Subhajitkhan Online-Clinic-Management-System: Input Verification Error Vulnerability

The subhajitkhan online-clinic-management-system has a security vulnerability. This vulnerability stems from incorrect handling of the parameter ‘docid’ in the ‘adminmindocview.php’ file within the ‘Administrative Mutation Handler’ component. This could lead to SQL injection attacks, and the...

Diem project: Trust management issues and vulnerabilities

The Diem project versions 5.1.3 and earlier have a vulnerability related to trust management. This vulnerability stems from improper handling of unknown code in the file dmCorePlugin/lib/data/dmDataLoad.php. It may allow remote exploitation if a default password is used...

Aleksey Hoffman Sigma File Manager: Server Request Forgery Vulnerability

Aleksey Hoffman’s Sigma File Manager versions 2.2.0 and earlier have a server-side request forgeing vulnerability. This vulnerability stems from the validateremoteurl function in security.rs, which does not check the IP address after the extension download command is parsed. As a result, it becom...

nkoriyama aribb24 Buffer Error Vulnerability

nkoriyama aribb24 versions 1.0.3 and earlier have a buffer overflow vulnerability. This vulnerability stems from the handling of extremely large subtitle data units in src/parser.c. Attackers can exploit this vulnerability by processing specially crafted subtitle PES packets through aribparsepes...

Semaphore UI input validation error vulnerability

Semaphore UI versions prior to 2.19.16 have a vulnerability in input validation. This vulnerability arises because users with the taskrunner role can provide arbitrary keys in the task environment JSON, thereby overriding protected Ansible variables. This allows them to set ansiblesshcommonargs’s...

Apache Camel code injection vulnerability

Versions of Apache Camel from 4.4.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a code injection vulnerability. This vulnerability arises when the dynamic-router-control endpoint processes subscription or update requests. It involves accessing subscription predicates and expression languages from...

Ellucian Banner Student Registration Self-Service Cross-site Scripting Vulnerability

The Ellucian Banner Student Registration Self-Service versions prior to 9.23 contain a cross-site scripting vulnerability. This vulnerability stems from the mepCode parameter in the /ssb/registration endpoint, which contains cross-site scripting. This could allow remote attackers to execute...

Apache Camel server-side request forge vulnerability

Versions of Apache Camel prior to 4.18.5, specifically 4.0.0 and 4.22.1 prior to 4.19.0, have a server-side request forge vulnerability. This vulnerability stems from the camel-as2 component extracting the asynchronous MDN return address from inbound messages and using it directly as the outbound...

Kiprono Davies dairy-management-system input validation error vulnerability

Kiprono Davies’ dairy-management-system has a security vulnerability. This vulnerability stems from operations on the parameters fno/fid/fname/flocallity/fac/fphone in the mysqliquery function within the file farmers/add.php. It may lead to SQL injection attacks, and attackers could exploit this...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.7.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper restrictions on external entities by the camel-smooks component. The default XML parser allows for the parsing of external...

Apache Camel Cross-Site Request Forgery Vulnerability

Versions of Apache Camel from 4.11.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a cross-site request forgery vulnerability. This vulnerability stems from the OAuth component’s authorization code callback not carrying and verifying the state parameter. This can lead to login cross-site request...

Apache Camel authorization issue vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5, as well as from 4.19.0 to 4.22.1, have a vulnerability related to authorization. This vulnerability arises because the Shiro security processor skips credential verification when the currently bound thread’s subject has the same subject identifier as...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a buffer error...

Aaron Pettengill: Vulnerability in input validation

Aaron Pettengill’s RVF 7.0.4 and earlier versions have a vulnerability in input validation. This vulnerability stems from prototype pollution in the setPath function, allowing unauthenticated attackers to override properties of shared built-in functions by leveraging the inherited Object.prototyp...

IBM MQ Operator path traversal vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a path traversal...

Webkul Aureus ERP information leakage vulnerability

Webkul Aureus ERP versions 1.6.0 and earlier have security vulnerabilities. These vulnerabilities stem from handling of the composer.json file, which allows sensitive information to be inserted into debugging code, potentially leading to information leakage...

IBM Cloud Pak System Cross-site Scripting Vulnerability

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have a cross-site scripting vulnerability. This vulnerability stems from an exposure to HTML injection attacks, allowing remote authenticated attackers to inject malicious HTML code. When this code is viewed, it will execute in the victim’s web...

Sunkaifei FlyCms input validation error vulnerability

Sunkaifei FlyCms has a vulnerability in input validation. This vulnerability stems from the batch assignment issue in the /ucenter/accountupdate interface. It allows authenticated users to submit additional User Bean fields to override protected account columns. This may result in changes such as...

