197731 matches found
OpenCATS Authorization Issue Vulnerability
Versions of OpenCATS prior to 0.10.0 have an authorization issue. This vulnerability stems from the absence of authorization checks in the ajax/deleteActivity.php and ajax/editActivity.php files. Authorized READ-level users can use GET or POST requests to provide any activity ID, allowing them to...
Apple iOS Security Vulnerabilities
Versions of Apple iOS prior to version 27 and Apple iPadOS prior to version 27 have security vulnerabilities. These vulnerabilities stem from authorization issues, which may allow applications to initiate calls or send messages...
Apple macOS Permission Licensing and Access Control Vulnerabilities
Versions of Apple macOS Golden Gate prior to version 27 have vulnerabilities related to permission management and access control. These vulnerabilities stem from insufficient sandbox restrictions, which may allow applications to access user contact information...
DiviGear Carousel cross-site scripting vulnerability
DiviGear Carousel versions 5.2.0 and earlier have a cross-site scripting vulnerability. This vulnerability stems from the insufficient input cleaning and output escaping in the updatelicense AJAX operation. It may allow authenticated attackers with subscription or higher privileges to inject...
DrayTek Vigor2960: Input validation error vulnerability
DrayTek Vigor2960 1.5.1.6 Revision 8218 has a security vulnerability. This vulnerability stems from the incorrect handling of parameters in the option field of the ruequestcertificate function in the /cgi-bin/mainfunction.cgi file within the IPsec Handler component. This could lead to remote...
Coze-Dev and Coze-Studio: Configuration error vulnerabilities
Versions of coze-dev and coze-studio before 0.5.0 have a configuration error vulnerability. This vulnerability stems from insecure default configurations, allowing any registered user to execute commands in unshaded Python3 subprocedures by running workflow code nodes. Attackers can bypass the...
CodeWithCJ SparkyFitness Authorization Issue Vulnerability
Versions of CodeWithCJ SparkyFitness prior to 0.17.0 have a vulnerability related to authorization. This vulnerability arises from a lack of authorization checks. Authorized attackers can use the DELETE /api/foods/food-variants/:id endpoint to delete food variants for other users. They can also u...
Apple macOS Security Vulnerabilities
Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia versions prior to 15.8, and Apple macOS Tahoe versions prior to 26.7 have security vulnerabilities. These vulnerabilities stem from authentication issues, which may allow attackers to impersonate other users...
Advantech Adam-3600 security vulnerability
The Advantech Adam-3600 versions prior to 2.8.5.0 have security vulnerabilities. These vulnerabilities stem from a null pointer dereferencing in the ondisconnected callback function of the license manager service. This could allow unauthenticated attackers to cause the service to crash...
Optimal IdM OptimalCloud: Input validation error vulnerability
The Optimal IdM OptimalCloud 5.0 version has a vulnerability related to input validation errors. This vulnerability stems from improper handling of the state parameter in the file/v5.0/social, which may lead to open redirection. Attackers can trigger this remotely...
Fat Free CRM Authorization Issues Vulnerability
Versions of Fat Free CRM prior to 0.26.0 have a permission-related vulnerability. This vulnerability stems from the use of Comment.find with an unconstrained scope in CommentsControllerupdate and destroy, without proper authorization checks. Attackers can send PUT or DELETE requests to...
Apostrophe Technologies ApostropheCMS Resource Management Vulnerability
Apostrophe Technologies' ApostropheCMS has a resource management vulnerability. This vulnerability stems from the lack of an early authorization callback during the import route call to bigUploadMiddleware. As a result, unvalidated requests are allowed to execute upload initialization, chunk...
GNU UnRTF buffer error vulnerability
Versions of GNU UnRTF prior to 0.21.12 have a buffer error vulnerability, which stems from out-of-bounds writing. When users open RTF files specially crafted by attackers, this can lead to a denial-of-service attack...
Flatpak path traversal vulnerability
Versions of Flatpak prior to 1.18.1 contain a path traversal vulnerability. This vulnerability arises when a system is configured with at least one OCI remote, allowing malicious local users to exploit a specially crafted architecture name to trick the flatpak-system-helper process into creating ...
Apostrophe Technologies ApostropheCMS information leakage vulnerability
Apostrophe Technologies' ApostropheCMS has a vulnerability related to information leakage. This vulnerability arises from the predictable nature of the exported archive file names, allowing unauthenticated requests to download other users’ exports from publicly readable export storage, before the...
Apostrophe Technologies ApostropheCMS information leakage vulnerability
Apostrophe Technologies’ ApostropheCMS versions prior to 4.33.0 have security vulnerabilities. These vulnerabilities stem from the lack of publicApiCheckAsync access control checks for REST route GET /api/v1//:id/locales and its equivalent page routes. This allows unauthenticated attackers to que...
Apple Xcode security vulnerabilities
Versions of Apple Xcode prior to Xcode 27 contain security vulnerabilities. These vulnerabilities stem from the lack of forced library verification for affected binary files, which may allow applications to bypass the sandbox...
