NoMachine server request forgery vulnerability

NoMachine 9.8.21 version has a vulnerability related to server-side request forgeing. This vulnerability arises from the web service failing to correctly validate URIs before accessing resources. As a result, unauthorized remote attackers can initiate arbitrary server-side requests under the...

Apache Traffic Server has a vulnerability related to input validation errors.

The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation vulnerability. This vulnerability arises when the source server returns the connection back to the shared pool while it is still waiting for a request body that was not fully...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to the current version contain security vulnerabilities. These vulnerabilities stem from a segmentation violation in the checkmediaprofile function, which could allow attackers to cause denial-of-service attacks by providing specially crafted MP4 files...

Bartek Pampuch: PDFMake has a vulnerability in input validation.

Bartek Pampuch’s pdfmake version 0.3.8 to 0.3.12 had a vulnerability related to input validation errors. This vulnerability stemmed from the lack of applying setLocalAccessPolicy restrictions on the SVG content that referenced local images. Attackers could exploit this vulnerability by providing...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to the current version contain security vulnerabilities. These vulnerabilities stem from the use of the gffilterpidsendeventdownstream function /filtercore/filterpid.c, where a stack reutilization issue exists after the heap is released. This could allow attacker...

GIMP buffer error vulnerability

GIMP 3.2.2 has a buffer error vulnerability. This vulnerability stems from the improper validation of the length of the data provided by the user when parsing APNG files. The data is copied into the stack buffer without proper validation, leading to a stack buffer overflow. This could allow remot...

NoMachine buffer error vulnerability

NoMachine 9.8.21 version has a buffer overflow vulnerability. This vulnerability stems from the improper validation of the length of data provided by users when parsing mDNS resource records. As a result, a heap buffer overflow occurs, allowing network-near attackers to execute arbitrary code in...

Cisco Cyber Vision Permission Licensing and Access Control Vulnerabilities

Cisco Cyber Vision 3.0.0 to 5.8.1 versions have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper permission management, which may lead to unauthorized privilege escalation...

Apache Traffic Server has a vulnerability related to input validation errors.

The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation error vulnerability. This vulnerability arises from the forwarding of302 responses that should be treated as resolution errors. Additionally, the Transfer-Encoding: chunked...

Electron Authorization Issues Vulnerability

Versions of Electron prior to 42.11.1, 43.0.0-alpha.1 through 43.5.1, 44.0.0-alpha.1 through 44.1.1, and 45.0.0-alpha.1 through 45.0.0-alpha.4 have an authorization issue. This issue stems from improper permission checks for the chrome.tabs.query function. It allows extensions that lack both tabs...

Agent2Agent A2A Rust SDK race condition vulnerability

The Agent2Agent A2A Rust SDK versions 0.4.0, 0.4.1, 0.4.2, 0.4.3, and 0.4.4 have a race condition vulnerability. This vulnerability stems from improper handling of the InMemoryTaskStore::update function in the file a2a-server/src/taskstore/inmemory.rs. It may lead to race conditions, and remote...

Cisco Cyber Vision Resource Management Error Vulnerability

Cisco Cyber Vision 3.0.0 version to 5.8.1 version, Cisco Open Source Snort3 3.1.2.0 version to 3.12.2.0 version, Cisco Secure Firewall Threat Defense FTD Software 7.0.0 version to 10.0.0 version, and Cisco UTD SNORT IPS Engine Software 17.12.1a version to 26.1.2 version contain a resource...

Chris Trudesk path traversal vulnerability

Chris Trudesk versions 1.2.11 and earlier have a path traversal vulnerability. This vulnerability stems from path traversal attacks, where administrators can delete any file by providing encoded traversal sequences for the DELETE /api/v1/backup/:backup request. Additionally, unvalidated file valu...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability arises from the Android client not verifying the mappedWidth and mappedHeight values. An attacker can send a specially crafted RDP GFXMAPSURFACETOWINDOWPDU with an excessively large size, causing...

Astral UV path traversal vulnerability

Versions of Astral UV prior to 0.11.15 have a path traversal vulnerability. This vulnerability arises from improper handling of the names of entry points for custom consolescripts or guiscripts, making them susceptible to path traversal attacks. This could allow malicious wheels to write files...

Cisco Emergency Responder Improper Exception Handling Vulnerability

Cisco Emergency Responder has a vulnerability related to improper handling of exceptions. This vulnerability stems from improper processing of exceptional conditions and may lead to denial-of-service attacks...

Cisco Emergency Responder Authorization Issues Vulnerability

The Cisco Emergency Responder has an authorization issue vulnerability, which stems from improper authentication procedures. This vulnerability may lead to authentication bypasses...

