197365 matches found
Apache Camel information leakage vulnerability
Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain an information leakage vulnerability. This vulnerability stems from the fact that the OAuth2 client token in the HTTP component is cached globally on the JVM, and fields such as the request scope, resource indicator,...
Apache Camel deserialization injection vulnerability
Versions of Apache Camel Camel-Jgroups 4.0.0 to 4.18.5 and 4.19.0 to 4.22.1 contain a deserialization injection vulnerability. This vulnerability stems from the deserialization of untrusted data. The JGroupsEndpoint.createExchangeMessage method does not apply the java.io.ObjectInputFilter; instea...
Apache Camel information leakage vulnerability
Versions of Apache Camel from 4.0.0 to 4.18.5, as well as from 4.19.0 to 4.22.1, have a vulnerability related to information leakage. This vulnerability arises when the routing at the backend of the consumer in the gRPC component fails. As a result, exception messages are written into the gRPC...
aio-libs Async HTTP client/server framework Resource management error vulnerability
The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a resource management error vulnerability. This vulnerability stems from the Max-Age mechanism, which may cause overflows and skip closing connections. This could allow attackers to temporarily exhaust the connection po...
aio-libs Async HTTP client/server framework – Session mechanism-related vulnerabilities
The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a session mechanism vulnerability. This vulnerability stems from the Host-Only scope, which allows the removal of cookies from the parent domain. Accessing untrusted subdomains may result in the Host-Only protection of...
aio-libs Async HTTP client/server framework – Session mechanism-related vulnerabilities
The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a security vulnerability. This vulnerability stems from the lack of enforcing the Secure attribute for shared cookies. As a result, shared cookies marked as Secure may be sent via unencrypted requests...
MikroTik RouterOS numerical error vulnerability
MikroTik RouterOS versions 6.40.5 and earlier, 6.44 and earlier, as well as 7.20.8 and earlier, have a numerical error vulnerability. This vulnerability stems from an integer overflow in the samecheck function found in the file iptSAME.ko, which could be exploited by remote attackers...
Jumpserver command injection vulnerability
Jumpserver 4.10.19 and earlier versions have a command injection vulnerability. This vulnerability stems from incorrect operations with parameters such as IP/HOST by the Template Rendering component, which may lead to OS command injections. Attackers can exploit this vulnerability remotely...
Satya-Vinay Events-Management-System Input Verification Vulnerability
Satya-Vinay Events-Management-System has a security vulnerability. This vulnerability stems from improper handling of parameters such as id, name, title, year, gender, fromdate, and todate by the mysqliquery function in the Registration-Edit Handler component’s doedit.php file. This may lead to S...
Satya-Vinay Events-Management-System Input Verification Vulnerability
Satya-Vinay Events-Management-System has a security vulnerability. This vulnerability stems from improper handling of parameters in the dodelete.php file within the Registration-Delete Handler component. It may lead to SQL injection attacks, and attackers could execute commands remotely...
Satya-Vinay Events-Management-System Authorization Vulnerability
The Satya-Vinay Events-Management-System has an authorization issue. This vulnerability stems from a lack of authentication, which may allow unauthorized remote access...
AXA NLP.js input validation error vulnerability
AXA NLP.js version 4.27.0 has a security vulnerability. This vulnerability stems from an incorrect handling of the condition parameter in the Evaluator.walkFunction function within the Condition Expression Pipeline component located at packages/evaluator/src/evaluator.js. This could lead to code...
IBM Concert encryption problem vulnerabilities
The IBM Concert versions 1.0 to 3.0.0 have encryption vulnerabilities. These vulnerabilities stem from the use of encryption algorithms that are weaker than expected, which may allow attackers to decrypt highly sensitive information...
Element X iOS Input Validation Vulnerability
Element X iOS versions prior to 26.05.0 have a vulnerability in input validation. This vulnerability arises from failing to check the URL allowlist when parsing io.element.call://. It may allow attackers to trick users into opening a specially crafted URL, causing the WKWebView in the call...
Frappe Helpdesk Authorization Issue Vulnerability
Frappe Helpdesk versions prior to 1.26.0 have an authorization issue vulnerability. This vulnerability stems from an authorization bypass mechanism. Certified portal users can create tickets by providing a raisedby value, pretending to be other customers. Attackers can use the victim’s email to...
NocoBase SQL injection vulnerability
NocoBase 2.2.28 and earlier versions have a SQL injection vulnerability. This vulnerability arises from bypassing checkSQL by using the sqlCollection:setFields operation, allowing unvalidated SQL to be executed, which may lead to SQL injection. This could result in reading the pgshadow password...
