Subhajitkhan Online-Clinic-Management-System: Input Verification Error Vulnerability

The subhajitkhan online-clinic-management-system has a security vulnerability. This vulnerability stems from incorrect handling of the parameter ‘docid’ in the ‘adminmindocview.php’ file within the ‘Administrative Mutation Handler’ component. This could lead to SQL injection attacks, and the...

Diem project: Trust management issues and vulnerabilities

The Diem project versions 5.1.3 and earlier have a vulnerability related to trust management. This vulnerability stems from improper handling of unknown code in the file dmCorePlugin/lib/data/dmDataLoad.php. It may allow remote exploitation if a default password is used...

Aleksey Hoffman Sigma File Manager: Server Request Forgery Vulnerability

Aleksey Hoffman’s Sigma File Manager versions 2.2.0 and earlier have a server-side request forgeing vulnerability. This vulnerability stems from the validateremoteurl function in security.rs, which does not check the IP address after the extension download command is parsed. As a result, it becom...

nkoriyama aribb24 Buffer Error Vulnerability

nkoriyama aribb24 versions 1.0.3 and earlier have a buffer overflow vulnerability. This vulnerability stems from the handling of extremely large subtitle data units in src/parser.c. Attackers can exploit this vulnerability by processing specially crafted subtitle PES packets through aribparsepes...

Semaphore UI input validation error vulnerability

Semaphore UI versions prior to 2.19.16 have a vulnerability in input validation. This vulnerability arises because users with the taskrunner role can provide arbitrary keys in the task environment JSON, thereby overriding protected Ansible variables. This allows them to set ansiblesshcommonargs’s...

Apache Camel code injection vulnerability

Versions of Apache Camel from 4.4.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a code injection vulnerability. This vulnerability arises when the dynamic-router-control endpoint processes subscription or update requests. It involves accessing subscription predicates and expression languages from...

Ellucian Banner Student Registration Self-Service Cross-site Scripting Vulnerability

The Ellucian Banner Student Registration Self-Service versions prior to 9.23 contain a cross-site scripting vulnerability. This vulnerability stems from the mepCode parameter in the /ssb/registration endpoint, which contains cross-site scripting. This could allow remote attackers to execute...

Apache Camel server-side request forge vulnerability

Versions of Apache Camel prior to 4.18.5, specifically 4.0.0 and 4.22.1 prior to 4.19.0, have a server-side request forge vulnerability. This vulnerability stems from the camel-as2 component extracting the asynchronous MDN return address from inbound messages and using it directly as the outbound...

Kiprono Davies dairy-management-system input validation error vulnerability

Kiprono Davies’ dairy-management-system has a security vulnerability. This vulnerability stems from operations on the parameters fno/fid/fname/flocallity/fac/fphone in the mysqliquery function within the file farmers/add.php. It may lead to SQL injection attacks, and attackers could exploit this...

Apache Camel input validation vulnerability

Versions of Apache Camel from 4.7.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper restrictions on external entities by the camel-smooks component. The default XML parser allows for the parsing of external...

Apache Camel Cross-Site Request Forgery Vulnerability

Versions of Apache Camel from 4.11.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a cross-site request forgery vulnerability. This vulnerability stems from the OAuth component’s authorization code callback not carrying and verifying the state parameter. This can lead to login cross-site request...

Apache Camel authorization issue vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5, as well as from 4.19.0 to 4.22.1, have a vulnerability related to authorization. This vulnerability arises because the Shiro security processor skips credential verification when the currently bound thread’s subject has the same subject identifier as...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a buffer error...

Aaron Pettengill: Vulnerability in input validation

Aaron Pettengill’s RVF 7.0.4 and earlier versions have a vulnerability in input validation. This vulnerability stems from prototype pollution in the setPath function, allowing unauthenticated attackers to override properties of shared built-in functions by leveraging the inherited Object.prototyp...

IBM MQ Operator path traversal vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a path traversal...

Webkul Aureus ERP information leakage vulnerability

Webkul Aureus ERP versions 1.6.0 and earlier have security vulnerabilities. These vulnerabilities stem from handling of the composer.json file, which allows sensitive information to be inserted into debugging code, potentially leading to information leakage...

IBM Cloud Pak System Cross-site Scripting Vulnerability

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 have a cross-site scripting vulnerability. This vulnerability stems from an exposure to HTML injection attacks, allowing remote authenticated attackers to inject malicious HTML code. When this code is viewed, it will execute in the victim’s web...

Sunkaifei FlyCms input validation error vulnerability

Sunkaifei FlyCms has a vulnerability in input validation. This vulnerability stems from the batch assignment issue in the /ucenter/accountupdate interface. It allows authenticated users to submit additional User Bean fields to override protected account columns. This may result in changes such as...

