ThimPress LearnPress licensing issue vulnerabilities

ThimPress and LearnPress versions 4.4.10 and earlier have an authorization-related vulnerability. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...

CognicellAI Cognition configuration error vulnerability

CognicellAI Cognition versions prior to 0.13.0 have a security vulnerability. This vulnerability stems from the default setting of having the agent sandbox backend executed locally, and the REST/SSE API not enabling authentication. Attackers can create sessions using the POST /sessions endpoint...

Camunda 7 command injection vulnerability

Camunda 7 versions from 7.24.0 to 7.24.14, as well as versions from 7.23.0 to 7.23.17, have security vulnerabilities. These vulnerabilities stem from a flaw in AdhocQueryValidator.validate, which fails to check the subquery expression mappings exposed in the orQueries field of TaskQueryDto. This...

IBM MQ Operator race condition vulnerability

IBM MQ Operator 2.0.29 and earlier versions of 2.0.x, 3.2.29 and earlier versions of 3.2.x, versions 3.3.0 to 3.4.0, 3.4.1, 3.5.0, 3.5.1 to 3.5.3, 3.6.0 to 3.6.4, 3.7.0 to 3.7.2, 3.8.0, 3.8.1, 3.9.0 to 3.9.2, and 4.0.0 to 4.0.4 have a race condition vulnerability. This vulnerability stems from...

Nexcess Event Tickets Authorization Vulnerability

Nexcess Event Tickets versions 5.30.1 and earlier have an authorization issue vulnerability. This vulnerability stems from unauthorized authorization through user-controlled keys. Improper configuration of access control levels may lead to exploitation of these vulnerabilities...

IBM MQ Operator numerical error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0 through 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 contain a numerical error...

IBM MQ Operator resource management error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, and 4.0.0 through 4.0.4 contain a resource management...

Apache Camel code injection vulnerability

Apache Camel versions from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain security vulnerabilities. These vulnerabilities stem from the Camel HTTP producer, which allows inbound messages to override endpoint URIs through the CamelHttpUri and CamelRestHttpUri headers. It also parses property...

Itsourcecode Online Cake Ordering System: Input validation error vulnerability

The Itsourcecode Online Cake Ordering System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the cancel parameter in the confirm.php file, which may lead to SQL injection attacks...

IBM Concert information leakage vulnerability

The IBM Concert versions 1.0 to 3.0.0 have a vulnerability related to information leakage. This vulnerability arises from the fact that web page caches are stored locally, making them potentially readable by other users on the system, thereby leading to information leakage...

NetPBM buffer error vulnerability

NetPBM versions 11.16.00 and earlier have a buffer error vulnerability. This vulnerability stems from RastTopNM’s handling of Sun raster files with short color mappings, where there is a risk of heap out-of-bound reading. An attacker can create color mapping raster files whose pixel bytes exceed...

Apache Camel permission and access control vulnerabilities

Versions of Apache Camel from 4.12.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain vulnerabilities related to permission management and access control. These vulnerabilities arise from the PQC component writing key material to the disk with process default umask permissions, without restricting...

Diem project: Diem input validation error vulnerability

The Diem project has a vulnerability in input validation. This vulnerability stems from improper handling of the Referer parameter in the Sign-In component in the file dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/BasedmUserActions.class.php. It may lead to redirection, and attackers could...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper handling of HTTP header name case sensitivity. The protection mechanism that prevents request headers from being reflected in...

Viraj Potdar: Vulnerability in input validation of the criminal-management-system

The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from incorrect operations on the parameters offName/offID/ID/contact/gender/weapon/role in the Officers/addOfficer.php file, which may lead to SQL injection...

eremef.xyz Bandcamp Experimental Transport Assistant Authorization Issues Vulnerability

The eremef.xyz Bandcamp Experimental Transport Assistant versions 1.8.33-beta and earlier have a licensing issue vulnerability. This vulnerability stems from incorrect operations with the parameter remoteEnabled by unknown functions in the Database.ts file within the Remote Control Server...

IBM Cloud Pak System Encryption Vulnerability

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have encryption-related vulnerabilities. These vulnerabilities stem from the use of encryption algorithms that are weaker than expected, which may allow attackers to decrypt highly sensitive information...

