Ellucian Banner Student Registration Self-Service Cross-site Scripting Vulnerability

The Ellucian Banner Student Registration Self-Service versions prior to 9.23 contain a cross-site scripting vulnerability. This vulnerability stems from the mepCode parameter in the /ssb/registration endpoint, which contains cross-site scripting. This could allow remote attackers to execute...

Apache Camel server-side request forge vulnerability

Versions of Apache Camel prior to 4.18.5, specifically 4.0.0 and 4.22.1 prior to 4.19.0, have a server-side request forge vulnerability. This vulnerability stems from the camel-as2 component extracting the asynchronous MDN return address from inbound messages and using it directly as the outbound...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.7.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper restrictions on external entities by the camel-smooks component. The default XML parser allows for the parsing of external...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a buffer error...

Aaron Pettengill: Vulnerability in input validation

Aaron Pettengill’s RVF 7.0.4 and earlier versions have a vulnerability in input validation. This vulnerability stems from prototype pollution in the setPath function, allowing unauthenticated attackers to override properties of shared built-in functions by leveraging the inherited Object.prototyp...

IBM MQ Operator path traversal vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a path traversal...

Webkul Aureus ERP information leakage vulnerability

Webkul Aureus ERP versions 1.6.0 and earlier have security vulnerabilities. These vulnerabilities stem from handling of the composer.json file, which allows sensitive information to be inserted into debugging code, potentially leading to information leakage...

IBM Cloud Pak System Cross-site Scripting Vulnerability

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have a cross-site scripting vulnerability. This vulnerability stems from an exposure to HTML injection attacks, allowing remote authenticated attackers to inject malicious HTML code. When this code is viewed, it will execute in the victim’s web...

Sunkaifei FlyCms input validation error vulnerability

Sunkaifei FlyCms has a vulnerability in input validation. This vulnerability stems from the batch assignment issue in the /ucenter/accountupdate interface. It allows authenticated users to submit additional User Bean fields to override protected account columns. This may result in changes such as...

IBM MQ deserialization injection vulnerability

IBM MQ has a deserialization injection vulnerability. This vulnerability arises from authenticated attackers sending specially crafted asynchronous consumption requests, which can cause the queue manager proxy process to crash, potentially leading to a denial-of-service attack...

BoxyHQ Enterprise SaaS Starter Kit Authorization Issues Vulnerability

BoxyHQ Enterprise SaaS Starter Kit versions 1.6.0 and earlier have an authorization issue vulnerability. This vulnerability arises from the payment routing process skipping the teampayments permission check, resulting in a lack of authorization. Certified MEMBER or ADMIN users can use functions...

sgl-project SGLang Resource Management Error Vulnerability

The SGLang version 0.5.22 and earlier have a resource management vulnerability. This vulnerability stems from the Mooncake disaggregation backend accepting unvalidated decoding registration messages on the Prefill rank ZMQ PULL socket. An attacker with network proximity can send a large number of...

HankCS HanLP: Input validation error vulnerability

The HankCS HanLP 2.1.0-beta.64 and earlier versions have a security vulnerability. This vulnerability stems from the operation of the loadword2vecasvocabtensor function in the hanlp/utils/torchutil.py file, which involves handling the vectors.vocab parameter, leading to deserialization attacks...

HankCS HanLP: Input validation error vulnerability

The hankcs hanlp 2.1.0-beta.64 and earlier versions have a security vulnerability. This vulnerability stems from the improper handling of the classpath parameter in the hanlp.load function within the Model Config Loading component’s plugins/hanlpcommon/hanlpcommon/reflection.py file. This allows...

LlamaFamily: Llama Chinese Community: Input validation error vulnerability

The LlamaFamily Llama Chinese community has a security vulnerability. This vulnerability stems from an error in the function getclassfromdynamicmodule in the Adapter Config component’s examples/chatgradionomerge.py file, where the parameter basemodelnameorpath is handled incorrectly, potentially...

Apache Camel code injection vulnerability

Apache Camel versions from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain security vulnerabilities. These vulnerabilities stem from the Camel HTTP producer, which allows inbound messages to override endpoint URIs through the CamelHttpUri and CamelRestHttpUri headers. It also parses property...

IBM MQ resource management error vulnerability

The IBM MQ version 9.4.5.0 to 9.4.5.1 contains a resource management vulnerability. This vulnerability arises from the ability of authenticated users to send specially crafted messages, causing consumption applications to crash and potentially leading to denial-of-service attacks...

aio-libs Async HTTP client/server framework Resource management error vulnerability

The aio-libs Async HTTP client/server framework, versions 2.0.0 to 3.14.4, has a resource management vulnerability. This vulnerability stems from the handling of multipart requests, which retains an unlimited number of open file descriptors. When the processing program uses Request.post,...

aio-libs Async HTTP client/server framework: Input validation error vulnerability

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a vulnerability related to input validation errors. This vulnerability arises when an attacker can send an absolute-form request, causing Request.scheme to use the request-target scheme data controlled by the attacker...

