DiviGear Carousel cross-site scripting vulnerability

DiviGear Carousel versions 5.2.0 and earlier have a cross-site scripting vulnerability. This vulnerability stems from the insufficient input cleaning and output escaping in the updatelicense AJAX operation. It may allow authenticated attackers with subscription or higher privileges to inject...

Apple iOS Buffer Overflow Vulnerability

Apple iOS versions prior to 27, Apple iPadOS versions prior to 27, Apple macOS Golden Gate versions prior to 27, Apple tvOS versions prior to 27, Apple visionOS versions prior to 27, and Apple watchOS versions prior to 27 have a buffer error vulnerability. This vulnerability stems from improper...

Advantech Adam-3600: Improper exception handling leads to vulnerabilities

The Advantech Adam-3600 versions prior to 2.8.5.0 have a vulnerability in exception handling. This vulnerability allows attackers to send specially crafted messages to trigger assertion failures, resulting in service crashes...

CodeWithCJ SparkyFitness Authorization Issue Vulnerability

Versions of CodeWithCJ SparkyFitness prior to 0.17.0 have a vulnerability related to authorization. This vulnerability arises from a lack of authorization checks. Authorized attackers can use the DELETE /api/foods/food-variants/:id endpoint to delete food variants for other users. They can also u...

Apple iOS Authorization Issue Vulnerability

Versions of Apple’s iOS prior to version 27, Apple iPadOS prior to version 27, and Apple macOS Golden Gate prior to version 27 have authorization-related vulnerabilities. These vulnerabilities may allow applications to access sensitive user data...

Apache Tomcat resource management error vulnerabilities

The Apache Tomcat versions from 11.0.0-M23 to 11.0.26, from 10.1.27 to 10.1.60, and from 9.0.92 to 9.0.122 contain a resource management error vulnerability. This vulnerability arises due to incomplete cleanup, resulting in the leakage of information from the end of one request into subsequent...

Apache Tomcat race condition vulnerability

There are concurrency issues with Apache Tomcat versions 11.0.22 to 11.0.26, 10.1.55 to 10.1.60, and 9.0.118 to 9.0.122. These issues stem from improper object recycling and reuse during HTTP/2 asynchronous Servlet processing, which may lead to confusion between requests and/or responses between...

Apple macOS Authorization Issues Vulnerability

Versions of Apple macOS Golden Gate prior to version 27 have a licensing issue vulnerability. This vulnerability stems from state management issues, which may allow applications to access sensitive user data...

Apple macOS Information Leakage Vulnerability

Versions of Apple macOS Golden Gate prior to version 27 have a vulnerability related to information leakage. This vulnerability stems from an imperfect privacy check mechanism, which may allow applications to access sensitive user data...

Apple iOS Buffer Overflow Vulnerability

Apple iOS versions prior to 26.7, Apple iPadOS versions prior to 26.7, Apple iOS versions prior to 27, Apple iPadOS versions prior to 27, Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia versions prior to 15.8, Apple macOS Tahoe versions prior to 26.7, and Apple VisionOS versions...

Agent2Agent A2A Java SDK Trust Management Vulnerability

The Agent2Agent A2A Java SDK versions from 1.3.0.Final to 1.3.2.Final contain a trust management issue. This issue arises because the AndroidA2AHttpClient’s synchronous POST path overrides the disabled redirection settings. Additionally, JSONRPCTransport and RestTransport send synchronous request...

XERJ Organization: XERJ Authorization Issues Vulnerability

The XERJ v1.0.0-rc.11 version has an authorization issue vulnerability. This vulnerability arises from the Bearer token being able to bypass the identity verification requirements of the restricted access key and directly call the API token to create endpoints. This may lead to the generation of...

Advantech Adam-3600 authorization issue vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have an authorization vulnerability. This vulnerability stems from a proprietary protocol that has authentication bypass issues, which may allow attackers to circumvent the authentication mechanism...

Apple iOS Buffer Overflow Vulnerability

Apple iOS versions prior to 26.7, Apple iPadOS versions prior to 26.7, Apple iOS versions prior to 27, Apple iPadOS versions prior to 27, Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia 15.8 versions prior to 27, Apple macOS Tahoe versions prior to 26.7, Apple tvOS versions prio...

WordPress Brizy Cross-Site Script Vulnerability

WordPress Brizy 2.8.23 has a cross-site scripting vulnerability, which stems from improper input during web page generation. This vulnerability may lead to storage-based cross-site scripting attacks...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer overflow vulnerability. This vulnerability stems from the FileProcess::CheckDir function, which has a stack-based buffer overflow. A remotely authenticated attacker can execute arbitrary code by using a path that exceeds 1024 bytes...

Academy Software Foundation OpenImageIO Digital Error Vulnerability

The Academy Software Foundation’s OpenImageIO versions prior to 3.0.20.0, as well as versions 3.1.15.0 and earlier i.e., 3.1.x series, and 3.2.0.3-beta1 and earlier i.e., 3.2.x series, contain a numerical error vulnerability. This vulnerability stems from an integer overflow in the...