IBM Cloud Pak System Cross-site Scripting Vulnerability

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have a cross-site scripting vulnerability. This vulnerability arises because web applications do not properly clean or encode user-provided inputs before storing and rendering them. As a result, authenticated attackers can input malicious JavaScri...

FossBilling authorization issue vulnerability

FossBilling versions from 0.8.4 to 0.8.6 had an authorization issue. This vulnerability stemmed from the use of hasManagePermission, which incorrectly allowed access to inactive non-core modules. This caused the system to bypass module access checks and manageSettings inspections, allowing...

Alex MeTube Server Request Forgery Vulnerability

Alex MeTube’s versions as of September 28, 2026, have a server-side request forgeing vulnerability. This vulnerability stems from improper handling of the DownloadQueue.writefeedmetadatasync function in the Feed-metadata Thumbnail Fetch Handler component. It may lead to server-side request forger...

Donetick: Permissions and access control issues

Donetick versions 0.1.82 and earlier have a security vulnerability. This vulnerability stems from the CanDeleteHistory function in the History Deletion Handler component’s file internal/chore/model/model.go. The function improperly handles the AssignedTo parameter, leading to improper authorizati...

IBM Concert: Vulnerability in output processing

The IBM Concert versions 1.0 to 3.0.0 have a vulnerability related to improper output processing. This vulnerability arises from the improper handling of special elements when writing to log files, which may allow unauthorized users to inject data into log messages...

Koozali SME Server has a vulnerability related to input validation errors.

The Koozali SME Server version 11.0rc1-215 has a security vulnerability. This vulnerability stems from the domain creation feature, which allows high-privilege attackers to inject reserved Apache configuration directives, damaging the httpd.conf file. As a result, Apache cannot be started after t...

Satya-Vinay Events-Management-System Authorization Vulnerability

Satya-Vinay Events-Management-System has a security vulnerability. This vulnerability stems from manipulating unknown parts of the project.sql file, which may allow files or directories to be accessed. Remote attackers can exploit this vulnerability...

Apache Camel information leakage vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain an information leakage vulnerability. This vulnerability stems from the fact that the OAuth2 client token in the HTTP component is cached globally on the JVM, and fields such as the request scope, resource indicator,...

MLJAR mercury input validation error vulnerability

The MLJAR Mercury version 3.0.0 to 3.2.4 had a security vulnerability. This vulnerability stemmed from the lack of a comma in BLOCKEDPATTERNS, allowing the concatenation of /lab and/api/terminals regular expression literals. As a result, API/terminals requests bypassed the anonymous endpoint...

MISP information leakage vulnerability

Versions of MISP 2.5.48 and earlier have a vulnerability related to information leakage. This vulnerability arises from logical errors during the event synchronization process, where labels that cannot be exported are only filtered once after traversing all reports, rather than being filtered...

WordPress WP Mailster code injection vulnerability

WordPress WP Mailster 1.9.1.0 and earlier versions have a code injection vulnerability. This vulnerability stems from improper control of file names by the include/require statements in PHP programs, which may lead to PHP local file inclusion...

ays-pro Quiz Maker by AYS – Cross-site Scripting Vulnerabilities

The ays-pro Quiz Maker versions 6.7.1.91 and earlier have a cross-site scripting vulnerability. This vulnerability arises from improper input during web page generation, and it may lead to reflection-type cross-site scripting attacks...

Frappe CRM authorization issue vulnerability

Frappe CRM versions prior to 1.74.0 have an authorization issue vulnerability. This vulnerability stems from a lack of authorization verification. Identified Sales Users can modify other users’ call records by providing any valid callsid value. They can also call upon the addnotetocalllog and...

rdesktop buffer error vulnerability

rdesktop versions 1.9.0 and earlier have a buffer error vulnerability. This vulnerability stems from the processrawbmpcache function in orders.c, which allows for out-of-buffer access to the heap. A malicious RDP server can exploit this vulnerability by sending raw bitmap cache commands with...

Chamilo LMS cross-site scripting vulnerabilities

Chamilo LMS versions 1.11.40 and earlier, 2.0.3 and earlier, as well as 3.0.1 and earlier, have a security vulnerability. This vulnerability stems from the incorrect handling of the parameter Name in the TicketManager::addProject function within the main/inc/lib/TicketManager.php file in the Tick...