Cal.com Cal.diy Authorization Issue Vulnerability

Cal.com versions prior to 6.2.0 and cal.diy versions prior to 6.2.0 have an authorization issue vulnerability. This vulnerability stems from improper handling of the parameter ID in the createWebhookProcedure function in the Webhook Handler component. This could lead to remote authorization...

aio-libs Async HTTP client/server framework Resource management error vulnerability

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a resource management error vulnerability. This vulnerability stems from the Max-Age mechanism, which may cause overflows and skip closing connections. This could allow attackers to temporarily exhaust the connection po...

Integratec SQL injection vulnerability

Integratec has a SQL injection vulnerability. This vulnerability stems from an UNION-type SQL injection in the sInfo parameter sent via POST to the /login/apLogin.aspx/start endpoint. It may allow attackers to steal credentials and user information from the database, causing errors and...

WSO2 API Manager authorization issue vulnerability

WSO2 API Manager versions prior to 3.2.0.4.34, 3.2.1.54, 4.1.0.218, 4.2.0.156, 4.3.0.67, 4.4.0.30, and 4.5.0.14; WSO2 Universal Gateway versions prior to 4.5.0.14; WSO2 API Control Plane versions prior to 4.5.0.15; and Forgerock Key Manager Component versions prior to 1.0.0.4, 1.1.0.2, and 1.1.5....

Krayin Laravel-CRM: Server-side request forgeing vulnerability

In versions prior to 2.2.7 of krayin Laravel-CRM, there was a server-side request forgeing vulnerability. This vulnerability stemmed from an SSRF filter, allowing users with webhook permissions to access internal addresses through DNS rebinding. Attackers could return public addresses during the...

Apache Camel log information leakage vulnerability

Apache Camel MLLP components versions 4.0.0 to 4.18.5 and 4.19.0 to 4.22.1 contain a vulnerability related to log information leakage. This vulnerability arises due to the default activation of the logPhi option, with some paths not following this setting. As a result, patient data contained in H...

aio-libs Async HTTP client/server framework: Input validation error vulnerability

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a vulnerability related to input validation errors. This vulnerability stems from the use of a pure Python parser that accepts ambiguous HTTP request frames. This could allow unvalidated attackers to inject HTTP request...

WordPress Classified Listing: Input validation error vulnerability

WordPress Classified Listing versions 6.1.5 and earlier have a vulnerability related to input validation errors. This vulnerability stems from improper validation of a specified number of inputs, which may allow attackers to access features that are not correctly constrained by ACLs...

WordPress FluentCommunity authorization issue vulnerability

WordPress FluentCommunity versions 2.11.0 and earlier have a permission-related vulnerability. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...

Kiprono Davies dairy-management-system information leakage vulnerability

Kiprono Davies’ dairy-management-system has a security vulnerability. This vulnerability stems from improper handling of the parameter ‘fname’ in the ‘delivery/checkfarmer.json.php’ file within the AJAX Endpoint component. It may lead to information leakage...

Sunkaifei FlyCms Authorization Issue Vulnerability

The Sunkaifei FlyCms has an authorization issue. This vulnerability stems from the lack of authorization verification in the ActionService.counter function. Additionally, the checkRowOwner method does not validate ownership, allowing authenticated users to modify the content rows of other users...

Apache Camel information leakage vulnerability

Apache Camel versions from 4.0.0 to 4.18.5, as well as versions from 4.19.0 to 4.22.1, have a vulnerability related to information leakage. This vulnerability arises because the CXF component, when handling exceptions that are not declared by the SOAP consumer, returns exception messages and stac...

openGauss-server openGauss-connector-jdbc code injection vulnerability

The openGauss-server, openGauss-connector-jdbc versions 1.0.0, 1.0.1, 1.1.0, 2.0.0, 2.1.0, 3.0.0 to 3.0.5, 3.1.0 to 3.1.1, 5.0.0 to 5.0.3, 5.1.0, 5.0.0-RC1, 6.0.0-RC1, 6.0.0 to 6.0.6, 7.0.0-RC1, 7.0.0-RC2, and 7.0.0-RC3 have a code injection vulnerability. This vulnerability arises from LogFactor...

MLJAR Mercury authorization issue vulnerability

The MLJAR mercury version prior to 3.2.6 has an authorization issue vulnerability. This vulnerability stems from the default lack of token deployment, allowing anonymous clients to create Jupyter kernels and send executerequest messages containing arbitrary Python code. Additionally, the endpoint...

