tox-dev filelock: Processing logic error vulnerability

The tox-dev filelock version 4.1.0 to 4.2.1 contained a processing logic vulnerability. This vulnerability stemmed from the SoftFileLock component reusing outdated observation results when at least two lock user processes were waiting. An attacker could set and delete their own markers, and use...

tox-dev filelock: race condition issue

The tox-dev filelock version 4.1.0 to 4.2.1 had a race condition issue. This issue stemmed from the SoftReadWriteLock and AsyncSoftReadWriteLock classes’ caching mechanism for checking the .rw lock tree successfully, and then re-reshaping its name during subsequent recording operations. This coul...

tox-dev filelock: Permissions, permission grants, and access control issues

The tox-dev filelock version 3.30.0 to 4.2.1 had vulnerabilities related to permission handling and access control. These vulnerabilities stemmed from the use of StrictSoftFileLock version 3.30.0 and later, as well as SoftReadWriteLock version 4.0.0 and later. These versions may use a protocol...

Apostrophe Technologies ApostropheCMS Cross-site Scripting Vulnerability

Apostrophe Technologies' ApostropheCMS has a cross-site scripting vulnerability. This vulnerability arises from the non-default nonTextTags configuration of sanitize-html, which includes noscript. When noscript is present, htmlparser2 causes an implicit ancestor closure within noscript, resulting...

DrayTek Vigor2960: Input validation error vulnerability

The DrayTek Vigor2960 1.5.1.6 revision 8218 version has a security vulnerability. This vulnerability stems from the operation of the settable function in the /cgi-bin/mainfunction.cgi file of the CGI Process component, which may lead to remote command injection...

Finsys Dockhand authorization issue vulnerability

Finsys Dockhand versions prior to 1.0.46 have an authorization vulnerability. This vulnerability arises because non-administrator users with the stacks:edit permission can use the /api/system/files/content path parameter to provide absolute paths for file reading, potentially leading to the...

OpenCATS Authorization Issue Vulnerability

Versions of OpenCATS prior to 0.10.0 have an authorization issue. This vulnerability stems from the absence of authorization checks in the ajax/deleteActivity.php and ajax/editActivity.php files. Authorized READ-level users can use GET or POST requests to provide any activity ID, allowing them to...

OpenCATS Authorization Issue Vulnerability

Versions of OpenCATS prior to 0.10.0 have a vulnerability related to authorization. This vulnerability stems from the lack of authorization verification in the ajax/testEmailSettings.php file. Users with read permissions can send test emails to any recipient by providing the parameters...

TYPO3 Fluid-Form: Cross-site scripting vulnerability due to coding.ms

TYPO3 Fluid-Form: Versions from 6.0.0 to 6.0.6 and 5.0.10 and earlier have a cross-site scripting vulnerability. This vulnerability arises due to values entered by visitors being placed in HTML digest emails without being escaped properly, allowing unauthenticated attackers to inject HTML into...

Vite launch-editor command injection vulnerability

Vite launch-editor has a command injection vulnerability. This vulnerability arises when an attacker can create file system entries in the working directory that start with a plus sign or minus sign. In such cases, launch-editor does not enforce the path as a positional file name. As a result, th...

Nokia 1830 Global Express security vulnerabilities

The Nokia 1830 Global Express G42, GX G31, GX G32, and GX G34 models prior to the GX r9.0 version have security vulnerabilities. These vulnerabilities stem from issues with local privilege escalation in the management shell interface. Local attackers who are authenticated and have restricted shel...

Nokia 1830 Global Express security vulnerabilities

The Nokia 1830 Global Express G42, GX G31, GX G32, and GX G34 models prior to the GX r9.0 version have security vulnerabilities. These vulnerabilities stem from bypassing CLI ACLs. Low-privilege authenticated attackers can circumvent the SSH isolation mechanism through custom SSH commands, thereb...

Mozilla Firefox: Vulnerability Due to Improper Exception Handling

Mozilla Firefox has a vulnerability related to improper exception handling. This vulnerability stems from an issue with the Audio/Video: cubeb component, where uninitialized memory is present, which may lead to information leakage...

SolarWinds Observability Self-Hosted Cross-Site Script Vulnerability

SolarWinds Observability Self-Hosted versions 2026.2.3 and earlier have a cross-site scripting vulnerability. This vulnerability stems from a storage-based cross-site scripting flaw. Authorized attackers can inject malicious content or JavaScript, causing other authorized users to display or...

Apache Airflow Amazon provider cross-site request forgeing vulnerability

Apache Airflow’s Amazon provider versions prior to 9.38.0 have a cross-site request forgery vulnerability. This vulnerability stems from the SAML login process of the AWS auth manager, which does not bind the authentication response to the browser that initiated the login. The login processor...