BusyBox path traversal vulnerability

BusyBox 1.37.0 has a path traversal vulnerability. This vulnerability stems from the lack of proper validation in the file operations conducted by the libarchive component, allowing for path traversal and the creation of arbitrary files...

Apache Traffic Server command injection vulnerability

The Apache Traffic Server versions 8.0.1 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a command injection vulnerability. This vulnerability arises from the experimental magick plugin, which allows unauthenticated clients to control the ImageMagick convert parameters under default...

Electron Cross-Site Request Forgery Vulnerability

Versions of Electron prior to 42.11.3, 43.0.0-alpha.1 through 43.7.0, 44.0.0-alpha.1 through 44.3.0, and 45.0.0-alpha.1 through 45.0.0-alpha.6 contain a cross-site request forgeing vulnerability. This vulnerability arises from treating a page that opens in a new window as a navigation request...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to a certain date contained a security vulnerability. This vulnerability stemmed from a null pointer dereferencing in the dasherinserttimelineentry function /filters/dasher.c. Attackers could exploit this vulnerability by providing a specially crafted MP4 file,...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability stems from the DVIADPCM block-aligning arithmetic operations in the rdpnsndserverselectformat function of the server’s rdpnsnd channel. Integer round-off occurs, and validations are bypassed. A malicious RDP...

Cisco Cyber Vision Improper Exception Handling Vulnerabilities

Cisco Cyber Vision has a vulnerability in exception handling. This vulnerability stems from the GRE tunnel decapsulation function in the Snort 3 Detection Engine, which improperly processes nested GRE traffic. Unauthenticated remote attackers can send custom GRE payloads through the affected...

Cisco Secure Client input validation error vulnerability

Cisco Secure Client versions 4.9.00086, 4.9.01095, 4.9.02028, 4.9.03047, 4.9.03049, 4.9.04043, 4.9.04053, 4.9.05042, 4.9.06037, 4.10.00093, 4.10.01075, 4.10.02086, 4.10.03104, 4.10.04065, 4.10.04071, 4.10.05085, 4.10.05095, 5.0.00238, 4.10.05111, 5.0.00529, 5.0.00556, 4.10.06079, 5.0.01242,...

Mozilla Firefox resource management error vulnerability

Mozilla Firefox has a resource management vulnerability, which stems from a denial-of-service issue in the PDF Viewer component...

SolarWinds Observability Self-Hosted Server Request Forgery Vulnerability

SolarWinds Observability Self-Hosted versions 2026.2.3 and earlier have a server-side request forgeing vulnerability. This vulnerability stems from server-side request forgeing, where authenticated attackers can cause the application server to send requests to targets controlled by the attackers ...

Advantech Adam-3600 code injection vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a code injection vulnerability. This vulnerability stems from code injection, and it may allow remotely authenticated attackers to execute arbitrary code with service privileges...

Advantech Adam-3600: Improper exception handling leads to vulnerabilities

The Advantech Adam-3600 versions prior to 2.8.5.0 have a vulnerability in exception handling. This vulnerability allows attackers to send specially crafted messages to trigger assertion failures, resulting in service crashes...

Apple macOS Security Vulnerabilities

Versions of Apple macOS Golden Gate prior to version 27 contain security vulnerabilities. These vulnerabilities stem from insufficient integrity checks on application packages, which may allow maliciously modified applications to be launched without being prevented...

Apple iOS Authorization Issue Vulnerability

Versions of Apple iOS prior to version 27 and Apple iPadOS prior to version 27 have a licensing issue vulnerability. This vulnerability stems from state management issues, which may allow attackers with physical access to locked devices to bypass Digital ID authentication when iPhone Mirroring is...

Apostrophe Technologies ApostropheCMS: Vulnerabilities in Permissions Management and Access Control

Apostrophe Technologies' ApostropheCMS has a security vulnerability. This vulnerability arises from authenticated users who have permission to import target types being able to use objects or operators as update key values. As a result, import queries may match with unrecognized existing document...

Apostrophe Technologies ApostropheCMS Authorization Issues Vulnerability

Apostrophe Technologies’ ApostropheCMS versions prior to 4.33.0 have a licensing issue vulnerability. This vulnerability stems from the REST API used in core pages, which reads the complete page documentation using .permissionfalse during tree dumps. This bypasses checks for page types such as...

Apple Xcode security vulnerabilities

Versions of Apple Xcode prior to Xcode 27 contain security vulnerabilities. These vulnerabilities stem from the lack of forced library verification for affected binary files, which may allow applications to bypass the sandbox...

Nokia 1830 Global Express security vulnerabilities

The Nokia 1830 Global Express G42, GX G31, GX G32, and GX G34 models prior to the GX r9.0 version have security vulnerabilities. These vulnerabilities stem from bypassing CLI ACLs. Low-privilege authenticated attackers can circumvent the SSH isolation mechanism through custom SSH commands, thereb...

