196839 matches found
Kiprono Davies dairy-management-system input validation error vulnerability
Kiprono Davies’ dairy-management-system has a security vulnerability. This vulnerability stems from incorrect operations with the parameter epayrollno in the file employees/delete.php, which may lead to SQL injection...
SourceCodester Inventory System Cross-site Scripting Vulnerabilities
The SourceCodester Inventory System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter HsnCode in the file/api/transactionshandler.php?action=savesale, which may lead to remote cross-site scripting attacks...
IBM Cloud Pak System Cross-site Scripting Vulnerability
IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have a cross-site scripting vulnerability. This vulnerability arises because web applications do not properly clean or encode user-provided inputs before storing and rendering them. As a result, authenticated attackers can input malicious JavaScri...
Diem project: Diem input validation error vulnerability
The Diem project has a vulnerability in input validation. This vulnerability stems from improper handling of the Referer parameter in the Sign-In component in the file dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/BasedmUserActions.class.php. It may lead to redirection, and attackers could...
Artifex MuPDF buffer error vulnerability
Artifex MuPDF versions 1.28.5 and earlier have a security vulnerability. This vulnerability stems from the freecharlist function in the Signature Locking component, where there is a double release of resources, which may lead to remote attacks...
Frappe CRM authorization issue vulnerability
Frappe CRM versions prior to 1.81.2 have an authorization issue vulnerability. This vulnerability stems from the lack of a permission hook, resulting in insufficient authorization checks. Certified Sales users can access the CRM notification records of other users. Attackers can query the...
PT Norther Lights Production Map – SVG file upload vulnerability
PT Norther Lights Production Map: Versions prior to SVG 8.16.1 have an arbitrary file upload vulnerability. This vulnerability stems from allowing the upload of dangerous types of files, which may lead to the uploading of a Web Shell to the web server...
MLJAR mercury: Vulnerability due to improper output processing
The MLJAR Mercury version 3.0.0 to 3.2.11 had a security vulnerability. This vulnerability stemmed from mr.Markdown not cleaning up the original HTML when converting it into HTML, and then assigning that HTML to the ipyWidgets.HTML receiver. This could lead to cross-site scripting attacks. Active...
IBM Concert information leakage vulnerability
The IBM Concert versions 1.0 to 3.0.0 have a vulnerability related to information leakage. This vulnerability arises from the fact that web page caches are stored locally, making them potentially readable by other users on the system, thereby leading to information leakage...
Apache Camel deserialization injection vulnerability
Versions of Apache Camel Camel-Jgroups 4.0.0 to 4.18.5 and 4.19.0 to 4.22.1 contain a deserialization injection vulnerability. This vulnerability stems from the deserialization of untrusted data. The JGroupsEndpoint.createExchangeMessage method does not apply the java.io.ObjectInputFilter; instea...
Apache Camel input validation vulnerability
Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper input validation in the Apache Camel Mail component. In the MimeMultipart data format, filters are not applied to the mail.smt...
Apache Camel permission and access control vulnerabilities
Versions of Apache Camel from 4.12.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain vulnerabilities related to permission management and access control. These vulnerabilities arise from the PQC component writing key material to the disk with process default umask permissions, without restricting...
Themeum Tutor LMS – eLearning and online course solution, cross-site scripting vulnerabilities
Themeum Tutor LMS – eLearning and online course solutions versions 4.1.2 and earlier have a cross-site scripting vulnerability. This vulnerability arises from improper input during web page generation, making it susceptible to stored-xss attacks...
eremef.xyz Bandcamp Experimental Transport Assistant Authorization Issues Vulnerability
The eremef.xyz Bandcamp Experimental Transport Assistant versions 1.8.33-beta and earlier have a licensing issue vulnerability. This vulnerability stems from incorrect operations with the parameter remoteEnabled by unknown functions in the Database.ts file within the Remote Control Server...
IBM Concert encryption problem vulnerabilities
The IBM Concert versions 1.0 to 3.0.0 have encryption-related vulnerabilities, which stem from improper certificate verification...
sgl-project SGLang Resource Management Error Vulnerability
The SGLang version 0.5.19 and earlier have a resource management vulnerability. This vulnerability stems from improper handling of the Scheduler.expertdistributionhandle function in the Expert-Distribution Recording Endpoint component. It may lead to a denial-of-service attack...