Apache Tomcat resource management error vulnerabilities

The Apache Tomcat versions from 11.0.0-M21 to 11.0.26, from 10.1.25 to 10.1.60, and from 9.0.90 to 9.0.122 contain a resource management error vulnerability. This vulnerability arises due to incomplete cleanup processes, which may cause intermittent failures in TLS 1.3 connections...

Advantech Adam-3600 code injection vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a code injection vulnerability. This vulnerability stems from code injection, and it may allow remotely authenticated attackers to execute arbitrary code with service privileges...

OpenCATS Authorization Issue Vulnerability

Versions of OpenCATS prior to 0.10.0 have an authorization issue. This vulnerability stems from the absence of authorization checks in the ajax/deleteActivity.php and ajax/editActivity.php files. Authorized READ-level users can use GET or POST requests to provide any activity ID, allowing them to...

LavaLite authorization issue vulnerability

LavaLite 10.1.2 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the Filer module lacking authentication. Unauthorized attackers can provide arbitrary disk names and paths through the filer/download and filer/display routes, allowing them to retrieve...

Apostrophe Technologies ApostropheCMS Authorization Issues Vulnerability

Apostrophe Technologies ApostropheCMS has an authorization issue vulnerability. This vulnerability stems from the lack of authentication and authorization checks in the API endpoint POST /api/v1/@apostrophecms/import-export/clean-export. This allows unauthorized users, including those who obtain...

Fastify fast-uri: Vulnerability due to improper output processing

Versions of Fastify prior to 2.4.8, 3.0.0 through 3.1.8, and 4.0.0 through 4.2.2 contain security vulnerabilities. These vulnerabilities arise when the serialize, normalize, or resolve methods are used with a reference option set to a value other than the default suffix, and when the referenced...

Eclipse ThreadX – NetX Duo input validation vulnerability

Eclipse ThreadX – NetX Duo 6.5.1.202602 and earlier versions have a security vulnerability. This vulnerability stems from the X.509 parser in NetX Secure accepting RSA public keys of arbitrary size and decrypting them into a fixed-size buffer. Certificates with larger modulus values may lead to...

tox-dev filelock: Processing logic error vulnerability

The tox-dev filelock version 4.1.0 to 4.2.1 contained a processing logic vulnerability. This vulnerability stemmed from the SoftFileLock component reusing outdated observation results when at least two lock user processes were waiting. An attacker could set and delete their own markers, and use...

Mozilla Firefox: Vulnerability Due to Improper Exception Handling

Mozilla Firefox has a vulnerability related to improper exception handling. This vulnerability stems from an issue with the Audio/Video: cubeb component, where uninitialized memory is present, which may lead to information leakage...

SolarWinds Observability Self-Hosted Authorization Issue Vulnerability

SolarWinds Observability Self-Hosted versions 2026.2.3 and earlier have an authorization issue vulnerability. This vulnerability stems from defects in the authorization mechanism, which may allow low-privilege users to access and modify information beyond their permission scope...

Apple macOS Information Leakage Vulnerability

Versions of Apple macOS Golden Gate prior to version 27 have a vulnerability known as information leakage. This vulnerability arises from the removal of code that contained the vulnerability, which may lead to the application leaking kernel memory...

Coze-Dev and Coze-Studio: Configuration error vulnerabilities

Versions of coze-dev and coze-studio before 0.5.0 have a configuration error vulnerability. This vulnerability stems from insecure default configurations, allowing any registered user to execute commands in unshaded Python3 subprocedures by running workflow code nodes. Attackers can bypass the...

Advantech Adam-3600 digital error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a numerical error vulnerability. This vulnerability stems from an integer overflow in the license manager service, which could allow unauthenticated attackers to cause the service to crash...

Apple macOS Security Vulnerabilities

Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia versions prior to 15.8, and Apple macOS Tahoe versions prior to 26.7 have security vulnerabilities. These vulnerabilities stem from authentication issues, which may allow attackers to impersonate other users...

IBM Verify Identity Access Trust Management Vulnerability

The IBM Verify Identity Access version 11.0.3.1 and the IBM Security Verify Access Appliance version 10.0.9.3 have vulnerabilities related to trust management. These vulnerabilities stem from the use of hardcoded credentials, which may allow attackers located physically nearby to obtain elevated...

Froxlor Postback Link Vulnerability

Versions of Froxlor prior to 2.3.15 had a post-linkage vulnerability. This vulnerability stemmed from a symbolic link issue in the Statistics::makeChownWithNewStats function. Certified customers can exploit this vulnerability by using a root account to run a cron job that replaces the goaccess...

Apple iOS Security Vulnerabilities

Versions of Apple iOS prior to version 27 and Apple iPadOS prior to version 27 have security vulnerabilities. These vulnerabilities stem from authorization issues, which may allow applications to initiate calls or send messages...

Apple macOS Buffer Error Vulnerability

Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia versions prior to 15.8, and Apple macOS Tahoe versions prior to 26.7 have a buffer error vulnerability. This vulnerability stems from improper size validation, which can lead to a buffer overflow and potentially cause the applicati...

