Apache Traffic Server command injection vulnerability

The Apache Traffic Server versions 8.0.1 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a command injection vulnerability. This vulnerability arises from the experimental magick plugin, which allows unauthenticated clients to control the ImageMagick convert parameters under default...

NoMachine server request forgery vulnerability

NoMachine 9.8.21 version has a vulnerability related to server-side request forgeing. This vulnerability arises from the web service failing to correctly validate URIs before accessing resources. As a result, unauthorized remote attackers can initiate arbitrary server-side requests under the...

Cisco Emergency Responder path traversal vulnerability

Cisco Emergency Responder has a path traversal vulnerability, which stems from improper restrictions on path names within restricted directories, making it susceptible to path traversal attacks...

Apache Traffic Server has a vulnerability related to input validation errors.

The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation error vulnerability. This vulnerability arises from the forwarding of302 responses that should be treated as resolution errors. Additionally, the Transfer-Encoding: chunked...

Cisco Emergency Responder: Input validation error vulnerability

Cisco Emergency Responder has a vulnerability related to input validation errors. This vulnerability stems from improper control of resource lifecycle, which may lead to injection attacks...

CrewAI AMP Suite Code Injection Vulnerability

The CrewAI AMP Suite has a code injection vulnerability. This vulnerability stems from the loadagentfromrepository function not properly restricting the parameters provided by the user before they are used to import modules. This could allow remote attackers to execute arbitrary code within the...

Zephyr buffer error vulnerability

Versions of Zephyr 3.6.0 to 4.5.0 had a buffer error vulnerability. This vulnerability arises from the Nuvoton NPCX eSPI driver’s failure to validate the 12-bit length field when parsing TAF requests. As a result, out-of-bounds writes occur, and adjacent SRAM data is leaked into the SPI flash. Th...

Cisco TelePresence Video Communication Server Expressway information leakage vulnerability

The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to information leakage. This vulnerability stems from insufficient authorization checks for HTTP requests during the Mobile and Remote Access MRA provisioning process. As a result, unauthenticated remote...

Cisco Unified Communications Manager: Vulnerabilities in Permission Authorization and Access Control

Cisco Unified Communications Manager versions 14, 14SU1, 14SU2, 14SU3, 15, 15SU1, 14SU4, 14SU4a, 15SU1a, 15SU2, 15.0.1.13010-1, 15.0.1.13011-1, 15.0.1.13012-1, 15.0.1.13013-1, 15.0.1.13014-1, 15.0.1.13015-1, 15.0.1.13016-1, 15.0.1.13017-1, 15SU3a, 14SU5, 15SU4, 15SU4a, and 14SU6 have...

Cisco Emergency Responder Cross-site Scripting Vulnerability

Cisco Emergency Responder has a cross-site scripting vulnerability, which stems from improper input during web page generation. This vulnerability may lead to cross-site scripting attacks...

Cisco TelePresence Video Communication Server Expressway: Permissions and access control vulnerabilities

The Cisco TelePresence Video Communication Server Expressway has vulnerabilities related to permission authorization and access control. These vulnerabilities stem from improper permission allocation, which may allow local, low-privilege attackers to escalate their privileges and obtain sensitive...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.21.0 have a resource management error vulnerability. This vulnerability allows attackers to create PDFs that cause excessive memory usage or prolonged processing times when the application retrieves document form fields...

Cisco Emergency Responder Improper Exception Handling Vulnerability

Cisco Emergency Responder has a vulnerability related to improper handling of exceptions. This vulnerability stems from improper processing of exceptional conditions and may lead to denial-of-service attacks...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability arises from the Android client not verifying the mappedWidth and mappedHeight values. An attacker can send a specially crafted RDP GFXMAPSURFACETOWINDOWPDU with an excessively large size, causing...

Electron Cross-Site Request Forgery Vulnerability

Versions of Electron prior to 42.11.3, 43.0.0-alpha.1 through 43.7.0, 44.0.0-alpha.1 through 44.3.0, and 45.0.0-alpha.1 through 45.0.0-alpha.6 contain a cross-site request forgeing vulnerability. This vulnerability arises from treating a page that opens in a new window as a navigation request...

Cisco Cyber Vision Permission Licensing and Access Control Vulnerabilities

Cisco Cyber Vision 3.0.0 to 5.8.1 versions have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper permission management, which may lead to unauthorized privilege escalation...

Electron Authorization Issues Vulnerability

Versions of Electron prior to 42.11.1, 43.0.0-alpha.1 through 43.5.1, 44.0.0-alpha.1 through 44.1.1, and 45.0.0-alpha.1 through 45.0.0-alpha.4 have an authorization issue. This issue stems from improper permission checks for the chrome.tabs.query function. It allows extensions that lack both tabs...

Apache Traffic Server has a vulnerability related to input validation errors.

The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation vulnerability. This vulnerability arises when the source server returns the connection back to the shared pool while it is still waiting for a request body that was not fully...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to the current version contain security vulnerabilities. These vulnerabilities stem from the use of the gffilterpidsendeventdownstream function /filtercore/filterpid.c, where a stack reutilization issue exists after the heap is released. This could allow attacker...