Diem project Diem encryption issue vulnerabilities

The Diem project has a vulnerability related to encryption. This vulnerability stems from the use of a cryptographically weak pseudorandom number generator in the dmString::random function found in the file dmCorePlugin/lib/basic/dmString.php. This may lead to the generation of predictable random...

DeepPavlov Team: Vulnerability in input validation

The DeepPavlov team has identified a security vulnerability in versions 1.7.0 and earlier of DeepPavlov. This vulnerability stems from improper handling of the resolve function in the Config Reference Resolver component’s deeppavlov/core/common/params.py file, which may lead to remote code...

Apache Camel path traversal vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a path traversal vulnerability. This vulnerability arises due to the Azure Files component failing to normalize the construction of absolute paths by concatenating configuration directories with lists of server...

Frappe CRM authorization issue vulnerability

Frappe CRM versions prior to 1.74.0 have an authorization issue vulnerability. This vulnerability stems from a lack of authorization verification. Identified Sales Users can modify other users’ call records by providing any valid callsid value. They can also call upon the addnotetocalllog and...

AXA NLP.js input validation error vulnerability

AXA NLP.js version 4.27.0 has a security vulnerability. This vulnerability stems from an incorrect handling of the condition parameter in the Evaluator.walkFunction function within the Condition Expression Pipeline component located at packages/evaluator/src/evaluator.js. This could lead to code...

Satya-Vinay Events-Management-System Input Verification Vulnerability

Satya-Vinay Events-Management-System has a security vulnerability. This vulnerability stems from improper handling of parameters such as id, name, title, year, gender, fromdate, and todate by the mysqliquery function in the Registration-Edit Handler component’s doedit.php file. This may lead to S...

Frappe Helpdesk Authorization Issue Vulnerability

Frappe Helpdesk versions prior to 1.26.0 have an authorization issue vulnerability. This vulnerability stems from an authorization bypass mechanism. Certified portal users can create tickets by providing a raisedby value, pretending to be other customers. Attackers can use the victim’s email to...

Apache Camel information leakage vulnerability

Apache Camel versions from 4.0.0 to 4.18.5, as well as versions from 4.19.0 to 4.22.1, have a vulnerability related to information leakage. This vulnerability arises from the Mina component, which writes abnormal information directly back to the socket when exchange failures occur. This may lead ...

IBM Cloud Pak System Encryption Vulnerability

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have encryption-related vulnerabilities. These vulnerabilities stem from the use of encryption algorithms that are weaker than expected, which may allow attackers to decrypt highly sensitive information...

GrandNode cross-site scripting vulnerabilities

GrandNode 2.3.0 and earlier versions have a security vulnerability. This vulnerability stems from the improper handling of file operations by the Html.Raw function in the Product Description Handler component. Specifically, the function processes the file...

IBM Concert information leakage vulnerability

The IBM Concert versions 1.0 to 3.0.0 have a vulnerability related to information leakage. This vulnerability stems from exposing pattern suggestions, which may lead to information leakage...

IBM Concert: Vulnerability in output processing

The IBM Concert versions 1.0 to 3.0.0 have a vulnerability related to improper output processing. This vulnerability arises from the improper handling of special elements when writing to log files, which may allow unauthorized users to inject data into log messages...

Element X iOS Input Validation Vulnerability

Element X iOS versions prior to 26.05.0 have a vulnerability in input validation. This vulnerability arises from failing to check the URL allowlist when parsing io.element.call://. It may allow attackers to trick users into opening a specially crafted URL, causing the WKWebView in the call...

aio-libs Async HTTP client/server framework – Session mechanism-related vulnerabilities

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a session mechanism vulnerability. This vulnerability stems from the Host-Only scope, which allows the removal of cookies from the parent domain. Accessing untrusted subdomains may result in the Host-Only protection of...

aio-libs Async HTTP client/server framework – Session mechanism-related vulnerabilities

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a security vulnerability. This vulnerability stems from the lack of enforcing the Secure attribute for shared cookies. As a result, shared cookies marked as Secure may be sent via unencrypted requests...

Webkul Aureus ERP authorization issue vulnerability

Webkul Aureus ERP versions 1.6.0 and earlier have a vulnerability related to authorization. This vulnerability arises from incorrect handling of the parameter “Password” in the file plugins/webkul/security/src/Filament/Resources/UserResource/Schemas/UserForm.php, which may lead to overly weak...

Emergence libdisplay-info buffer error vulnerability

Emersion libdisplay-info versions 0.4.0 and earlier have a buffer error vulnerability. This vulnerability stems from the DisplayID v1 parser in displayid.c, which fails to properly handle cases where the data block declaration length exceeds the segment length. Attackers can exploit this by...