ThimPress LearnPress licensing issue vulnerabilities

ThimPress and LearnPress versions 4.4.10 and earlier have an authorization-related vulnerability. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...

CognicellAI Cognition configuration error vulnerability

CognicellAI Cognition versions prior to 0.13.0 have a security vulnerability. This vulnerability stems from the default setting of having the agent sandbox backend executed locally, and the REST/SSE API not enabling authentication. Attackers can create sessions using the POST /sessions endpoint...

Camunda 7 command injection vulnerability

Camunda 7 versions from 7.24.0 to 7.24.14, as well as versions from 7.23.0 to 7.23.17, have security vulnerabilities. These vulnerabilities stem from a flaw in AdhocQueryValidator.validate, which fails to check the subquery expression mappings exposed in the orQueries field of TaskQueryDto. This...

IBM MQ Operator race condition vulnerability

IBM MQ Operator 2.0.29 and earlier versions of 2.0.x, 3.2.29 and earlier versions of 3.2.x, versions 3.3.0 to 3.4.0, 3.4.1, 3.5.0, 3.5.1 to 3.5.3, 3.6.0 to 3.6.4, 3.7.0 to 3.7.2, 3.8.0, 3.8.1, 3.9.0 to 3.9.2, and 4.0.0 to 4.0.4 have a race condition vulnerability. This vulnerability stems from...

IBM MQ Operator numerical error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0 through 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 contain a numerical error...

IBM MQ Operator resource management error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, and 4.0.0 through 4.0.4 contain a resource management...

Itsourcecode Online Cake Ordering System: Input validation error vulnerability

The Itsourcecode Online Cake Ordering System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the cancel parameter in the confirm.php file, which may lead to SQL injection attacks...

IBM Concert information leakage vulnerability

The IBM Concert versions 1.0 to 3.0.0 have a vulnerability related to information leakage. This vulnerability arises from the fact that web page caches are stored locally, making them potentially readable by other users on the system, thereby leading to information leakage...

NetPBM buffer error vulnerability

NetPBM versions 11.16.00 and earlier have a buffer error vulnerability. This vulnerability stems from RastTopNM’s handling of Sun raster files with short color mappings, where there is a risk of heap out-of-bound reading. An attacker can create color mapping raster files whose pixel bytes exceed...

Diem project: Diem input validation error vulnerability

The Diem project has a vulnerability in input validation. This vulnerability stems from improper handling of the Referer parameter in the Sign-In component in the file dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/BasedmUserActions.class.php. It may lead to redirection, and attackers could...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper handling of HTTP header name case sensitivity. The protection mechanism that prevents request headers from being reflected in...

Viraj Potdar: Vulnerability in input validation of the criminal-management-system

The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from incorrect operations on the parameters offName/offID/ID/contact/gender/weapon/role in the Officers/addOfficer.php file, which may lead to SQL injection...

eremef.xyz Bandcamp Experimental Transport Assistant Authorization Issues Vulnerability

The eremef.xyz Bandcamp Experimental Transport Assistant versions 1.8.33-beta and earlier have a licensing issue vulnerability. This vulnerability stems from incorrect operations with the parameter remoteEnabled by unknown functions in the Database.ts file within the Remote Control Server...

IBM Cloud Pak System Encryption Vulnerability

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have encryption-related vulnerabilities. These vulnerabilities stem from the use of encryption algorithms that are weaker than expected, which may allow attackers to decrypt highly sensitive information...

IBM Cloud Pak System Cross-site Scripting Vulnerability

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have a cross-site scripting vulnerability. This vulnerability arises because web applications do not properly clean or encode user-provided inputs before storing and rendering them. As a result, authenticated attackers can input malicious JavaScri...

FossBilling authorization issue vulnerability

FossBilling versions from 0.8.4 to 0.8.6 had an authorization issue. This vulnerability stemmed from the use of hasManagePermission, which incorrectly allowed access to inactive non-core modules. This caused the system to bypass module access checks and manageSettings inspections, allowing...

Alex MeTube Server Request Forgery Vulnerability

Alex MeTube’s versions as of September 28, 2026, have a server-side request forgeing vulnerability. This vulnerability stems from improper handling of the DownloadQueue.writefeedmetadatasync function in the Feed-metadata Thumbnail Fetch Handler component. It may lead to server-side request forger...