Webkul Aureus ERP authorization issue vulnerability

Webkul Aureus ERP versions 1.6.0 and earlier have a vulnerability related to authorization. This vulnerability arises from incorrect handling of the parameter “Password” in the file plugins/webkul/security/src/Filament/Resources/UserResource/Schemas/UserForm.php, which may lead to overly weak...

IBM MQ deserialization injection vulnerability

IBM MQ has a deserialization injection vulnerability. This vulnerability arises from authenticated attackers sending specially crafted asynchronous consumption requests, which can cause the queue manager proxy process to crash, potentially leading to a denial-of-service attack...

BoxyHQ Enterprise SaaS Starter Kit Authorization Issues Vulnerability

BoxyHQ Enterprise SaaS Starter Kit versions 1.6.0 and earlier have an authorization issue vulnerability. This vulnerability arises from the payment routing process skipping the teampayments permission check, resulting in a lack of authorization. Certified MEMBER or ADMIN users can use functions...

sgl-project SGLang Resource Management Error Vulnerability

The SGLang version 0.5.22 and earlier have a resource management vulnerability. This vulnerability stems from the Mooncake disaggregation backend accepting unvalidated decoding registration messages on the Prefill rank ZMQ PULL socket. An attacker with network proximity can send a large number of...

HankCS HanLP: Input validation error vulnerability

The HankCS HanLP 2.1.0-beta.64 and earlier versions have a security vulnerability. This vulnerability stems from the operation of the loadword2vecasvocabtensor function in the hanlp/utils/torchutil.py file, which involves handling the vectors.vocab parameter, leading to deserialization attacks...

HankCS HanLP: Input validation error vulnerability

The hankcs hanlp 2.1.0-beta.64 and earlier versions have a security vulnerability. This vulnerability stems from the improper handling of the classpath parameter in the hanlp.load function within the Model Config Loading component’s plugins/hanlpcommon/hanlpcommon/reflection.py file. This allows...

sgl-project SGLang Resource Management Error Vulnerability

The SGLang version 0.5.19 and earlier have a resource management vulnerability. This vulnerability stems from an error in the WeightExporter.sendweightstoremoteinstance function in the Weight Exporter component’s file python/sglang/srt/modelexecutor/modelrunnercomponents/weightexporter.py. The...

Surfer authorization issue vulnerability

Surfer 1.8.0.744 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the lack of authorization, which may allow attackers to exploit incorrectly configured access control levels...

markdown-it resource management error vulnerability

The markdown-it versions prior to 14.3.2 and 15.0.2 have a resource management error vulnerability. This vulnerability arises when enabling typographer: true, causing a custom Markdown input to lead to quadratic processing time under the smartquotes rule, potentially resulting in denial of servic...

GrandNode path traversal vulnerability

GrandNode 2.3.0 and earlier versions have a path traversal vulnerability. This vulnerability stems from the incorrect handling of parameters Picture1/Picture2/Picture3 in the ProductImportDataObject.PrepareProductPictures function of the Excel Import component, which may lead to remote path...

WordPress Fluent Forms Authorization Issue Vulnerability

WordPress Fluent Forms versions 6.2.15 and earlier have a vulnerability related to authorization. This vulnerability stems from the lack of proper authorization mechanisms; attackers could exploit this to exploit improperly configured access control levels...

LlamaFamily: Llama Chinese Community: Input validation error vulnerability

The LlamaFamily Llama Chinese community has a security vulnerability. This vulnerability stems from an error in the function getclassfromdynamicmodule in the Adapter Config component’s examples/chatgradionomerge.py file, where the parameter basemodelnameorpath is handled incorrectly, potentially...

Apache Camel code injection vulnerability

Apache Camel versions from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain security vulnerabilities. These vulnerabilities stem from the Camel HTTP producer, which allows inbound messages to override endpoint URIs through the CamelHttpUri and CamelRestHttpUri headers. It also parses property...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a buffer error...

Apache Camel information leakage vulnerability

Apache Camel versions from 4.0.0 to 4.18.5, as well as versions from 4.19.0 to 4.22.1, have a vulnerability related to information leakage. This vulnerability arises from the Mina component, which writes abnormal information directly back to the socket when exchange failures occur. This may lead ...