Apostrophe Technologies ApostropheCMS: Input validation vulnerability
Apostrophe Technologies' ApostropheCMS has a security vulnerability. This vulnerability stems from improper handling of projection exclusion paths. It may lead to access to shared prototype members through the constructor prototype chain, as well as deletion of shared runtime members. This affect...
Apostrophe Technologies ApostropheCMS Authorization Issues Vulnerability
Apostrophe Technologies ApostropheCMS versions prior to 4.33.0 have a licensing issue vulnerability. This vulnerability stems from the existence of the exist-in-locale API, which does not apply document-level viewing or editing authorization standards. As a result, authenticated low-privilege use...
WordPress Booktics authorization issue vulnerability
WordPress Booktics versions 1.0.30 and earlier have a vulnerability related to authorization. This vulnerability arises from the lack of proper authorization, which may allow attackers to exploit incorrect access control security levels...
WordPress VikRentCar Car Rental Management System Cross-Site Request Forgery Vulnerability
The WordPress VikRentCar Car Rental Management System versions 1.4.8 and earlier have a cross-site request forgeing vulnerability. This vulnerability stems from being vulnerable to cross-site request forgeing attacks...
WSO2 Enterprise Integrator Authorization Issue Vulnerability
WSO2 Enterprise Integrator 6.6.0 to 6.6.0.204 before version; WSO2 Identity Server 5.10.0 to 5.10.0.286 before version, 5.11.0 to 5.11.0.344 before version, 6.0.0 to 6.0.0.188 before version, 6.1.0 to 6.1.0.150 before version, and 7.0.0 to 7.0.0.35 before version; WSO2 API Manager 3.1.0 to...
SolarWinds Patch Manager information leakage vulnerability
The SolarWinds patch manager versions 2026.2 and earlier have a vulnerability that exposes sensitive information to local users, potentially leading to privilege escalation...
IBM Verify Identity Access Trust Management Vulnerability
The IBM Verify Identity Access version 11.0.3.1 and the IBM Security Verify Access Appliance version 10.0.9.3 have vulnerabilities related to trust management. These vulnerabilities stem from the use of hardcoded credentials, which may allow attackers located physically nearby to obtain elevated...
Fastify fast-uri input validation vulnerability
The Fastify fast-uri versions from 2.4.2 to 2.4.7, 3.1.3 to 3.1.8, and 4.0.1 to 4.2.2 have security vulnerabilities. These vulnerabilities stem from the canonicalizeHost function, which does not check whether the WHATWG URL parser treats the entire input as a host for host name consumption. As a...
Finsys Dockhand authorization issue vulnerability
Finsys Dockhand versions prior to 1.0.46 have an authorization vulnerability. This vulnerability arises because non-administrator users with the stacks:edit permission can use the /api/system/files/content path parameter to provide absolute paths for file reading, potentially leading to the...
HarfBuzz buffer error vulnerability
The HarfBuzz version 8.0.0 to 14.6.0 contains a buffer error vulnerability. This vulnerability stems from an error in the WAMR signature imported by fontglyphtostring in the experimental WebAssembly shaper. An attacker can provide a specially crafted font, and their wasm module will place the...
ASUS Router authorization issue vulnerability
The ASUS Router 3.0.0.4.388 series has an authorization issue vulnerability. This vulnerability stems from the lack of authentication for critical functions, allowing unauthorized nearby users to send specific commands via HTTP requests. This causes the router to return device identification...
SolarWinds Observability Self-Hosted Cross-Site Script Vulnerability
SolarWinds Observability Self-Hosted versions 2026.2.3 and earlier have a cross-site scripting vulnerability. This vulnerability stems from a storage-based cross-site scripting flaw. Authorized attackers can inject malicious content or JavaScript, causing other authorized users to display or...
Apostrophe Technologies ApostropheCMS Resource Management Vulnerability
Apostrophe Technologies' ApostropheCMS has a resource management vulnerability. This vulnerability arises from the form submission routing temporarily storing unlimited multipart uploads before form validation or authentication occurs. Additionally, there are no limits on the upload size, quantit...
Apostrophe Technologies ApostropheCMS: Vulnerabilities in Permissions Management and Access Control
Apostrophe Technologies' ApostropheCMS has a security vulnerability. This vulnerability arises from authenticated users who have permission to import target types being able to use objects or operators as update key values. As a result, import queries may match with unrecognized existing document...
Advantech Adam-3600 authorization issue vulnerability
The Advantech Adam-3600 versions prior to 2.8.5.0 have an authorization vulnerability. This vulnerability stems from proprietary protocols that allow attackers to perform unlimited brute-force attacks on administrator passwords, even when the SafeEnhancement feature is enabled...
Advantech Adam-3600 buffer error vulnerability
The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer overflow vulnerability. This vulnerability stems from a stack-based buffer overflow, which may allow authenticated attackers to execute arbitrary code...