Donetick: Permissions and access control issues

Donetick versions 0.1.82 and earlier have a security vulnerability. This vulnerability stems from the CanDeleteHistory function in the History Deletion Handler component’s file internal/chore/model/model.go. The function improperly handles the AssignedTo parameter, leading to improper authorizati...

Satya-Vinay Events-Management-System Authorization Vulnerability

Satya-Vinay Events-Management-System has a security vulnerability. This vulnerability stems from manipulating unknown parts of the project.sql file, which may allow files or directories to be accessed. Remote attackers can exploit this vulnerability...

Apache Camel information leakage vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain an information leakage vulnerability. This vulnerability stems from the fact that the OAuth2 client token in the HTTP component is cached globally on the JVM, and fields such as the request scope, resource indicator,...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability arises due to XPathBuilder bypassing the default document type when documentType is set to InputSource. As a result, XML external entity reference...

aio-libs Async HTTP client/server framework: Input validation error vulnerability

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a vulnerability related to input validation errors. This vulnerability stems from the use of a pure Python parser that accepts ambiguous HTTP request frames. This could allow unvalidated attackers to inject HTTP request...

aio-libs Async HTTP client/server framework Resource management error vulnerability

The aio-libs Async HTTP client/server framework, versions 2.0.0 to 3.14.4, has a resource management vulnerability. This vulnerability stems from the handling of multipart requests, which retains an unlimited number of open file descriptors. When the processing program uses Request.post,...

aio-libs Async HTTP client/server framework – Session mechanism-related vulnerabilities

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a session mechanism vulnerability. This vulnerability stems from the Host-Only scope, which allows the removal of cookies from the parent domain. Accessing untrusted subdomains may result in the Host-Only protection of...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation. This vulnerability arises when the FopProducer creates a TransformerFactory by enabling only FEATURESECUREPROCESSING, without restricting access to external resources...

Antoine clawhost input validation vulnerability

Antoine clawhost versions 0.0.45 and earlier have a vulnerability in input validation. This vulnerability stems from an improper handling of the token parameter in the handleRequest function within the Reverse Proxy component. It may lead to open redirection, and remote attackers can exploit this...

LlamaFamily: Llama Chinese Community: Input validation error vulnerability

The LlamaFamily Llama Chinese community has a security vulnerability. This vulnerability stems from an error in the function getclassfromdynamicmodule in the Adapter Config component’s examples/chatgradionomerge.py file, where the parameter basemodelnameorpath is handled incorrectly, potentially...

IBM Concert cross-site scripting vulnerability

The IBM Concert versions 1.0 to 3.0.0 have a cross-site scripting vulnerability. This vulnerability stems from cross-site scripting issues, allowing unverified attackers to inject arbitrary JavaScript code into the Web UI, thereby altering intended functions and potentially leading to the exposur...

FossBilling information leakage vulnerability

FossBilling versions from 0.1.0 to 0.8.7 have security vulnerabilities. This vulnerability stems from the unauthenticated POST /api/guest/client/create endpoint returning unmasked error messages for existing email addresses. This could allow attackers to submit a target email address and compare...

Diem project Diem authorization issue vulnerability

The Diem project has a security vulnerability. This vulnerability stems from improper handling of unknown functions in the dmCorePlugin/lib/vendor/gapi/gapi.class.php file, which is part of the Google Analytics Client component. This could lead to improper certificate verification, allowing remot...

Sunkaifei FlyCms Trust Management Vulnerability

Sunkaifei FlyCms has a vulnerability related to trust management. This vulnerability arises from the use of default credentials. An attacker can exploit the FlyCms account and password “admin123” to log in by simply completing a graphical verification code. This allows them to obtain super...

Flarum Authorization Vulnerability

Versions of Flarum 2.0.0-beta.1 to 2.0.0-beta.8 have a permission-related vulnerability. This vulnerability stems from the lack of authentication and administrator checks on the TaskResource index endpoint. A remote attacker can send a GET request to /api/extension-manager-tasks to read task...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper input validation of document metadata by the Tika component. The component fails to filter and map the parsed metadata keys to...

CCC Attestation Hardware-Backed Attestation in TLS: Input Verification Error Vulnerability

CCC Attestation Hardware-Backed Attestation in TLS versions committed from 731ca82 and earlier has a vulnerability in input validation. This vulnerability arises from the failure to bind early authentication evidence to TLS connections. Attackers who possess the extracted private key for...