Apache Camel information leakage vulnerability
Versions of Apache Camel from 4.15.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain security vulnerabilities. These vulnerabilities arise from DoclingProducer’s implicit decision-making based on the message body prefix. This can lead to the system treating content starting with http:// or https:// a...
BentoML command injection vulnerability
BentoML versions 1.4.39 and earlier have a command injection vulnerability. This vulnerability arises from the newline characters embedded in the docker.env mapping key being rendered by the old base.j2 template, thereby allowing them to be injected into Dockerfile commands. An attacker can provi...
WordPress Quiz and Survey Master has a deserialization injection vulnerability.
WordPress Quiz and Survey Master versions 11.2.7 and earlier have a deserialization injection vulnerability. This vulnerability stems from improper handling of deserialized untrusted data, which may lead to object injection attacks...
Apache Camel deserialization injection vulnerability
Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a deserialization injection vulnerability. This vulnerability stems from a lack of application of the JavaSerializationFilterConfig in certain configuration paths of the camel-hazelcast component. As a result, Java...
Apache Camel input validation vulnerability
Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper input validation in the Apache Camel Mail component. In the MimeMultipart data format, filters are not applied to the mail.smt...
Apache Camel input validation vulnerability
Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation. This vulnerability arises when the FopProducer creates a TransformerFactory by enabling only FEATURESECUREPROCESSING, without restricting access to external resources...
ztxz16 fastllm buffer error vulnerability
The ztxz16 fastllm 0.1.8.2 and earlier versions have a buffer overflow vulnerability. This vulnerability stems from the improper handling of the parameter len in the GGUFBuffer::ReadString function found in the file thirdparty/gguf/gguf.cpp. This allows an attacker to launch a remote attack...
aio-libs Async HTTP client/server framework: Input validation error vulnerability
The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a vulnerability related to input validation errors. This vulnerability stems from the use of a pure Python parser that accepts ambiguous HTTP request frames. This could allow unvalidated attackers to inject HTTP request...
aio-libs Async HTTP client/server framework: Input validation error vulnerability
The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a vulnerability related to input validation errors. This vulnerability arises when an attacker can send an absolute-form request, causing Request.scheme to use the request-target scheme data controlled by the attacker...
Apache Camel encryption issue vulnerabilities
The Apache Camel Crypto PGP component versions prior to 4.18.5 versions 4.0.0 and 4.19.0 prior to 4.22.1 have a security vulnerability related to encryption. This vulnerability stems from improper validation of integrity checks. The unmarshal method only validates the modification detection code...
Thelia processing logic vulnerability
Versions of Thelia prior to 3.1.5 and 3.2.4, as well as 3.2.x versions, have a processing logic vulnerability. This vulnerability arises from the fact that the number of coupon uses is only counted after the order payment is made. Certified customers can circumvent the coupon usage restrictions b...
Apache Camel input validation vulnerability
Versions of Apache Camel Netty HTTP from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability arises due to the camel-netty-http security constraint using case-sensitive matching when comparing the request path with the configure...
HankCS HanLP: Input validation error vulnerability
The HankCS HanLP 2.1.0-beta.64 and earlier versions have a security vulnerability. This vulnerability stems from the operation of the loadword2vecasvocabtensor function in the hanlp/utils/torchutil.py file, which involves handling the vectors.vocab parameter, leading to deserialization attacks...
Emergence libdisplay-info buffer error vulnerability
Emersion libdisplay-info versions 0.4.0 and earlier have a buffer error vulnerability. This vulnerability stems from the DisplayID v1 parser in displayid.c, which fails to properly handle cases where the data block declaration length exceeds the segment length. Attackers can exploit this by...
Viraj Potdar: Vulnerability in input validation of the criminal-management-system
The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from incorrect operations on the parameters offName/offID/ID/contact/gender/weapon/role in the Officers/addOfficer.php file, which may lead to SQL injection...
Automattic Sensei LMS Authorization Issue Vulnerability
Automattic Sensei LMS versions prior to 4.26.4 have an authorization issue vulnerability. This vulnerability stems from improper access control in the AJAX handler for addnewmoduleterm. Only a generic nonce is verified, and only checks are performed for slug prefixes in manageoptions, without...
IBM MQ Operator deserialization injection vulnerability
IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 pre-versions, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, and 4.0.0 through 4.0.4 have a deserialization injection vulnerability. This vulnerabilit...
aio-libs Async HTTP client/server framework Resource management error vulnerability
The aio-libs Async HTTP client/server framework, versions 2.0.0 to 3.14.4, has a resource management vulnerability. This vulnerability stems from the handling of multipart requests, which retains an unlimited number of open file descriptors. When the processing program uses Request.post,...
