IBM MQ Operator race condition vulnerability

IBM MQ Operator 2.0.29 and earlier versions of 2.0.x, 3.2.29 and earlier versions of 3.2.x, versions 3.3.0 to 3.4.0, 3.4.1, 3.5.0, 3.5.1 to 3.5.3, 3.6.0 to 3.6.4, 3.7.0 to 3.7.2, 3.8.0, 3.8.1, 3.9.0 to 3.9.2, and 4.0.0 to 4.0.4 have a race condition vulnerability. This vulnerability stems from...

IBM MQ Operator numerical error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0 through 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 contain a numerical error...

Itsourcecode Online Cake Ordering System: Input validation error vulnerability

The Itsourcecode Online Cake Ordering System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the cancel parameter in the confirm.php file, which may lead to SQL injection attacks...

IBM Concert information leakage vulnerability

The IBM Concert versions 1.0 to 3.0.0 have a vulnerability related to information leakage. This vulnerability arises from the fact that web page caches are stored locally, making them potentially readable by other users on the system, thereby leading to information leakage...

NetPBM buffer error vulnerability

NetPBM versions 11.16.00 and earlier have a buffer error vulnerability. This vulnerability stems from RastTopNM’s handling of Sun raster files with short color mappings, where there is a risk of heap out-of-bound reading. An attacker can create color mapping raster files whose pixel bytes exceed...

Diem project: Diem input validation error vulnerability

The Diem project has a vulnerability in input validation. This vulnerability stems from improper handling of the Referer parameter in the Sign-In component in the file dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/BasedmUserActions.class.php. It may lead to redirection, and attackers could...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper handling of HTTP header name case sensitivity. The protection mechanism that prevents request headers from being reflected in...

Viraj Potdar: Vulnerability in input validation of the criminal-management-system

The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from incorrect operations on the parameters offName/offID/ID/contact/gender/weapon/role in the Officers/addOfficer.php file, which may lead to SQL injection...

eremef.xyz Bandcamp Experimental Transport Assistant Authorization Issues Vulnerability

The eremef.xyz Bandcamp Experimental Transport Assistant versions 1.8.33-beta and earlier have a licensing issue vulnerability. This vulnerability stems from incorrect operations with the parameter remoteEnabled by unknown functions in the Database.ts file within the Remote Control Server...

IBM Cloud Pak System Encryption Vulnerability

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have encryption-related vulnerabilities. These vulnerabilities stem from the use of encryption algorithms that are weaker than expected, which may allow attackers to decrypt highly sensitive information...

IBM Cloud Pak System Cross-site Scripting Vulnerability

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have a cross-site scripting vulnerability. This vulnerability arises because web applications do not properly clean or encode user-provided inputs before storing and rendering them. As a result, authenticated attackers can input malicious JavaScri...

Alex MeTube Server Request Forgery Vulnerability

Alex MeTube’s versions as of September 28, 2026, have a server-side request forgeing vulnerability. This vulnerability stems from improper handling of the DownloadQueue.writefeedmetadatasync function in the Feed-metadata Thumbnail Fetch Handler component. It may lead to server-side request forger...

Donetick: Permissions and access control issues

Donetick versions 0.1.82 and earlier have a security vulnerability. This vulnerability stems from the CanDeleteHistory function in the History Deletion Handler component’s file internal/chore/model/model.go. The function improperly handles the AssignedTo parameter, leading to improper authorizati...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability arises due to XPathBuilder bypassing the default document type when documentType is set to InputSource. As a result, XML external entity reference...

aio-libs Async HTTP client/server framework – Session mechanism-related vulnerabilities

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a session mechanism vulnerability. This vulnerability stems from the Host-Only scope, which allows the removal of cookies from the parent domain. Accessing untrusted subdomains may result in the Host-Only protection of...

Antoine clawhost input validation vulnerability

Antoine clawhost versions 0.0.45 and earlier have a vulnerability in input validation. This vulnerability stems from an improper handling of the token parameter in the handleRequest function within the Reverse Proxy component. It may lead to open redirection, and remote attackers can exploit this...

LlamaFamily: Llama Chinese Community: Input validation error vulnerability

The LlamaFamily Llama Chinese community has a security vulnerability. This vulnerability stems from an error in the function getclassfromdynamicmodule in the Adapter Config component’s examples/chatgradionomerge.py file, where the parameter basemodelnameorpath is handled incorrectly, potentially...

IBM Concert cross-site scripting vulnerability

The IBM Concert versions 1.0 to 3.0.0 have a cross-site scripting vulnerability. This vulnerability stems from cross-site scripting issues, allowing unverified attackers to inject arbitrary JavaScript code into the Web UI, thereby altering intended functions and potentially leading to the exposur...

