Ellucian Banner Student Registration Self-Service Cross-site Scripting Vulnerability

The Ellucian Banner Student Registration Self-Service versions prior to 9.23 contain a cross-site scripting vulnerability. This vulnerability stems from the mepCode parameter in the /ssb/registration endpoint, which contains cross-site scripting. This could allow remote attackers to execute...

Apache Camel server-side request forge vulnerability

Versions of Apache Camel prior to 4.18.5, specifically 4.0.0 and 4.22.1 prior to 4.19.0, have a server-side request forge vulnerability. This vulnerability stems from the camel-as2 component extracting the asynchronous MDN return address from inbound messages and using it directly as the outbound...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.7.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper restrictions on external entities by the camel-smooks component. The default XML parser allows for the parsing of external...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a buffer error...

Aaron Pettengill: Vulnerability in input validation

Aaron Pettengill’s RVF 7.0.4 and earlier versions have a vulnerability in input validation. This vulnerability stems from prototype pollution in the setPath function, allowing unauthenticated attackers to override properties of shared built-in functions by leveraging the inherited Object.prototyp...

IBM MQ Operator path traversal vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a path traversal...

Webkul Aureus ERP information leakage vulnerability

Webkul Aureus ERP versions 1.6.0 and earlier have security vulnerabilities. These vulnerabilities stem from handling of the composer.json file, which allows sensitive information to be inserted into debugging code, potentially leading to information leakage...

IBM Cloud Pak System Cross-site Scripting Vulnerability

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have a cross-site scripting vulnerability. This vulnerability stems from an exposure to HTML injection attacks, allowing remote authenticated attackers to inject malicious HTML code. When this code is viewed, it will execute in the victim’s web...

Sunkaifei FlyCms input validation error vulnerability

Sunkaifei FlyCms has a vulnerability in input validation. This vulnerability stems from the batch assignment issue in the /ucenter/accountupdate interface. It allows authenticated users to submit additional User Bean fields to override protected account columns. This may result in changes such as...

Webkul Aureus ERP authorization issue vulnerability

Webkul Aureus ERP versions 1.6.0 and earlier have a vulnerability related to authorization. This vulnerability arises from incorrect handling of the parameter “Password” in the file plugins/webkul/security/src/Filament/Resources/UserResource/Schemas/UserForm.php, which may lead to overly weak...

IBM MQ deserialization injection vulnerability

IBM MQ has a deserialization injection vulnerability. This vulnerability arises from authenticated attackers sending specially crafted asynchronous consumption requests, which can cause the queue manager proxy process to crash, potentially leading to a denial-of-service attack...

BoxyHQ Enterprise SaaS Starter Kit Authorization Issues Vulnerability

BoxyHQ Enterprise SaaS Starter Kit versions 1.6.0 and earlier have an authorization issue vulnerability. This vulnerability arises from the payment routing process skipping the teampayments permission check, resulting in a lack of authorization. Certified MEMBER or ADMIN users can use functions...

sgl-project SGLang Resource Management Error Vulnerability

The SGLang version 0.5.22 and earlier have a resource management vulnerability. This vulnerability stems from the Mooncake disaggregation backend accepting unvalidated decoding registration messages on the Prefill rank ZMQ PULL socket. An attacker with network proximity can send a large number of...

HankCS HanLP: Input validation error vulnerability

The HankCS HanLP 2.1.0-beta.64 and earlier versions have a security vulnerability. This vulnerability stems from the operation of the loadword2vecasvocabtensor function in the hanlp/utils/torchutil.py file, which involves handling the vectors.vocab parameter, leading to deserialization attacks...

HankCS HanLP: Input validation error vulnerability

The hankcs hanlp 2.1.0-beta.64 and earlier versions have a security vulnerability. This vulnerability stems from the improper handling of the classpath parameter in the hanlp.load function within the Model Config Loading component’s plugins/hanlpcommon/hanlpcommon/reflection.py file. This allows...

markdown-it resource management error vulnerability

The markdown-it versions prior to 14.3.2 and 15.0.2 have a resource management error vulnerability. This vulnerability arises when enabling typographer: true, causing a custom Markdown input to lead to quadratic processing time under the smartquotes rule, potentially resulting in denial of servic...

LlamaFamily: Llama Chinese Community: Input validation error vulnerability

The LlamaFamily Llama Chinese community has a security vulnerability. This vulnerability stems from an error in the function getclassfromdynamicmodule in the Adapter Config component’s examples/chatgradionomerge.py file, where the parameter basemodelnameorpath is handled incorrectly, potentially...

Apache Camel code injection vulnerability

Apache Camel versions from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain security vulnerabilities. These vulnerabilities stem from the Camel HTTP producer, which allows inbound messages to override endpoint URIs through the CamelHttpUri and CamelRestHttpUri headers. It also parses property...