Apache Camel authorization issue vulnerability

Versions of Apache Camel prior to 4.18.5, including 4.11.0 and 4.22.1 before 4.19.0, have an authorization issue vulnerability. This vulnerability stems from the camel-oauth processor not stopping the exchange process when authentication cannot be completed, allowing unauthenticated callers to...

Krayin Laravel-CRM authorization issue vulnerability

The Krayin Laravel-CRM versions prior to 2.2.7 have a vulnerability related to authorization. This vulnerability stems from insecure direct object references in the QuoteController, along with improper execution of data range checks for each user. As a result, authenticated users with limited...

Viraj Potdar Criminal Management System: Input validation error vulnerability

The Viraj Potdar Criminal Management System has a security vulnerability. This vulnerability stems from incorrect handling of parameters such as id/name/offName/crime/dob/arrDate/crimeDate/sex/address/folder/more in the Submission Form component’s file home.php. This could lead to SQL injection...

Apache Camel authorization issue vulnerability

Versions of Apache Camel from 4.15.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain an authorization issue vulnerability. This vulnerability stems from improper authentication. The security processor only verifies the token issuer when the introspection response contains an ISS declaration. When thi...

CrewAI AMP Suite server-side request forgeing vulnerability

CrewAI AMP Suite versions 1.15.28 and earlier have a server-side request forgeing vulnerability. This vulnerability stems from the fact that the SeleniumScrapingTool does not apply the validateurl private address checking, making it vulnerable to server-side request forgeing attacks. Attackers ca...

Apache Camel information leakage vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5, as well as from 4.19.0 to 4.22.1, have a vulnerability related to information leakage. This vulnerability arises when the routing at the backend of the consumer in the gRPC component fails. As a result, exception messages are written into the gRPC...

Apache Camel information leakage vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5, as well as from 4.19.0 to 4.22.1, have a vulnerability related to information leakage. This vulnerability arises when the Knative HTTP consumer, during processing failures, returns exception messages containing class names, messages, and stack traces...

Matias Fontanini’s libtins buffer error vulnerability

Matias Fontanini’s libtins 4.6 and earlier versions have a buffer overflow vulnerability. This vulnerability stems from an out-of-bounds read in the DNS::soarecord::init function. Attackers can read content beyond the buffer boundary by providing SOA data that lacks a NUL terminator. This allows...

MISP information leakage vulnerability

Versions of MISP 2.5.48 and earlier contain a security vulnerability. This vulnerability arises from the server discarding the redacted and clionly flags specified in the module configuration during the rebuilding process. This could allow authenticated users who have access to the server setting...

IBM MQ Operator path traversal vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a path traversal...

IBM Concert information leakage vulnerability

The IBM Concert versions 1.0 to 3.0.0 have a vulnerability related to information leakage. This vulnerability stems from exposing pattern suggestions, which may lead to information leakage...

Red Hat Enterprise Linux Input Validation Vulnerability

Red Hat Enterprise Linux versions 8, 9, and 10, as well as Red Hat Hardened Images version 1, have a vulnerability in input validation. This vulnerability arises from bootc, under the default container signature policy, automatically or manually upgrading variable image tags that fall under...

VideoLAN LibBluray buffer error vulnerability

VideoLAN libbluray 1.5.1 and earlier versions have a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in the clpiaccesspoint function. Attackers can trigger this issue by providing a ClipInfo file containing an empty EP-map fine table with numepfine set to zero and...

IBM MQ deserialization injection vulnerability

IBM MQ has a deserialization injection vulnerability. This vulnerability arises from authenticated attackers sending specially crafted asynchronous consumption requests, which can cause the queue manager proxy process to crash, potentially leading to a denial-of-service attack...

Automattic Sensei LMS Authorization Issue Vulnerability

Automattic Sensei LMS versions prior to 4.26.4 have an authorization issue vulnerability. This vulnerability stems from the old savenewmessage processing routine, which relies on the init action hook. This routine only verifies a generic nonce; it does not verify course registration or limit post...

Dell Application Installer encryption vulnerability

Versions of the Dell Application Installer prior to 26.09.0.1 have a vulnerability related to encryption. This vulnerability arises from the lack of encryption for sensitive data, which may allow unauthenticated attackers with local access to obtain unauthorized access...