FossBilling information leakage vulnerability

FossBilling versions from 0.1.0 to 0.8.7 have security vulnerabilities. This vulnerability stems from the unauthenticated POST /api/guest/client/create endpoint returning unmasked error messages for existing email addresses. This could allow attackers to submit a target email address and compare...

Diem project Diem authorization issue vulnerability

The Diem project has a security vulnerability. This vulnerability stems from improper handling of unknown functions in the dmCorePlugin/lib/vendor/gapi/gapi.class.php file, which is part of the Google Analytics Client component. This could lead to improper certificate verification, allowing remot...

Sunkaifei FlyCms Trust Management Vulnerability

Sunkaifei FlyCms has a vulnerability related to trust management. This vulnerability arises from the use of default credentials. An attacker can exploit the FlyCms account and password “admin123” to log in by simply completing a graphical verification code. This allows them to obtain super...

Flarum Authorization Vulnerability

Versions of Flarum 2.0.0-beta.1 to 2.0.0-beta.8 have a permission-related vulnerability. This vulnerability stems from the lack of authentication and administrator checks on the TaskResource index endpoint. A remote attacker can send a GET request to /api/extension-manager-tasks to read task...

CCC Attestation Hardware-Backed Attestation in TLS: Input Verification Error Vulnerability

CCC Attestation Hardware-Backed Attestation in TLS versions committed from 731ca82 and earlier has a vulnerability in input validation. This vulnerability arises from the failure to bind early authentication evidence to TLS connections. Attackers who possess the extracted private key for...

Apache Camel authorization issue vulnerability

Versions of Apache Camel prior to 4.18.5, including 4.11.0 and 4.22.1 before 4.19.0, have an authorization issue vulnerability. This vulnerability stems from the camel-oauth processor not stopping the exchange process when authentication cannot be completed, allowing unauthenticated callers to...

Krayin Laravel-CRM authorization issue vulnerability

The Krayin Laravel-CRM versions prior to 2.2.7 have a vulnerability related to authorization. This vulnerability stems from insecure direct object references in the QuoteController, along with improper execution of data range checks for each user. As a result, authenticated users with limited...

Viraj Potdar Criminal Management System: Input validation error vulnerability

The Viraj Potdar Criminal Management System has a security vulnerability. This vulnerability stems from incorrect handling of parameters such as id/name/offName/crime/dob/arrDate/crimeDate/sex/address/folder/more in the Submission Form component’s file home.php. This could lead to SQL injection...

Apache Camel authorization issue vulnerability

Versions of Apache Camel from 4.15.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain an authorization issue vulnerability. This vulnerability stems from improper authentication. The security processor only verifies the token issuer when the introspection response contains an ISS declaration. When thi...

CrewAI AMP Suite server-side request forgeing vulnerability

CrewAI AMP Suite versions 1.15.28 and earlier have a server-side request forgeing vulnerability. This vulnerability stems from the fact that the SeleniumScrapingTool does not apply the validateurl private address checking, making it vulnerable to server-side request forgeing attacks. Attackers ca...

Matias Fontanini’s libtins buffer error vulnerability

Matias Fontanini’s libtins 4.6 and earlier versions have a buffer overflow vulnerability. This vulnerability stems from an out-of-bounds read in the DNS::soarecord::init function. Attackers can read content beyond the buffer boundary by providing SOA data that lacks a NUL terminator. This allows...

MISP information leakage vulnerability

Versions of MISP 2.5.48 and earlier contain a security vulnerability. This vulnerability arises from the server discarding the redacted and clionly flags specified in the module configuration during the rebuilding process. This could allow authenticated users who have access to the server setting...

IBM MQ Operator path traversal vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a path traversal...

Red Hat Enterprise Linux Input Validation Vulnerability

Red Hat Enterprise Linux versions 8, 9, and 10, as well as Red Hat Hardened Images version 1, have a vulnerability in input validation. This vulnerability arises from bootc, under the default container signature policy, automatically or manually upgrading variable image tags that fall under...

VideoLAN LibBluray buffer error vulnerability

VideoLAN libbluray 1.5.1 and earlier versions have a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in the clpiaccesspoint function. Attackers can trigger this issue by providing a ClipInfo file containing an empty EP-map fine table with numepfine set to zero and...

IBM MQ deserialization injection vulnerability

IBM MQ has a deserialization injection vulnerability. This vulnerability arises from authenticated attackers sending specially crafted asynchronous consumption requests, which can cause the queue manager proxy process to crash, potentially leading to a denial-of-service attack...