DrayTek Vigor2960: Input validation error vulnerability

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a security vulnerability. This vulnerability stems from the incorrect handling of parameters in the option field of the ruequestcertificate function in the /cgi-bin/mainfunction.cgi file within the IPsec Handler component. This could lead to remote...

DrayTek Vigor2960 path traversal vulnerability

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a path traversal vulnerability. This vulnerability stems from the handling of the 'action' parameter in the '/cgi-bin/mainfunction.cgi' file within component Apmupload, allowing for path traversal attacks. Attackers can exploit this vulnerability remote...

Advantech Adam-3600: Improper exception handling leads to vulnerabilities

The Advantech Adam-3600 versions prior to 2.8.5.0 have a vulnerability in exception handling. This vulnerability allows attackers to send specially crafted messages to trigger assertion failures, resulting in service crashes...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the log settings function, which could allow authenticated attackers to execute arbitrary code...

Agent2Agent A2A Java SDK configuration error vulnerability

The Agent2Agent A2A Java SDK versions prior to 1.3.0.Final contain a security vulnerability. This vulnerability stems from the default InMemoryTaskStore configuration, which does not authorize task reads. Additionally, InMemoryTaskStore.get does not check the caller or owner of the call, and the...

Apple Xcode security vulnerabilities

Versions of Apple Xcode prior to Xcode 27 contain security vulnerabilities. These vulnerabilities stem from the lack of forced library verification for affected binary files, which may allow applications to bypass the sandbox...

Letta encryption problem vulnerabilities

Letta versions 0.16.8 and earlier have encryption-related vulnerabilities. This vulnerability stems from the LocalSandbox sub-process inheriting the entire server environment. Attackers can exploit this by running code via POST /v1/tools/run or custom tools, thereby reading LETTAPGURI,...

Apostrophe Technologies ApostropheCMS information leakage vulnerability

Apostrophe Technologies' ApostropheCMS has a vulnerability related to information leakage. This vulnerability arises from the practice of placing the one-time session token in the redirect URL during cross-host or cross-region session migrations. This allows attackers to obtain and exchange token...

Apostrophe Technologies ApostropheCMS Authorization Issues Vulnerability

Apostrophe Technologies’ ApostropheCMS versions prior to 4.33.0 have a licensing issue vulnerability. This vulnerability stems from the REST API used in core pages, which reads the complete page documentation using .permissionfalse during tree dumps. This bypasses checks for page types such as...

Apostrophe Technologies ApostropheCMS: Vulnerabilities in Permissions Management and Access Control

Apostrophe Technologies' ApostropheCMS has a security vulnerability. This vulnerability arises from authenticated users who have permission to import target types being able to use objects or operators as update key values. As a result, import queries may match with unrecognized existing document...

Apostrophe Technologies ApostropheCMS Cross-site Scripting Vulnerability

Apostrophe Technologies' ApostropheCMS has a cross-site scripting vulnerability. This vulnerability arises from application configurations that allow SVG animation elements with namespace prefixes and related URL location attributes. When these prefixed tag names do not match the prefixless...

Coze-Dev and Coze-Studio: Configuration error vulnerabilities

Versions of coze-dev and coze-studio before 0.5.0 have a configuration error vulnerability. This vulnerability stems from insecure default configurations, allowing any registered user to execute commands in unshaded Python3 subprocedures by running workflow code nodes. Attackers can bypass the...

CodeWithCJ SparkyFitness Authorization Issue Vulnerability

Versions of CodeWithCJ SparkyFitness prior to 0.17.0 have a vulnerability related to authorization. This vulnerability arises from a lack of authorization checks. Authorized attackers can use the DELETE /api/foods/food-variants/:id endpoint to delete food variants for other users. They can also u...

Apple macOS Path Traversal Vulnerability

Versions of Apple macOS Golden Gate prior to version 27 contain security vulnerabilities. These vulnerabilities stem from improper path handling, which may allow applications to access protected user data...

Apple iOS Buffer Overflow Vulnerability

Apple iOS versions prior to 27, Apple iPadOS versions prior to 27, Apple macOS Golden Gate versions prior to 27, Apple tvOS versions prior to 27, Apple visionOS versions prior to 27, and Apple watchOS versions prior to 27 have a buffer error vulnerability. This vulnerability stems from improper...

Apple iOS Authorization Issue Vulnerability

Versions of Apple iOS prior to version 27 and Apple iPadOS prior to version 27 have a licensing issue vulnerability. This vulnerability stems from state management issues, which may allow attackers with physical access to locked devices to bypass Digital ID authentication when iPhone Mirroring is...

Apple macOS Information Leakage Vulnerability

Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia versions prior to 15.8, and Apple macOS Tahoe versions prior to 26.7 have a vulnerability that leads to information leakage due to improper state management. This vulnerability may allow applications to access sensitive network...

