identity and OIDC issuer by default. Improper signature verification may allow attackers to load malicious WebAssembly plugins, which can...
JupyterHub processing logic vulnerability
JupyterHub 6.0.1 and earlier versions have a processing logic vulnerability caused by identifier conflicts. Users who have been authenticated can override another user’s named server OAuth client by using hyphenated usernames. For example, a user with the username “alice-prod” can override the...
Hatchet Resource Management Error Vulnerability
Hatchet versions 0.110.5 and earlier have a resource management vulnerability. This vulnerability stems from unlimited resource allocation. Unauthenticated attackers can send arbitrary or concurrent request bodies via the SNS ingestion endpoint to POST /api/v1/sns/tenant/event. The SnsUpdate...
Konstanty Bialkowski libmodplug resource management error vulnerability
The Konstanty Bialkowski libmodplug versions 0.8.9.0 and 0.8.9.1 have a resource management vulnerability. This vulnerability arises from manipulation of the abcaddgchord function in the file src/loadabc.cpp within the ABC Music Format Parser component, resulting in excessive resource consumption...
Studio Saelix Sencho authorization issue vulnerability
The Studio Saelix sencho 0.94.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the improper handling of the X-Forwarded-For parameter in the Login Endpoint component’s file/api/auth/login, resulting in improper authentication. A remote attacker could...
Plastic Labs’ CEO authorization issue vulnerability
Plastic Labs versions 3.3.0 and earlier have an authorization issue. This vulnerability stems from improper authorization handling; the getorcreateworkspace function only checks the workspace declaration. As a result, holders of API keys with per-app or session scope can access workspace data...
WordPress MultiVendorX Authorization Issues Vulnerability
WordPress MultiVendorX 5.0.19 and earlier versions have a vulnerability related to authorization. This vulnerability arises from improper authorization settings. Attackers with the storeowner role can send POST requests via the settings REST endpoint, limited only by the editstores permission,...
Highwarden Super Store Finder has a vulnerability in input validation.
Highwarden Super Store Finder versions 3.8 and earlier have a security vulnerability. This vulnerability stems from incorrect handling of the parameters lat/lng in the file /products/superstorefinder/index.php, which may lead to SQL injection attacks...
OpenDocMan resource management error vulnerability
Versions of OpenDocMan from 2.4.0 to 2.10.0 have a resource management vulnerability. This vulnerability stems from a decompression bomb issue. Certified users can exploit this vulnerability by uploading specially crafted ODT, DOCX, or XLSX files. The XML entries in these files will be decompress...
Everyone’s AI MoAI-ADK backend link vulnerability
The All-Users AI MoAI-ADK 3.1.2 and earlier versions have a post-link vulnerability. This vulnerability stems from improper link resolution in the moai init template deployer. Attackers can use symbolic links to the.moai-tmp temporary path to overwrite files outside of the project, causing...
Helicone server request forgery vulnerability
Helicone v2025.08.21-1 and earlier versions have a server-side request forgeing vulnerability. This vulnerability stems from the Jawn webhook sender’s server-side request forgeing feature, which allows authenticated organizational users to access internal services by accessing hostnames that poin...
WordPress Academy LMS has vulnerabilities related to permissions and access control systems.
WordPress Academy LMS versions 4.0.3 and earlier have vulnerabilities related to permission permissions and access control. These vulnerabilities arise from the addchild function, which calls addrole'academystudent' on existing accounts before Store::link verifies the guardianship relationship...
WordPress PayPal deserialization injection vulnerability
WordPress Payee versions 4.8.2 and earlier have a deserialization injection vulnerability. This vulnerability stems from unvalidated PHP object injections, which may lead to remote code execution...
Themegoods Grand News Authorization Issue Vulnerability
Themegoods Grand News versions 3.4 and earlier have a vulnerability related to authorization issues. This vulnerability arises because unverified attackers can exploit improper access control mechanisms, allowing unauthorized modifications to data...
WordPress GeoDirectory cross-site scripting vulnerability
WordPress GeoDirectory versions 2.8.188 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping of the email parameter Contact Email custom field’s htmlvarname. It may lead to storage-based cross-site scripting attacks...
Themegoods DK authorization issue vulnerability
Themegoods DK 3.2.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from improper access control without authentication, which may allow attackers to modify data without proper authorization...
WordPress GeoDirectory code injection vulnerability
WordPress GeoDirectory 2.8.187 and earlier versions have a code injection vulnerability. This vulnerability stems from the designtype parameter, which involves local file inclusion. It may allow unauthenticated attackers to include and execute any.php file on the server, thereby bypassing access...
WordPress FunnelKit cross-site scripting vulnerability
WordPress FunnelKit 3.16.0.5 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping. It is exploited through the shippingfirstname parameter, allowing for storage-based cross-site scripting attacks. This...
Lulu AniWorld Downloader Authorization Issues Vulnerability
Lulu AniWorld Downloader versions prior to 5.3.0 have a vulnerability related to authorization. This vulnerability stems from the improper handling of authentication attempts by the /login POST handler in the WebUI. As a result, unauthorized attackers can enumerate usernames through the verifyuse...
WordPress Booking System SQL Injection Vulnerability
The WordPress Booking System 2.1.0.1 and earlier versions have a SQL injection vulnerability. This vulnerability arises from insufficient escaping of the currentmonth parameter provided to users, as well as inadequate preparation of existing SQL queries. This leads to time-based SQL injections...