Webkul Aureus ERP authorization issue vulnerability

Webkul Aureus ERP versions 1.6.0 and earlier have a vulnerability related to authorization. This vulnerability arises from incorrect handling of the parameter “Password” in the file plugins/webkul/security/src/Filament/Resources/UserResource/Schemas/UserForm.php, which may lead to overly weak...

IBM MQ deserialization injection vulnerability

IBM MQ has a deserialization injection vulnerability. This vulnerability arises from authenticated attackers sending specially crafted asynchronous consumption requests, which can cause the queue manager proxy process to crash, potentially leading to a denial-of-service attack...

BoxyHQ Enterprise SaaS Starter Kit Authorization Issues Vulnerability

BoxyHQ Enterprise SaaS Starter Kit versions 1.6.0 and earlier have an authorization issue vulnerability. This vulnerability arises from the payment routing process skipping the teampayments permission check, resulting in a lack of authorization. Certified MEMBER or ADMIN users can use functions...

sgl-project SGLang Resource Management Error Vulnerability

The SGLang version 0.5.22 and earlier have a resource management vulnerability. This vulnerability stems from the Mooncake disaggregation backend accepting unvalidated decoding registration messages on the Prefill rank ZMQ PULL socket. An attacker with network proximity can send a large number of...

HankCS HanLP: Input validation error vulnerability

The HankCS HanLP 2.1.0-beta.64 and earlier versions have a security vulnerability. This vulnerability stems from the operation of the loadword2vecasvocabtensor function in the hanlp/utils/torchutil.py file, which involves handling the vectors.vocab parameter, leading to deserialization attacks...

HankCS HanLP: Input validation error vulnerability

The hankcs hanlp 2.1.0-beta.64 and earlier versions have a security vulnerability. This vulnerability stems from the improper handling of the classpath parameter in the hanlp.load function within the Model Config Loading component’s plugins/hanlpcommon/hanlpcommon/reflection.py file. This allows...

sgl-project SGLang Resource Management Error Vulnerability

The SGLang version 0.5.19 and earlier have a resource management vulnerability. This vulnerability stems from an error in the WeightExporter.sendweightstoremoteinstance function in the Weight Exporter component’s file python/sglang/srt/modelexecutor/modelrunnercomponents/weightexporter.py. The...

sgl-project SGLang Resource Management Error Vulnerability

The SGLang version 0.5.22 and earlier have a resource management vulnerability. This vulnerability stems from an uncontrolled memory allocation issue in the handlestagingrsp function. Unauthenticated network attacks allow attackers to obtain the rank address and send STAGINGRSP messages with...

nkoriyama aribb24 Buffer Error Vulnerability

nkoriyama aribb24 versions 1.0.3 and earlier have a buffer overflow vulnerability. This vulnerability stems from the decoderhandlecsi function in src/decoder.c, where there is a stack buffer overflow. Attackers can exploit this by providing unlimited CSI parameter files, causing FFmpeg or VLC to...

Surfer authorization issue vulnerability

Surfer 1.8.0.744 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the lack of authorization, which may allow attackers to exploit incorrectly configured access control levels...

markdown-it resource management error vulnerability

The markdown-it versions prior to 14.3.2 and 15.0.2 have a resource management error vulnerability. This vulnerability arises when enabling typographer: true, causing a custom Markdown input to lead to quadratic processing time under the smartquotes rule, potentially resulting in denial of servic...

Apache Camel log information leakage vulnerability

Apache Camel MLLP components versions 4.0.0 to 4.18.5 and 4.19.0 to 4.22.1 contain a vulnerability related to log information leakage. This vulnerability arises due to the default activation of the logPhi option, with some paths not following this setting. As a result, patient data contained in H...

IBM Concert configuration error vulnerability

The IBM Concert versions 1.0 to 3.0.0 have a configuration error vulnerability. This vulnerability stems from improper CORS Cross-Origin Resource Sharing configurations. Domains are not limited to only trusted domains, which may allow attackers to perform privileged operations...

IBM Concert Resource Management Vulnerability

The IBM Concert versions 1.0 to 3.0.0 have a resource management vulnerability, which stems from improper heap checking and may lead to information leakage...

GrandNode path traversal vulnerability

GrandNode 2.3.0 and earlier versions have a path traversal vulnerability. This vulnerability stems from the incorrect handling of parameters Picture1/Picture2/Picture3 in the ProductImportDataObject.PrepareProductPictures function of the Excel Import component, which may lead to remote path...

WordPress Fluent Forms Authorization Issue Vulnerability

WordPress Fluent Forms versions 6.2.15 and earlier have a vulnerability related to authorization. This vulnerability stems from the lack of proper authorization mechanisms; attackers could exploit this to exploit improperly configured access control levels...