Krayin Laravel-CRM: Server-side request forgeing vulnerability
In versions prior to 2.2.7 of krayin Laravel-CRM, there was a server-side request forgeing vulnerability. This vulnerability stemmed from an SSRF filter, allowing users with webhook permissions to access internal addresses through DNS rebinding. Attackers could return public addresses during the...
WSO2 API Control Plane session mechanism vulnerability
WSO2 API Control Plane versions prior to 4.5.0 and 4.6.0 and 4.6.0 and 4.6.0.13 contained a session mechanism vulnerability. This vulnerability stemmed from the use of the session binding token feature and token binding verification, but without enabling the “Revoke tokens upon user logout” optio...
Apache Camel path traversal vulnerability
Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a path traversal vulnerability. This vulnerability arises due to the Azure Files component failing to normalize the construction of absolute paths by concatenating configuration directories with lists of server...
Apache Camel session mechanism vulnerabilities
Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to the session mechanism. This vulnerability arises because the Thrift component deserializes incoming data into the shared defaultInstance rather than into a new copy, resulting in data leakag...
Apache Camel race condition vulnerabilities
In Apache Camel versions 4.12.0 to 4.18.5 and 4.19.0 to 4.22.1, there is a race condition vulnerability. This issue arises due to the shared java.security.Signature instance in the PQC component being accessed asynchronously. Since this instance is not thread-safe, concurrent interactions between...
Apache Camel encryption issue vulnerabilities
Versions of Apache Camel from 4.0.0 to 4.18.5, as well as versions from 4.19.0 to 4.22.1, have a security vulnerability related to encryption. This vulnerability arises when the Knative HTTP client enables SSL but does not configure a truststore. In such cases, the client options revert to trusti...
Nexcess Event Tickets Authorization Vulnerability
Nexcess Event Tickets versions 5.30.1 and earlier have an authorization issue vulnerability. This vulnerability stems from unauthorized authorization through user-controlled keys. Improper configuration of access control levels may lead to exploitation of these vulnerabilities...
Priyanshu Raj cli-bridge post-link vulnerability
Priyanshu Raj’s cli-bridge versions prior to 0.0.2 have a postfix link vulnerability. This vulnerability arises when fs.realpathSync throws an ENOENT error when there is no target available. In such cases, symbolic links pointing outside the working directory’s root directory bypass the...
FossBilling authorization issue vulnerability
FossBilling versions from 0.8.4 to 0.8.6 had an authorization issue. This vulnerability stemmed from the use of hasManagePermission, which incorrectly allowed access to inactive non-core modules. This caused the system to bypass module access checks and manageSettings inspections, allowing...
WSO2 API Manager authorization issue vulnerability
WSO2 API Manager versions prior to 3.2.0.4.34, 3.2.1.54, 4.1.0.218, 4.2.0.156, 4.3.0.67, 4.4.0.30, and 4.5.0.14; WSO2 Universal Gateway versions prior to 4.5.0.14; WSO2 API Control Plane versions prior to 4.5.0.15; and Forgerock Key Manager Component versions prior to 1.0.0.4, 1.1.0.2, and 1.1.5....
Google Agent Mesh Authorization Vulnerability
The Google Agent Mesh version 0.1.0-alpha.1 to 0.1.0-alpha.2 contains an authorization vulnerability. This vulnerability stems from the lack of key functionality for authentication and authorization in the/libp2p-http entry server. Biscuit tokens or grid registrations are not verified, resulting ...
Mindee docTR deserialization injection vulnerability
Mindee docTR 1.1.0 and earlier versions have a deserialization injection vulnerability. This vulnerability stems from the use of torch.load to load checkpoints in loadpretrainedparams, where weightsonly=True is not set. This allows attackers to inject malicious pickle payloads by controlling loca...
Fenrir Sleipnir Mobile for Android: Processing logic error vulnerability
Fenrir Sleipnir Mobile for Android versions prior to 3.9.0 has a processing logic vulnerability. This vulnerability stems from an UI deception issue. A remote attacker can enter full-screen mode through the Fullscreen API without displaying any persistent notifications or indications of trusted...
IBM MQ Operator buffer error vulnerability
IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 have a buffer error vulnerability. This...
IBM MQ Operator numerical error vulnerability
IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0 through 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 contain a numerical error...
.NET Platform AdventureWorks Authorization Issue Vulnerability
The .NET Platform AdventureWorks has an authorization issue vulnerability. This vulnerability stems from an improper authentication mechanism in the AddApplicationServices function within the Catalog API component’s file src/Catalog.API/Extensions/Extensions.cs. This could allow remote attackers ...