IBM Concert: Vulnerability in output processing
The IBM Concert versions 1.0 to 3.0.0 have a vulnerability related to improper output processing. This vulnerability arises from the improper handling of special elements when writing to log files, which may allow unauthorized users to inject data into log messages...
Krayin Laravel-CRM authorization issue vulnerability
The Krayin Laravel-CRM version 2.2.7 and earlier have a security vulnerability. This vulnerability stems from improper object-level authorization in the EmailController’s write operations. It allows authorized users with limited permissions to manipulate other users’ emails by providing digital...
Satya-Vinay Events-Management-System Authorization Vulnerability
Satya-Vinay Events-Management-System has a security vulnerability. This vulnerability stems from manipulating unknown parts of the project.sql file, which may allow files or directories to be accessed. Remote attackers can exploit this vulnerability...
IBM MQ Operator buffer error vulnerability
IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0 through 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 have a buffer error...
IBM MQ Operator buffer error vulnerability
IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a buffer error...
IBM Cloud Pak System Encryption Vulnerability
IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have encryption-related vulnerabilities. These vulnerabilities stem from the use of encryption algorithms that are weaker than expected, which may allow attackers to decrypt highly sensitive information...
IBM MQ numerical error vulnerability
IBM MQ has a numerical error vulnerability. This vulnerability stems from a buffer overflow issue when processing specially crafted object names, which may allow authenticated attackers to cause process instability...
Viraj Potdar: Vulnerability in input validation of the criminal-management-system
The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from incorrect operations on the parameters offName/offID/ID/contact/gender/weapon/role in the Officers/addOfficer.php file, which may lead to SQL injection...
IBM MQ Operator buffer error vulnerability
IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a buffer error...
IBM MQ Operator resource management error vulnerability
IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, and 4.0.0 through 4.0.4 contain a resource management...
NetPBM buffer error vulnerability
NetPBM versions 11.16.00 and earlier have a buffer error vulnerability. This vulnerability stems from RastTopNM’s handling of Sun raster files with short color mappings, where there is a risk of heap out-of-bound reading. An attacker can create color mapping raster files whose pixel bytes exceed...
Viraj Potdar: Vulnerability in input validation of the criminal-management-system
The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file Officers/searchOff.php, specifically the parameter Search, which may lead to SQL injection attacks...
Antoine clawhost input validation vulnerability
Antoine clawhost versions 0.0.45 and earlier have a vulnerability in input validation. This vulnerability stems from an improper handling of the token parameter in the handleRequest function within the Reverse Proxy component. It may lead to open redirection, and remote attackers can exploit this...
rdesktop buffer error vulnerability
rdesktop versions 1.9.0 and earlier have a buffer error vulnerability. This vulnerability stems from the processrawbmpcache function in orders.c, which allows for out-of-buffer access to the heap. A malicious RDP server can exploit this vulnerability by sending raw bitmap cache commands with...
aircheng-org iWebShop Cross-Site Request Forgery Vulnerability
aircheng-org iWebShop versions 5 and earlier have a security vulnerability. This vulnerability stems from incorrect handling of parameters "password" and "repassword" in the "adminrepwd/adminrepwdact" function in the "Password Change" component. This could lead to cross-site request forgery...
IBM MQ Operator numerical error vulnerability
IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0 through 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 contain a numerical error...
Chamilo LMS cross-site scripting vulnerabilities
Chamilo LMS versions 1.11.40 and earlier, 2.0.3 and earlier, as well as 3.0.1 and earlier, have a security vulnerability. This vulnerability stems from the incorrect handling of the parameter Name in the TicketManager::addProject function within the main/inc/lib/TicketManager.php file in the Tick...
Apache Camel information leakage vulnerability
Apache Camel HTTP versions from 4.0.0 to 4.18.5, as well as versions from 4.19.0 to 4.22.1, have a vulnerability related to information leakage. This vulnerability arises when the followRedirects=true parameter is used, and the OAuth2ClientConfigurer interceptor intercepts and matches AuthScope f...