IBM MQ resource management error vulnerability

The IBM MQ version 9.4.5.0 to 9.4.5.1 contains a resource management vulnerability. This vulnerability arises from the ability of authenticated users to send specially crafted messages, causing consumption applications to crash and potentially leading to denial-of-service attacks...

rdesktop buffer error vulnerability

rdesktop versions 1.9.0 and earlier have a buffer error vulnerability. This vulnerability stems from the processbmpcache2 function in orders.c, which allows for out-of-buffer read access to the heap. Attackers can exploit this by sending uncompressed orders with excessively large width or height,...

aio-libs Async HTTP client/server framework – Session mechanism-related vulnerabilities

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a security vulnerability. This vulnerability stems from the lack of enforcing the Secure attribute for shared cookies. As a result, shared cookies marked as Secure may be sent via unencrypted requests...

aio-libs Async HTTP client/server framework Resource management error vulnerability

The aio-libs Async HTTP client/server framework, versions 2.0.0 to 3.14.4, has a resource management vulnerability. This vulnerability stems from the handling of multipart requests, which retains an unlimited number of open file descriptors. When the processing program uses Request.post,...

aio-libs Async HTTP client/server framework: Input validation error vulnerability

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a vulnerability related to input validation errors. This vulnerability arises when an attacker can send an absolute-form request, causing Request.scheme to use the request-target scheme data controlled by the attacker...

Diem project Diem cross-site scripting vulnerabilities

The Diem project has a security vulnerability. This vulnerability stems from an improper handling of the parameter ‘text’ in the dmBaseLinkTag::text function within the dmCorePlugin/lib/view/html/link/dmBaseLinkTag.php file, located in the dmWidget component. This could lead to cross-site scripti...

Cal.com Cal.diy Authorization Issue Vulnerability

Cal.com versions prior to 6.2.0 and cal.diy versions prior to 6.2.0 have an authorization issue vulnerability. This vulnerability stems from improper handling of the parameter ID in the createWebhookProcedure function in the Webhook Handler component. This could lead to remote authorization...

Kiprono Davies dairy-management-system input validation error vulnerability

Kiprono Davies’ dairy-management-system has a security vulnerability. This vulnerability stems from improper handling of the parameter ‘fno/farmer’ in the ‘payment/pay.php’ file using the ‘mysqlirealescapestring’ function. It may lead to SQL injection attacks, and attackers could exploit this...

WordPress Essential Addons for Elementor: Permission and access control issues

WordPress Essential Addons for Elementor 6.8.5 and earlier versions have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper permission allocation, which may lead to unauthorized privilege escalation...

Subhajitkhan Online-Clinic-Management-System Cross-Site Script Vulnerability

The subhajitkhan online-clinic-management-system has a security vulnerability. This vulnerability stems from incorrect handling of the msg parameter in the feedback.php file, which may lead to cross-site scripting attacks...

aircheng-org iWebShop Authorization Issue Vulnerability

aircheng-org iWebShop versions 5 and earlier have a vulnerability related to authorization issues. This vulnerability stems from incorrect handling of the parameter userid in the sendmessagemobile function found in the controllers/simple.php file. It may lead to the recovery of weak passwords, an...

xqq libaribcaption buffer error vulnerability

The xqq libaribcaption version 1.1.0 to 1.1.2 contains a buffer error vulnerability. This vulnerability stems from the global out-of-bounds read in DecoderImpl::HandleGLGR. No upper-bound checks were performed on the kLatinSpecialTable, resulting in reading beyond the boundaries of 78 tables...

aio-libs Async HTTP client/server framework Resource management error vulnerability

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a resource management error vulnerability. This vulnerability stems from the Max-Age mechanism, which may cause overflows and skip closing connections. This could allow attackers to temporarily exhaust the connection po...

aio-libs Async HTTP client/server framework – Session mechanism-related vulnerabilities

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a session mechanism vulnerability. This vulnerability stems from the Host-Only scope, which allows the removal of cookies from the parent domain. Accessing untrusted subdomains may result in the Host-Only protection of...

Integratec SQL injection vulnerability

Integratec has a SQL injection vulnerability. This vulnerability stems from an UNION-type SQL injection in the sInfo parameter sent via POST to the /login/apLogin.aspx/start endpoint. It may allow attackers to steal credentials and user information from the database, causing errors and...

WSO2 API Manager authorization issue vulnerability

WSO2 API Manager versions prior to 3.2.0.4.34, 3.2.1.54, 4.1.0.218, 4.2.0.156, 4.3.0.67, 4.4.0.30, and 4.5.0.14; WSO2 Universal Gateway versions prior to 4.5.0.14; WSO2 API Control Plane versions prior to 4.5.0.15; and Forgerock Key Manager Component versions prior to 1.0.0.4, 1.1.0.2, and 1.1.5....

Krayin Laravel-CRM: Server-side request forgeing vulnerability

In versions prior to 2.2.7 of krayin Laravel-CRM, there was a server-side request forgeing vulnerability. This vulnerability stemmed from an SSRF filter, allowing users with webhook permissions to access internal addresses through DNS rebinding. Attackers could return public addresses during the...