Automattic Sensei LMS Authorization Issue Vulnerability

Automattic Sensei LMS versions prior to 4.26.4 have an authorization issue vulnerability. This vulnerability stems from the old savenewmessage processing routine, which relies on the init action hook. This routine only verifies a generic nonce; it does not verify course registration or limit post...

Dell Application Installer encryption vulnerability

Versions of the Dell Application Installer prior to 26.09.0.1 have a vulnerability related to encryption. This vulnerability arises from the lack of encryption for sensitive data, which may allow unauthenticated attackers with local access to obtain unauthorized access...

Thelia processing logic vulnerability

Versions of Thelia prior to 3.1.5 and 3.2.4, as well as 3.2.x versions, have a processing logic vulnerability. This vulnerability arises from the fact that the number of coupon uses is only counted after the order payment is made. Certified customers can circumvent the coupon usage restrictions b...

IBM Concert encryption problem vulnerabilities

The IBM Concert versions 1.0 to 3.0.0 have encryption vulnerabilities. These vulnerabilities stem from the use of encryption algorithms that are weaker than expected, which may allow attackers to decrypt highly sensitive information...

Qt resource management error vulnerability

Versions of Qt from 4.1.0 to 6.8.9 and from 6.9.0 to 6.11.2 contain a resource management vulnerability. This vulnerability stems from uncontrolled recursion in the SVG parser and renderer. Attackers can exploit this vulnerability by using specially crafted SVG files with deeply nested elements,...

sgl-project SGLang Resource Management Error Vulnerability

The SGLang version 0.5.22 and earlier have a resource management vulnerability. This vulnerability stems from the Mooncake disaggregation backend accepting unvalidated decoding registration messages on the Prefill rank ZMQ PULL socket. An attacker with network proximity can send a large number of...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator 2.0.29 and earlier versions of 2.0.x, 3.2.29 and earlier versions of 3.2.x, versions before 3.4.0 of 3.3.x, 3.4.1, 3.5.0, 3.5.1 to 3.5.3, 3.6.4 and earlier versions of 3.6.x, 3.7.2 and earlier versions of 3.7.x, 3.8.0 to 3.8.1, 3.9.0 to 3.9.2, and 4.0.0 to 4.0.4 have a buffer erro...

Apache Camel session mechanism vulnerabilities

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to session mechanisms. This vulnerability arises from the AS2 component storing the signature materials of individual requests in a state that is shared across requests, rather than restricting...

Automattic Sensei LMS Authorization Issue Vulnerability

Automattic Sensei LMS versions prior to 4.26.4 have an authorization issue vulnerability. This vulnerability stems from improper access control in the AJAX handler for addnewmoduleterm. Only a generic nonce is verified, and only checks are performed for slug prefixes in manageoptions, without...

IBM Cloud Pak System Cross-site Scripting Vulnerability

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have a cross-site scripting vulnerability. This vulnerability stems from an exposure to HTML injection attacks, allowing remote authenticated attackers to inject malicious HTML code. When this code is viewed, it will execute in the victim’s web...

Apache Camel configuration error vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a configuration error vulnerability. This vulnerability stems from the createCorsHandler method in the Platform HTTP Vertx component, which sets Access-Control-Allow-Credentials to true beyond source checks...

Apache Camel input validation vulnerability

Versions of Apache Camel prior to 4.18.5, specifically 4.0.0 and 4.22.1 prior to 4.19.0, have a vulnerability related to input validation errors. This vulnerability arises from the Saga processor using a Long-Running-Action header without the Camel prefix to determine which saga the exchange...

IBM MQ Operator deserialization injection vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 pre-versions, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, and 4.0.0 through 4.0.4 have a deserialization injection vulnerability. This vulnerabilit...

NetPBM buffer error vulnerability

NetPBM versions 11.16.00 and earlier have a buffer overflow vulnerability. This vulnerability stems from an out-of-bounds write in the prloadimage function of converter/other/rast.c in rasttopnm. An attacker could provide a rasterfile with extremely small sizes and long run lengths, writing...

Docling Project: "docling-core" input validation error vulnerability

The Docling Project’s docling-core 2.102.0 and earlier versions have a vulnerability in input validation. This vulnerability stems from the fact that the ImageRef URI accepts pure file system paths and bypasses the allowimagefileuri restriction. Attackers can exploit this vulnerability by...

Yamaha VOCALOID6 Editor has a vulnerability in input validation.

Yamaha VOCALOID6 Editor 6.13.2 and earlier versions have a vulnerability in input validation. This vulnerability stems from improper restrictions on XML external entity references. Loading specially crafted project files may lead to unexpected communications, resulting in the exposure of sensitiv...