Apple macOS Security Vulnerabilities

Versions of Apple macOS Golden Gate prior to version 27 contain security vulnerabilities. These vulnerabilities stem from insufficient integrity checks on application packages, which may allow maliciously modified applications to be launched without being prevented...

Apple macOS Permission Licensing and Access Control Vulnerabilities

Versions of Apple macOS Golden Gate prior to version 27 have vulnerabilities related to permission management and access control. These vulnerabilities stem from insufficient sandbox restrictions, which may allow applications to access user contact information...

ATSUMI Electric ADX5004: Processing logic error vulnerability

The ATSUMI Electric ADX5004 has a processing logic vulnerability. This vulnerability stems from a hidden function issue, allowing users with administrator privileges to execute arbitrary operating system commands...

ASUS Router authorization issue vulnerability

The ASUS Router 3.0.0.4.388 series has an authorization issue vulnerability. This vulnerability stems from the lack of authentication for critical functions, allowing unauthorized nearby users to send specific commands via HTTP requests. This causes the router to return device identification...

Apple iOS Security Vulnerabilities

Versions of Apple’s operating systems prior to iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 contain security vulnerabilities. These vulnerabilities stem from access control issues, which may allow applications to access sensitive user data...

Apple macOS Security Vulnerabilities

Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia versions prior to 15.8, and Apple macOS Tahoe versions prior to 26.7 have security vulnerabilities. These vulnerabilities stem from authentication issues, which may allow attackers to impersonate other users...

Apple iOS Resource Management Vulnerability

Apple iOS versions prior to 26.7, Apple iPadOS versions prior to 26.7, Apple iOS versions prior to 27, Apple iPadOS versions prior to 27, Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia 15.8 versions prior to 27, Apple macOS Tahoe versions prior to 26.7, Apple tvOS versions prio...

Apple macOS Information Leakage Vulnerability

Versions of Apple macOS Golden Gate prior to version 27 have a vulnerability known as information leakage. This vulnerability arises from the removal of code that contained the vulnerability, which may lead to the application leaking kernel memory...

Advantech Adam-3600 security vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have security vulnerabilities. These vulnerabilities stem from a null pointer dereferencing in the ondisconnected callback function of the license manager service. This could allow unauthenticated attackers to cause the service to crash...

Apple iOS Security Vulnerabilities

Versions of Apple iOS prior to version 27 and Apple iPadOS prior to version 27 have security vulnerabilities. These vulnerabilities stem from authorization issues, which may allow applications to initiate calls or send messages...

Apostrophe Technologies ApostropheCMS Resource Management Vulnerability

Apostrophe Technologies' ApostropheCMS has a resource management vulnerability. This vulnerability arises from the form submission routing temporarily storing unlimited multipart uploads before form validation or authentication occurs. Additionally, there are no limits on the upload size, quantit...

EventON – Subscriber SQL injection vulnerability

EventON – Subscriptions versions 1.4.5 and earlier have a SQL injection vulnerability. This vulnerability stems from insufficient escaping of the email parameters and inadequate preparation for existing SQL queries. It may allow unauthenticated attackers to append additional SQL queries to existi...

DiviGear Carousel cross-site scripting vulnerability

DiviGear Carousel versions 5.2.0 and earlier have a cross-site scripting vulnerability. This vulnerability stems from the insufficient input cleaning and output escaping in the updatelicense AJAX operation. It may allow authenticated attackers with subscription or higher privileges to inject...

Eclipse ThreadX – NetX Duo buffer error vulnerability

Eclipse ThreadX – NetX Duo 6.5.1.202602 and earlier versions have a security vulnerability. This vulnerability stems from the NetX Secure’s TLS 1.3 Certificate message parser, which decreases the message length when skipping header fields. It does not confirm whether there are bytes that can be...

Eclipse ThreadX – NetX Duo buffer error vulnerability

Eclipse ThreadX – NetX Duo 6.5.1.202602 and earlier versions have a buffer error vulnerability. This vulnerability stems from the lack of boundary checks in the NetX Secure’s TLS 1.3 Certificate message parser. It may allow malicious TLS 1.3 servers to trigger unsigned integer overflows and heap...

Advantech Adam-3600 digital error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a numerical error vulnerability. This vulnerability stems from an integer overflow in the license manager service, which could allow unauthenticated attackers to cause the service to crash...

Advantech Adam-3600 authorization issue vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have an authorization vulnerability. This vulnerability stems from proprietary protocols that allow attackers to perform unlimited brute-force attacks on administrator passwords, even when the SafeEnhancement feature is enabled...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer overflow vulnerability. This vulnerability stems from a stack-based buffer overflow, which may allow authenticated attackers to execute arbitrary code...