IBM TRIRIGA Application Platform Authorization Vulnerability

The IBM TRIRIGA Application Platform versions 5.0.0 to 5.0.8 have an authorization issue vulnerability. This vulnerability stems from improper authentication procedures, which may allow remotely authenticated attackers to execute arbitrary code...

LINE LIFF Cross-Site Scripting Vulnerability

The LINE LIFF SDK versions 2.20.0 to 2.31.0 have a cross-site scripting vulnerability. This vulnerability stems from a DOM-based cross-site scripting issue. When a user opens a specially crafted URL in an external browser, an attacker can execute arbitrary JavaScript on the affected LIFF...

Grafana Enterprise: Permissions, licensing, and access control issues

Grafana Enterprise versions 11.6.0 to 12.3.11, 12.4.13, and 12.4.x prior to version 12.4.13, 13.0.11 prior to version 13.0.x, 13.1.8 prior to version 13.1.x, and 13.2.4 prior to version 13.2.x have security vulnerabilities. These vulnerabilities stem from insecure direct object references in the...

Argo Project Argo CD Path Traversal Vulnerability

The Argo Project’s Argo CD versions from 0.9.0 to 3.3.15, as well as versions from 3.4.0-rc1 to 3.4.10, 3.5.0-rc1 to 3.5.4, and 3.6.0-rc1 to 3.6.0-rc2, have a path traversal vulnerability. This vulnerability arises because the repo-server does not restrict the import, importstr, and importbin...

Google Agent Development Kit path traversal vulnerability

The Google Agent Development Kit has a path traversal vulnerability. This vulnerability stems from the FileArtifactService having path traversal capabilities. When the ADK API server uses the non-default FileArtifactService, unauthenticated remote attackers can read files that conform to the...

DokuWiki.org DokuWiki deserialization injection vulnerability

DokuWiki.org: Versions prior to DokuWiki 2026-07-14c contained a deserialization injection vulnerability. This vulnerability stemmed from the use of Draft::getDraftText, which passed the content of the draft file to unserialize, without restricting the classes allowed. Authentication users with...

Modoboa authorization issue vulnerability

Versions of Modoboa prior to 2.8.0 contained an authorization issue vulnerability. This vulnerability stemmed from insecure direct object references. Certified users can delete alarms from other domains using the POST /api/v2/alarms/bulkdelete/ endpoint. Attackers can enumerate sequential alarm I...

Apostrophe Technologies ApostropheCMS Authorization Issues Vulnerability

Apostrophe Technologies ApostropheCMS versions prior to 4.33.0 have a licensing issue vulnerability. This vulnerability stems from the self-service password modification endpoint’s failure to use mechanisms such as failure attempt counting, throttling, delays, or locking when verifying the curren...

Apostrophe Technologies ApostropheCMS Authorization Issues Vulnerability

Apostrophe Technologies’ ApostropheCMS versions prior to 4.34.0 have a licensing issue vulnerability. This vulnerability arises from the fact that the getOne REST endpoint does not apply type-level restrictions on viewRoles or masking of the viewPermission field level. As a result, editing users...

Apostrophe Technologies ApostropheCMS information leakage vulnerability

Apostrophe Technologies’ ApostropheCMS versions prior to 4.34.0 have a vulnerability related to information leakage. This vulnerability arises from the use of the publicAPIProjection in the public REST API. By searching for member relationships and sorting orders, it is possible to determine whic...

Apostrophe Technologies ApostropheCMS information leakage vulnerability

Apostrophe Technologies’ ApostropheCMS versions prior to 4.34.0 have a vulnerability related to information leakage. This vulnerability stems from the fact that the POST /api/v1/@apostrophecms/doc/slugTaken interface does not perform permission or type filtering. It allows the retrieval of whethe...

Apple Xcode Input Validation Vulnerability

Versions of Apple Xcode prior to Xcode 27 contain a vulnerability related to input validation. This vulnerability arises from improper input validation, and parsing maliciously crafted binary files may lead to the application terminating unexpectedly...

IBM ContextForge MCP Gateway Server Request Forgery Vulnerability

The IBM ContextForge MCP Gateway versions 0.1.0 to 1.0.5 have a server-side request forge vulnerability. This vulnerability stems from the lack of verification of the oauthconfig.tokenurl parameter during the OAuth login process. Certified users with gateway creation permissions can construct...

cas-bigdatalab πFlow Authorization Issues Vulnerability

In the version 2.0.0 to 2.0.1 of cas-bigdatalab πFlow, there is an authorization vulnerability. This vulnerability stems from the lack of authentication for the POST /chat and POST /chat/stream endpoints in the DeepAgents chat proxy. Attackers can instruct the proxy to execute the execshell tool,...

ArmorX Global ArmorX Spam Code Injection Vulnerability

The ArmorX Global ArmorX versions prior to 8.15.2-3.282.133-1.90.061 have a code injection vulnerability. This vulnerability stems from path traversal, causing the application to contain PHP files that are outside of the expected directories. This may lead to local file inclusion...