Apache Camel information leakage vulnerability

Apache Camel versions from 4.0.0 to 4.18.5, as well as versions from 4.19.0 to 4.22.1, have a vulnerability related to information leakage. This vulnerability arises from the Mina component, which writes abnormal information directly back to the socket when exchange failures occur. This may lead ...

IBM MQ resource management error vulnerability

The IBM MQ version 9.4.5.0 to 9.4.5.1 contains a resource management vulnerability. This vulnerability arises from the ability of authenticated users to send specially crafted messages, causing consumption applications to crash and potentially leading to denial-of-service attacks...

rdesktop buffer error vulnerability

rdesktop versions 1.9.0 and earlier have a buffer error vulnerability. This vulnerability stems from the processbmpcache2 function in orders.c, which allows for out-of-buffer read access to the heap. Attackers can exploit this by sending uncompressed orders with excessively large width or height,...

aio-libs Async HTTP client/server framework – Session mechanism-related vulnerabilities

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a security vulnerability. This vulnerability stems from the lack of enforcing the Secure attribute for shared cookies. As a result, shared cookies marked as Secure may be sent via unencrypted requests...

aio-libs Async HTTP client/server framework Resource management error vulnerability

The aio-libs Async HTTP client/server framework, versions 2.0.0 to 3.14.4, has a resource management vulnerability. This vulnerability stems from the handling of multipart requests, which retains an unlimited number of open file descriptors. When the processing program uses Request.post,...

aio-libs Async HTTP client/server framework: Input validation error vulnerability

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a vulnerability related to input validation errors. This vulnerability arises when an attacker can send an absolute-form request, causing Request.scheme to use the request-target scheme data controlled by the attacker...

Diem project Diem cross-site scripting vulnerabilities

The Diem project has a security vulnerability. This vulnerability stems from an improper handling of the parameter ‘text’ in the dmBaseLinkTag::text function within the dmCorePlugin/lib/view/html/link/dmBaseLinkTag.php file, located in the dmWidget component. This could lead to cross-site scripti...

Cal.com Cal.diy Authorization Issue Vulnerability

Cal.com versions prior to 6.2.0 and cal.diy versions prior to 6.2.0 have an authorization issue vulnerability. This vulnerability stems from improper handling of the parameter ID in the createWebhookProcedure function in the Webhook Handler component. This could lead to remote authorization...

Kiprono Davies dairy-management-system input validation error vulnerability

Kiprono Davies’ dairy-management-system has a security vulnerability. This vulnerability stems from improper handling of the parameter ‘fno/farmer’ in the ‘payment/pay.php’ file using the ‘mysqlirealescapestring’ function. It may lead to SQL injection attacks, and attackers could exploit this...

WordPress Essential Addons for Elementor: Permission and access control issues

WordPress Essential Addons for Elementor 6.8.5 and earlier versions have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper permission allocation, which may lead to unauthorized privilege escalation...

Subhajitkhan Online-Clinic-Management-System Cross-Site Script Vulnerability

The subhajitkhan online-clinic-management-system has a security vulnerability. This vulnerability stems from incorrect handling of the msg parameter in the feedback.php file, which may lead to cross-site scripting attacks...

aircheng-org iWebShop Authorization Issue Vulnerability

aircheng-org iWebShop versions 5 and earlier have a vulnerability related to authorization issues. This vulnerability stems from incorrect handling of the parameter userid in the sendmessagemobile function found in the controllers/simple.php file. It may lead to the recovery of weak passwords, an...

xqq libaribcaption buffer error vulnerability

The xqq libaribcaption version 1.1.0 to 1.1.2 contains a buffer error vulnerability. This vulnerability stems from the global out-of-bounds read in DecoderImpl::HandleGLGR. No upper-bound checks were performed on the kLatinSpecialTable, resulting in reading beyond the boundaries of 78 tables...

aio-libs Async HTTP client/server framework Resource management error vulnerability

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a resource management error vulnerability. This vulnerability stems from the Max-Age mechanism, which may cause overflows and skip closing connections. This could allow attackers to temporarily exhaust the connection po...

aio-libs Async HTTP client/server framework – Session mechanism-related vulnerabilities

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a session mechanism vulnerability. This vulnerability stems from the Host-Only scope, which allows the removal of cookies from the parent domain. Accessing untrusted subdomains may result in the Host-Only protection of...

Integratec SQL injection vulnerability

Integratec has a SQL injection vulnerability. This vulnerability stems from an UNION-type SQL injection in the sInfo parameter sent via POST to the /login/apLogin.aspx/start endpoint. It may allow attackers to steal credentials and user information from the database, causing errors and...