Apache Camel information leakage vulnerability

Apache Camel HTTP versions from 4.0.0 to 4.18.5, as well as versions from 4.19.0 to 4.22.1, have a vulnerability related to information leakage. This vulnerability arises when the followRedirects=true parameter is used, and the OAuth2ClientConfigurer interceptor intercepts and matches AuthScope f...

IBM Concert encryption problem vulnerabilities

The IBM Concert versions 1.0 to 3.0.0 have encryption-related vulnerabilities, which stem from improper certificate verification...

IBM MQ numerical error vulnerability

IBM MQ has a numerical error vulnerability. This vulnerability stems from a buffer overflow issue when processing specially crafted object names, which may allow authenticated attackers to cause process instability...

Artifex MuPDF buffer error vulnerability

Artifex MuPDF versions 1.28.5 and earlier have a security vulnerability. This vulnerability stems from the freecharlist function in the Signature Locking component, where there is a double release of resources, which may lead to remote attacks...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a buffer error...

Kiprono Davies dairy-management-system input validation error vulnerability

Kiprono Davies’ dairy-management-system has a security vulnerability. This vulnerability stems from incorrect operations with the parameter epayrollno in the file employees/delete.php, which may lead to SQL injection...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper input validation in the Apache Camel Mail component. In the MimeMultipart data format, filters are not applied to the mail.smt...

Priyanshu Raj cli-bridge post-link vulnerability

Priyanshu Raj’s cli-bridge versions prior to 0.0.2 have a postfix link vulnerability. This vulnerability arises when fs.realpathSync throws an ENOENT error when there is no target available. In such cases, symbolic links pointing outside the working directory’s root directory bypass the...

Locust cross-site request forgeing vulnerability

Locust 2.46.7 and earlier versions have a cross-site request forgeing vulnerability. This vulnerability is due to a susceptibility to cross-site request forgery attacks. Attackers can trigger cross-site GET requests for /stop and/stats/reset by inducing operators to access malicious pages, thereb...

MISP input validation error vulnerability

Versions of MISP 2.5.48 and earlier contain a vulnerability related to input validation errors. This vulnerability arises from the remote event preview feature improperly validating tag value colors before directly writing them into inline CSS style properties. This can lead to arbitrary CSS...

Mindee docTR deserialization injection vulnerability

Mindee docTR 1.1.0 and earlier versions have a deserialization injection vulnerability. This vulnerability stems from the use of torch.load to load checkpoints in loadpretrainedparams, where weightsonly=True is not set. This allows attackers to inject malicious pickle payloads by controlling loca...

sgl-project SGLang Server Request Forgery Vulnerability

The sgl-project SGLang version 0.5.22 and earlier have a server-side request forgeing vulnerability. This vulnerability stems from improper handling of the bootstraphost and bootstrapport fields in the client context under the prefill/decode separation mode. As a result, server-side request...

YITH WooCommerce Product Bundles Authorization Issues Vulnerability

YITH WooCommerce Product Bundles 2.29.0 and earlier versions have a licensing issue vulnerability. This vulnerability stems from the lack of an authorization check, which may allow attackers to exploit incorrectly configured access control levels...

Apache Camel session mechanism vulnerabilities

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to the session mechanism. This vulnerability arises because the Thrift component deserializes incoming data into the shared defaultInstance rather than into a new copy, resulting in data leakag...

SourceCodester Inventory System Cross-site Scripting Vulnerabilities

The SourceCodester Inventory System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter HsnCode in the file/api/transactionshandler.php?action=savesale, which may lead to remote cross-site scripting attacks...

Viraj Potdar: Vulnerability in input validation of the criminal-management-system

The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file Officers/searchOff.php, specifically the parameter Search, which may lead to SQL injection attacks...

BlackBelt Technology PI Dashboard: Input validation error vulnerability

The BlackBelt Technology PI Dashboard versions prior to 0.8.0 have a vulnerability related to input validation errors. This vulnerability stems from improper handling of the cwd parameter by the unknown function in the WebSocket Gateway component, resulting in source validation errors that can be...

aircheng-org iWebShop Cross-Site Request Forgery Vulnerability

aircheng-org iWebShop versions 5 and earlier have a security vulnerability. This vulnerability stems from incorrect handling of parameters "password" and "repassword" in the "adminrepwd/adminrepwdact" function in the "Password Change" component. This could lead to cross-site request forgery...