Nexcess Kadence Blocks: Cross-site Scripting Vulnerabilities
Nexcess Kadence Blocks versions 3.7.12 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping, leading to a stored-xss attack through the Block Font Family Attribute. Attackers with author-level or higher permissions ca...
WordPress ACF Frontend Admin by DynamiApps: Cross-site Script Vulnerability
WordPress ACF Frontend Admin by DynamiApps version 3.28.36 and earlier has a cross-site scripting vulnerability. This vulnerability stems from the getdynamicvalues function’s text-level search and replacement operation on content, without proper HTML parsing. As a result, authenticated attackers...
WordPress Noptin Cross-Site Script Vulnerability
WordPress Noptin 4.3.10 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping. Unauthenticated attackers can inject arbitrary web scripts using the 'noptinfields' parameter such as firstname, resulting in...
tielabs jannah cross-site scripting vulnerabilities
Tielabs Jannah versions 7.6.5 and earlier have a cross-site scripting vulnerability. This vulnerability allows unauthenticated attackers to be exploited by cross-site scripting attacks...
WordPress Getwid Cross-Site Script Vulnerability
WordPress versions prior to 3.0.1 have a cross-site scripting vulnerability. This vulnerability stems from insufficient cleaning of the data-image-points parameter input and inadequate escaping of output data. It may allow authenticated attackers with privileges of contributor or higher to inject...
WordPress Events Manager SQL Injection Vulnerability
WordPress Events Manager versions 7.4.6 and earlier have a SQL injection vulnerability. This vulnerability stems from SQL injections by subscribers and can lead to SQL injection attacks...
WordPress Contact Form 7 has a vulnerability related to information leakage.
WordPress Contact Form 7 versions 5.0.7 and earlier have a vulnerability that leads to information leakage. This vulnerability occurs due to the exposure of sensitive data without authentication, which may result in the disclosure of sensitive information...
InnoShop input validation error vulnerability
InnoShop version 0.9.2 has a vulnerability in input validation. This vulnerability stems from improper handling of the source parameter in the AI Core MCP fileUpload tool. It allows authenticated administrators with the filescreate permission to use the file:// or php:// stream wrapper to read...
EIP Stack Group OpENER security vulnerability
EIP Stack Group OpENer v2.3.0 version contains a security vulnerability. This vulnerability arises from an out-of-bounds read in the unconnected explicit message path, which could be exploited by remote attackers to cause a denial-of-service attack...
ProcessMaker SQL Injection Vulnerability
Versions of ProcessMaker prior to 2026.14.3 have a SQL injection vulnerability. This vulnerability stems from the unvalidated orderby parameter in the GET /api/1.0/tasks endpoint. The orderby parameter is bound to user-controlled processrequests column names, which are used in the DB::raw SQL...
EIP Stack Group OpENER security vulnerability
EIP Stack Group OpENer v2.3 version contains a security vulnerability. This vulnerability stems from an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection path resolver, which could allow remote attackers to cause a denial-of-service attack...
Illumos-Gate resource management error vulnerability
The illumos-gate vulnerability involves a resource management issue. This vulnerability stems from the switcher function in the nscd frontend code located at usr/src/cmd/nscd/nscdfrontend.c. This function does not properly close file descriptors that are passed through the doorcall function but a...
John Broadway Pacioli authorization issue vulnerability
In versions of John Broadway Pacioli from 0.9.6 to 0.10.0, there is an authorization issue vulnerability. This vulnerability stems from the Pacioli-Guard documentation layer not checking whether the consent marker has been authorized for cancellation. This allows nested cancellation operations to...
Posit Shiny for Python: Path traversal vulnerability
Posit Shiny for Python versions 1.4.0 to 1.6.4 had a path traversal vulnerability. This vulnerability stemmed from the bookmark restoration function’s acceptance of stateid provided by the client. The function did not verify whether it was a single secure path segment before appending it to the...
MynaParrot Plug-N-Meet – A scalable, customizable, open-source web conferencing system with path traversal vulnerabilities
MynaParrot Plug-N-Meet – A scalable, customizable, open-source web conferencing system. Versions 2.5.2 and earlier have a path traversal vulnerability. This vulnerability stems from a path traversal issue with the whiteboard conversion endpoint. Attackers can provide a /../ sequence, use a...
Hayat Health Facilities Hayat Mobile Authorization Issue Vulnerability
Hayat Health Facilities Hayat Mobile versions 3.3.0 to 3.4.0 had an authorization issue vulnerability. This vulnerability stemmed from the use of client authentication, which could lead to authentication bypasses...
GnuTLS security vulnerabilities
GnuTLS version 3.8.13 has a security vulnerability. This vulnerability stems from improper certificate verification, causing the application to reject legitimate certificates of legitimate users, potentially leading to denial-of-service attacks...
GnuTLS security vulnerabilities
GnuTLS version 3.8.13 has security vulnerabilities. These vulnerabilities arise from the rejection of legitimate CA certificates, which may lead to denial-of-service attacks...
GnuTLS security vulnerabilities
GnuTLS version 3.8.13 has security vulnerabilities. These vulnerabilities stem from a failure to reject X.509 certificates that contain contradictory combinations of key usage KU and extended key usage EKU. This could allow attackers to obtain sensitive information...