WSO2 API Manager authorization issue vulnerability

WSO2 API Manager versions prior to 3.2.0.4.34, 3.2.1.54, 4.1.0.218, 4.2.0.156, 4.3.0.67, 4.4.0.30, and 4.5.0.14; WSO2 Universal Gateway versions prior to 4.5.0.14; WSO2 API Control Plane versions prior to 4.5.0.15; and Forgerock Key Manager Component versions prior to 1.0.0.4, 1.1.0.2, and 1.1.5....

Krayin Laravel-CRM: Server-side request forgeing vulnerability

In versions prior to 2.2.7 of krayin Laravel-CRM, there was a server-side request forgeing vulnerability. This vulnerability stemmed from an SSRF filter, allowing users with webhook permissions to access internal addresses through DNS rebinding. Attackers could return public addresses during the...

ztxz16 fastllm buffer error vulnerability

The ztxz16 fastllm 0.1.8.2 and earlier versions have a buffer overflow vulnerability. This vulnerability stems from the improper handling of the parameter len in the GGUFBuffer::ReadString function found in the file thirdparty/gguf/gguf.cpp. This allows an attacker to launch a remote attack...

GeoVision GV-ASManager buffer error vulnerability

The GeoVision GV-ASManager 6.3.0 version has a buffer overflow vulnerability. This vulnerability stems from the default connection port of the Web Server, which has a stack buffer overflow under the GeoWebServer.exe process, potentially leading to a denial-of-service attack...

HivePress code injection vulnerability

HivePress versions 1.7.32 and earlier have a code injection vulnerability, which stems from improper control of code generation, potentially leading to remote code execution...

Micromatch Picomatch Resource Management Error Vulnerability

Micromatch Picomatch versions 4.0.7 and earlier have a resource management vulnerability. This vulnerability stems from the lack of handling of single-branch repeated extglob patterns in analyzeRepeatedExtglob in the lib/parse.js file. As a result, regular expressions may perform exponential...

FusionPBX Members: Command Injection Vulnerability

FusionPBX members running versions 5.4.4 and earlier, as well as 5.5.7 and earlier, and 5.6.5 and earlier, have a command injection vulnerability. This vulnerability stems from an unknown function in the Dialplan Editor component’s app/dialplans/resources/classes/dialplan.php file, which allows f...

Diem project Diem cross-site scripting vulnerabilities

The Diem project has a security vulnerability. This vulnerability stems from improper handling of the parameter dmcommand in the append function of the dmAdminPlugin/modules/dmConsole/actions/actions.class.php file within the Administrative Console component. It may lead to cross-site scripting...

rdesktop buffer error vulnerability

rdesktop versions 1.9.0 and earlier have a buffer error vulnerability. This vulnerability stems from a stack overflow issue in the processplane function in bitmap.c. A malicious RDP server can exploit this vulnerability by sending malformed 32-bit compressed bitmaps. These bitmaps claim a larger...

Apache Camel permission and access control vulnerabilities

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain vulnerabilities related to permission handling and access control. These vulnerabilities arise from the Platform HTTP component, which determines whether endpoints run in proxy mode by checking whether a path starts...

Apache Camel log information leakage vulnerability

Apache Camel MLLP components versions 4.0.0 to 4.18.5 and 4.19.0 to 4.22.1 contain a vulnerability related to log information leakage. This vulnerability arises due to the default activation of the logPhi option, with some paths not following this setting. As a result, patient data contained in H...

IBM Concert Resource Management Vulnerability

The IBM Concert versions 1.0 to 3.0.0 have a resource management vulnerability, which stems from improper heap checking and may lead to information leakage...

aio-libs Async HTTP client/server framework: Input validation error vulnerability

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a vulnerability related to input validation errors. This vulnerability stems from the use of a pure Python parser that accepts ambiguous HTTP request frames. This could allow unvalidated attackers to inject HTTP request...

openGauss-server Buffer Error Vulnerability

The openGauss-server versions 2.1.0, 3.0.0 to 3.0.6, 3.1.0, 5.0.0 to 5.0.5, 5.1.0, 6.0.0 to 6.0.6, 7.0.0-RC1, 7.0.0-RC2, and 7.0.0-RC3 have a buffer error vulnerability. This vulnerability arises from the HllObjectUnpack unpacking function, which does not verify the relationship between lenTotal...

WordPress Classified Listing: Input validation error vulnerability

WordPress Classified Listing versions 6.1.5 and earlier have a vulnerability related to input validation errors. This vulnerability stems from improper validation of a specified number of inputs, which may allow attackers to access features that are not correctly constrained by ACLs...

MISP Resource Management Error Vulnerability

MISP 2.5.48 and earlier versions have a resource management vulnerability. This vulnerability stems from a data integrity flaw in the event deletion logic. When events are deleted, related records such as event report labels, event graph entries, proposal associations, ssdeep-associated blocks, a...