Apostrophe Technologies ApostropheCMS Authorization Issues Vulnerability
Apostrophe Technologies' ApostropheCMS has an authorization issue vulnerability. This vulnerability stems from improper authorization checks, allowing editors with import privileges but without publishing privileges to create, replace, or delete published variants by importing auxiliary programs,...
jcrodriguez-dis Virtual Programming Lab for Moodle Cross-Site Script Vulnerabilities
The jcrodriguez-dis Virtual Programming Lab for Moodle versions prior to 5.0.0 has a cross-site scripting vulnerability. This vulnerability stems from the unencoded filename1/filename2 parameters in the similarity/diff.php file. It may lead to reflective cross-site scripting attacks. Attackers ca...
Apostrophe Technologies ApostropheCMS Cross-site Scripting Vulnerability
Apostrophe Technologies' ApostropheCMS has a cross-site scripting vulnerability. This vulnerability arises from application configurations that allow SVG animation elements with namespace prefixes and related URL location attributes. When these prefixed tag names do not match the prefixless...
Apple iOS Authorization Issue Vulnerability
Versions of Apple iOS prior to version 27 and Apple iPadOS prior to version 27 have a licensing issue vulnerability. This vulnerability stems from state management issues, which may allow attackers with physical access to locked devices to bypass Digital ID authentication when iPhone Mirroring is...
DrayTek Vigor2960: Input validation error vulnerability
The DrayTek Vigor2960 1.5.1.6 revision 8218 version has a security vulnerability. This vulnerability stems from the operation of the settable function in the /cgi-bin/mainfunction.cgi file of the CGI Process component, which may lead to remote command injection...
Juan Leyva’s configurable reports block for Moodle has an authorization issue vulnerability
Juan Leyva’s Configurable Reports block for Moodle versions prior to 5.3.0 has an authorization issue. This vulnerability stems from an authorization bypass. When the checkpermissions validation fails, adding only a warning still results in the display of complete report data. As a result,...
Apple macOS Information Leakage Vulnerability
Versions of Apple macOS Golden Gate prior to version 27 have a vulnerability known as information leakage. This vulnerability arises from the removal of code that contained the vulnerability, which may lead to the application leaking kernel memory...
Apostrophe Technologies ApostropheCMS: Server-side Request Forgery Vulnerability
Apostrophe Technologies' ApostropheCMS has a vulnerability related to server-side request forgeing. This vulnerability stems from the AI helper, which allows editors with image-generation capabilities to create base64-encoded image records without saving the provider’s URL. This triggers image...
SolarWinds Observability Self-Hosted Authorization Issue Vulnerability
SolarWinds Observability Self-Hosted versions 2026.2.3 and earlier have an authorization issue vulnerability. This vulnerability stems from defects in the authorization mechanism, which may allow low-privilege users to access and modify information beyond their permission scope...
Nokia 1830 Global Express security vulnerabilities
The Nokia 1830 Global Express G42, GX G31, GX G32, and GX G34 models prior to the GX r9.0 version have security vulnerabilities. These vulnerabilities stem from bypassing CLI ACLs. Low-privilege authenticated attackers can circumvent the SSH isolation mechanism through custom SSH commands, thereb...
Advantech Adam-3600 buffer error vulnerability
The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the log settings function, which could allow authenticated attackers to execute arbitrary code...
Vite launch-editor command injection vulnerability
Vite launch-editor has a command injection vulnerability. This vulnerability arises when an attacker can create file system entries in the working directory that start with a plus sign or minus sign. In such cases, launch-editor does not enforce the path as a positional file name. As a result, th...
TYPO3 Fluid-Form: Cross-site scripting vulnerability due to coding.ms
TYPO3 Fluid-Form: Versions from 6.0.0 to 6.0.6 and 5.0.10 and earlier have a cross-site scripting vulnerability. This vulnerability arises due to values entered by visitors being placed in HTML digest emails without being escaped properly, allowing unauthenticated attackers to inject HTML into...
WordPress Seriously Simple Podcasting Authorization Issue Vulnerability
WordPress Seriously Simple Podcasting 3.17.0 and earlier versions have a licensing issue vulnerability. This vulnerability stems from an absence of proper authorization, allowing attackers to exploit improperly configured access control levels...
WordPress Rootblox Cross-Site Script Vulnerability
WordPress Rootblox 1.0.7 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper input during web page generation, and it may lead to storage-based cross-site scripting attacks...
Apostrophe Technologies ApostropheCMS Authorization Issues Vulnerability
Apostrophe Technologies’ ApostropheCMS versions prior to 4.33.0 have a licensing issue vulnerability. This vulnerability stems from the REST API used in core pages, which reads the complete page documentation using .permissionfalse during tree dumps. This bypasses checks for page types such as...
Froxlor Postback Link Vulnerability
Versions of Froxlor prior to 2.3.15 had a post-linkage vulnerability. This vulnerability stemmed from a symbolic link issue in the Statistics::makeChownWithNewStats function. Certified customers can exploit this vulnerability by using a root account to run a cron job that replaces the goaccess...