Apache Camel input validation vulnerability
Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation. This vulnerability arises when the FopProducer creates a TransformerFactory by enabling only FEATURESECUREPROCESSING, without restricting access to external resources...
.NET Platform AdventureWorks Authorization Issue Vulnerability
The .NET Platform AdventureWorks has an authorization issue vulnerability. This vulnerability stems from an improper authentication mechanism in the AddApplicationServices function within the Catalog API component’s file src/Catalog.API/Extensions/Extensions.cs. This could allow remote attackers ...
Diem project Diem authorization issue vulnerability
The Diem project has a security vulnerability. This vulnerability stems from improper handling of unknown functions in the dmCorePlugin/lib/vendor/gapi/gapi.class.php file, which is part of the Google Analytics Client component. This could lead to improper certificate verification, allowing remot...
IBM MQ Operator buffer error vulnerability
IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 have a buffer error vulnerability. This...
Apache Camel input validation vulnerability
Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability arises due to XPathBuilder bypassing the default document type when documentType is set to InputSource. As a result, XML external entity reference...
BlackBelt Technology PI Dashboard: Input validation error vulnerability
The BlackBelt Technology PI Dashboard versions prior to 0.8.0 have a vulnerability related to input validation errors. This vulnerability stems from improper handling of the cwd parameter by the unknown function in the WebSocket Gateway component, resulting in source validation errors that can be...
sgl-project SGLang Server Request Forgery Vulnerability
The sgl-project SGLang version 0.5.22 and earlier have a server-side request forgeing vulnerability. This vulnerability stems from improper handling of the bootstraphost and bootstrapport fields in the client context under the prefill/decode separation mode. As a result, server-side request...
aio-libs Async HTTP client/server framework Resource management error vulnerability
The aio-libs Async HTTP client/server framework, versions 2.0.0 to 3.14.4, has a resource management vulnerability. This vulnerability stems from the handling of multipart requests, which retains an unlimited number of open file descriptors. When the processing program uses Request.post,...
Apache Camel configuration error vulnerability
Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a configuration error vulnerability. This vulnerability stems from the enableCORS function of the Jetty component using the default CrossOriginFilter configuration, which accepts requests from any origin and allows...
Apache Camel information leakage vulnerability
Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain an information leakage vulnerability. This vulnerability stems from the fact that the OAuth2 client token in the HTTP component is cached globally on the JVM, and fields such as the request scope, resource indicator,...
Apache Camel input validation vulnerability
Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper handling of HTTP header name case sensitivity. The protection mechanism that prevents request headers from being reflected in...
Donetick: Permissions and access control issues
Donetick versions 0.1.82 and earlier have a security vulnerability. This vulnerability stems from the CanDeleteHistory function in the History Deletion Handler component’s file internal/chore/model/model.go. The function improperly handles the AssignedTo parameter, leading to improper authorizati...
Frappe CRM authorization issue vulnerability
Frappe CRM versions prior to 1.74.0 have an authorization issue vulnerability. This vulnerability stems from a lack of authorization verification. Identified Sales Users can modify other users’ call records by providing any valid callsid value. They can also call upon the addnotetocalllog and...
Itsourcecode Online Cake Ordering System: Input validation error vulnerability
The Itsourcecode Online Cake Ordering System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the cancel parameter in the confirm.php file, which may lead to SQL injection attacks...
Alex MeTube Server Request Forgery Vulnerability
Alex MeTube’s versions as of September 28, 2026, have a server-side request forgeing vulnerability. This vulnerability stems from improper handling of the DownloadQueue.writefeedmetadatasync function in the Feed-metadata Thumbnail Fetch Handler component. It may lead to server-side request forger...
clidey WhoDB path traversal vulnerability
clidey WhoDB versions prior to 0.104.0 to 0.135.0 have a path traversal vulnerability. This vulnerability arises from path traversal when the DuckDB file system functions are executed through the editor. An attacker can log into DuckDB without credentials and use functions like readtext, readblob...