Florian Rival GDevelop Trust Management Vulnerability

Florian Rival’s GDevelop 5.6.284 and earlier versions have a trust management vulnerability. This vulnerability arises from the resource URLs in the project files being controlled by attackers. As a result, the downloadLocalFile function sends the gdresource cookie to the attacker’s server,...

Hono input validation vulnerability

Versions of Hono from 4.12.4 to 4.13.11 had a vulnerability in input validation. This vulnerability stemmed from serveStatic’s secondary decoding of routing request paths before file system lookup. As a result, malformed percent-encoded paths bypassed the protection provided by upstream middlewar...

Apache Camel information leakage vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain an information leakage vulnerability. This vulnerability stems from the fact that the OAuth2 client token in the HTTP component is cached globally on the JVM, and fields such as the request scope, resource indicator,...

Apache Camel deserialization injection vulnerability

Versions of Apache Camel Camel-Jgroups 4.0.0 to 4.18.5 and 4.19.0 to 4.22.1 contain a deserialization injection vulnerability. This vulnerability stems from the deserialization of untrusted data. The JGroupsEndpoint.createExchangeMessage method does not apply the java.io.ObjectInputFilter; instea...

Apache Camel information leakage vulnerability

Versions of Apache Camel from 4.0.0 to 4.18.5, as well as from 4.19.0 to 4.22.1, have a vulnerability related to information leakage. This vulnerability arises when the routing at the backend of the consumer in the gRPC component fails. As a result, exception messages are written into the gRPC...

MikroTik RouterOS numerical error vulnerability

MikroTik RouterOS versions 6.40.5 and earlier, 6.44 and earlier, as well as 7.20.8 and earlier, have a numerical error vulnerability. This vulnerability stems from an integer overflow in the samecheck function found in the file iptSAME.ko, which could be exploited by remote attackers...

Jumpserver command injection vulnerability

Jumpserver 4.10.19 and earlier versions have a command injection vulnerability. This vulnerability stems from incorrect operations with parameters such as IP/HOST by the Template Rendering component, which may lead to OS command injections. Attackers can exploit this vulnerability remotely...

Satya-Vinay Events-Management-System Input Verification Vulnerability

Satya-Vinay Events-Management-System has a security vulnerability. This vulnerability stems from improper handling of parameters such as id, name, title, year, gender, fromdate, and todate by the mysqliquery function in the Registration-Edit Handler component’s doedit.php file. This may lead to S...

Satya-Vinay Events-Management-System Input Verification Vulnerability

Satya-Vinay Events-Management-System has a security vulnerability. This vulnerability stems from improper handling of parameters in the dodelete.php file within the Registration-Delete Handler component. It may lead to SQL injection attacks, and attackers could execute commands remotely...

Satya-Vinay Events-Management-System Authorization Vulnerability

The Satya-Vinay Events-Management-System has an authorization issue. This vulnerability stems from a lack of authentication, which may allow unauthorized remote access...

AXA NLP.js input validation error vulnerability

AXA NLP.js version 4.27.0 has a security vulnerability. This vulnerability stems from an incorrect handling of the condition parameter in the Evaluator.walkFunction function within the Condition Expression Pipeline component located at packages/evaluator/src/evaluator.js. This could lead to code...

IBM Concert encryption problem vulnerabilities

The IBM Concert versions 1.0 to 3.0.0 have encryption vulnerabilities. These vulnerabilities stem from the use of encryption algorithms that are weaker than expected, which may allow attackers to decrypt highly sensitive information...

Element X iOS Input Validation Vulnerability

Element X iOS versions prior to 26.05.0 have a vulnerability in input validation. This vulnerability arises from failing to check the URL allowlist when parsing io.element.call://. It may allow attackers to trick users into opening a specially crafted URL, causing the WKWebView in the call...

Frappe Helpdesk Authorization Issue Vulnerability

Frappe Helpdesk versions prior to 1.26.0 have an authorization issue vulnerability. This vulnerability stems from an authorization bypass mechanism. Certified portal users can create tickets by providing a raisedby value, pretending to be other customers. Attackers can use the victim’s email to...

NocoBase SQL injection vulnerability

NocoBase 2.2.28 and earlier versions have a SQL injection vulnerability. This vulnerability arises from bypassing checkSQL by using the sqlCollection:setFields operation, allowing unvalidated SQL to be executed, which may lead to SQL injection. This could result in reading the pgshadow password...

Apache Camel information leakage vulnerability

Versions of Apache Camel from 4.15.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain security vulnerabilities. These vulnerabilities arise from DoclingProducer’s implicit decision-making based on the message body prefix. This can lead to the system treating content starting with http:// or https:// a...