DrayTek Vigor2960 path traversal vulnerability

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a path traversal vulnerability. This vulnerability stems from the handling of the 'action' parameter in the '/cgi-bin/mainfunction.cgi' file within component Apmupload, allowing for path traversal attacks. Attackers can exploit this vulnerability remote...

DrayTek Vigor2960: Input validation error vulnerability

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a security vulnerability. This vulnerability stems from the incorrect handling of parameters in the option field of the ruequestcertificate function in the /cgi-bin/mainfunction.cgi file within the IPsec Handler component. This could lead to remote...

Apple macOS Authorization Issues Vulnerability

Versions of Apple macOS Golden Gate prior to version 27 have a licensing issue vulnerability. This vulnerability stems from state management issues, which may allow applications to access sensitive user data...

Chatwoot Cross-Site Script Vulnerability

Versions of Chatwoot prior to 4.14.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from video embedding links in the Help Center article, where the iframe src attribute was not properly escaped. This could lead to a stored-xss attack, allowing account administrators t...

WSO2 Enterprise Integrator Authorization Issue Vulnerability

WSO2 Enterprise Integrator 6.6.0 to 6.6.0.204 before version; WSO2 Identity Server 5.10.0 to 5.10.0.286 before version, 5.11.0 to 5.11.0.344 before version, 6.0.0 to 6.0.0.188 before version, 6.1.0 to 6.1.0.150 before version, and 7.0.0 to 7.0.0.35 before version; WSO2 API Manager 3.1.0 to...

Advantech Adam-3600 path traversal vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a path traversal vulnerability. This vulnerability allows for attacks where path traversal is possible, potentially enabling authenticated attackers to access any file on the system...

Juan Leyva’s configurable reports block for Moodle has an authorization issue vulnerability

Juan Leyva’s Configurable Reports block for Moodle versions prior to 5.3.0 has an authorization issue. This vulnerability stems from an authorization bypass. When the checkpermissions validation fails, adding only a warning still results in the display of complete report data. As a result,...

jcrodriguez-dis Virtual Programming Lab for Moodle Cross-Site Script Vulnerabilities

The jcrodriguez-dis Virtual Programming Lab for Moodle versions prior to 5.0.0 has a cross-site scripting vulnerability. This vulnerability stems from the unencoded filename1/filename2 parameters in the similarity/diff.php file. It may lead to reflective cross-site scripting attacks. Attackers ca...

Advantech Adam-3600 authorization issue vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have an authorization vulnerability. This vulnerability stems from proprietary protocols that allow attackers to perform unlimited brute-force attacks on administrator passwords, even when the SafeEnhancement feature is enabled...

IBM Verify Identity Access Trust Management Vulnerability

The IBM Verify Identity Access version 11.0.3.1 and the IBM Security Verify Access Appliance version 10.0.9.3 have vulnerabilities related to trust management. These vulnerabilities stem from the use of hardcoded credentials, which may allow attackers located physically nearby to obtain elevated...

Apple iOS Buffer Overflow Vulnerability

Apple iOS versions prior to 27, Apple iPadOS versions prior to 27, Apple macOS Golden Gate versions prior to 27, Apple tvOS versions prior to 27, Apple visionOS versions prior to 27, and Apple watchOS versions prior to 27 have a buffer error vulnerability. This vulnerability stems from improper...

Apple macOS Information Leakage Vulnerability

Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia versions prior to 15.8, and Apple macOS Tahoe versions prior to 26.7 have a vulnerability that leads to information leakage due to improper state management. This vulnerability may allow applications to access sensitive network...

Open Source Social Network: Input validation error vulnerability

The Open Source Social Network versions 9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6, 9.7, 9.8, 9.9, 9.10, 9.11, 10.0, and 10.1 have security vulnerabilities. These vulnerabilities stem from improper handling of parameters such as host, port, username, password, type, and status in the...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer error vulnerability. This vulnerability stems from issues with heap memory reading, which may allow attackers to disclose sensitive data...

OpenCATS Authorization Issue Vulnerability

Versions of OpenCATS prior to 0.10.0 have an authorization issue vulnerability. This vulnerability stems from the lack of authorization checks. Users with READ privileges can create, rename, delete, and populate save lists through AJAX endpoints. Authorized attackers can send requests with...

Fat Free CRM Authorization Issues Vulnerability

Versions of Fat Free CRM prior to 0.26.0 have a permission-related vulnerability. This vulnerability stems from the use of Comment.find with an unconstrained scope in CommentsControllerupdate and destroy, without proper authorization checks. Attackers can send PUT or DELETE requests to...