Agent2Agent A2A Rust SDK race condition vulnerability

The Agent2Agent A2A Rust SDK versions 0.4.0, 0.4.1, 0.4.2, 0.4.3, and 0.4.4 have a race condition vulnerability. This vulnerability stems from improper handling of the InMemoryTaskStore::update function in the file a2a-server/src/taskstore/inmemory.rs. It may lead to race conditions, and remote...

Chris Trudesk path traversal vulnerability

Chris Trudesk versions 1.2.11 and earlier have a path traversal vulnerability. This vulnerability stems from path traversal attacks, where administrators can delete any file by providing encoded traversal sequences for the DELETE /api/v1/backup/:backup request. Additionally, unvalidated file valu...

Cisco Cyber Vision Improper Exception Handling Vulnerabilities

Cisco Cyber Vision has a vulnerability in exception handling. This vulnerability stems from the GRE tunnel decapsulation function in the Snort 3 Detection Engine, which improperly processes nested GRE traffic. Unauthenticated remote attackers can send custom GRE payloads through the affected...

GIMP buffer error vulnerability

GIMP 3.2.2 has a buffer error vulnerability. This vulnerability stems from the improper validation of the length of the data provided by the user when parsing APNG files. The data is copied into the stack buffer without proper validation, leading to a stack buffer overflow. This could allow remot...

Cisco Cyber Vision Resource Management Error Vulnerability

Cisco Cyber Vision 3.0.0 version to 5.8.1 version, Cisco Open Source Snort3 3.1.2.0 version to 3.12.2.0 version, Cisco Secure Firewall Threat Defense FTD Software 7.0.0 version to 10.0.0 version, and Cisco UTD SNORT IPS Engine Software 17.12.1a version to 26.1.2 version contain a resource...

Astral UV path traversal vulnerability

Versions of Astral UV prior to 0.11.15 have a path traversal vulnerability. This vulnerability arises from improper handling of the names of entry points for custom consolescripts or guiscripts, making them susceptible to path traversal attacks. This could allow malicious wheels to write files...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability stems from the DVIADPCM block-aligning arithmetic operations in the rdpnsndserverselectformat function of the server’s rdpnsnd channel. Integer round-off occurs, and validations are bypassed. A malicious RDP...

Cisco Emergency Responder Authorization Issues Vulnerability

The Cisco Emergency Responder has an authorization issue vulnerability, which stems from improper authentication procedures. This vulnerability may lead to authentication bypasses...

BusyBox path traversal vulnerability

BusyBox 1.37.0 has a path traversal vulnerability. This vulnerability stems from the lack of proper validation in the file operations conducted by the libarchive component, allowing for path traversal and the creation of arbitrary files...

NoMachine buffer error vulnerability

NoMachine 9.8.21 version has a buffer overflow vulnerability. This vulnerability stems from the improper validation of the length of data provided by users when parsing mDNS resource records. As a result, a heap buffer overflow occurs, allowing network-near attackers to execute arbitrary code in...

Cisco TelePresence Video Communication Server Expressway Trust Management Vulnerability

The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to trust management. This vulnerability stems from the use of persistent cookies. When the cluster’s TLS authentication mode is enabled, insufficient client certificate verification occurs. This may allow...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to a certain date contained a security vulnerability. This vulnerability stemmed from a null pointer dereferencing in the dasherinserttimelineentry function /filters/dasher.c. Attackers could exploit this vulnerability by providing a specially crafted MP4 file,...

Bartek Pampuch: PDFMake has a vulnerability in input validation.

Bartek Pampuch’s pdfmake version 0.3.8 to 0.3.12 had a vulnerability related to input validation errors. This vulnerability stemmed from the lack of applying setLocalAccessPolicy restrictions on the SVG content that referenced local images. Attackers could exploit this vulnerability by providing...

Fedora Modularity: libmodulemd buffer error vulnerability

Fedora Modularity’ libmodulemd has a buffer error vulnerability. This vulnerability stems from an internal loop in the rpm-map output path of module stream v2, which incorrectly uses the number of digest algorithms as the boundary, instead of the number of checksums in the current digest table...

NLnet Labs Unbound Resource Management Vulnerability

NLnet Labs Unbound versions 1.26.1 and earlier have a resource management vulnerability. This vulnerability stems from the lack of a overall budget limit on the incoming decompression workload. A large number of chained compression pointers can lead to excessive CPU usage. Attackers can exploit...

ISC BIND 9 Improper exception handling vulnerability

In versions 9.16.0 to 9.18.50, 9.20.0 to 9.20.29, 9.21.0 to 9.21.26, 9.16.8-S1 to 9.18.50-S1, and 9.20.9-S1 to 9.20.29-S1 of BIND, there are vulnerabilities related to improper exception handling. These vulnerabilities arise from the BIND resolver, which includes both “redirect” and...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to the current version contain security vulnerabilities. These vulnerabilities stem from a segmentation violation in the checkmediaprofile function, which could allow attackers to cause denial-of-service attacks by providing specially crafted MP4 files...

Cisco Secure Client input validation error vulnerability

Cisco Secure Client versions 4.9.00086, 4.9.01095, 4.9.02028, 4.9.03047, 4.9.03049, 4.9.04043, 4.9.04053, 4.9.05042, 4.9.06037, 4.10.00093, 4.10.01075, 4.10.02086, 4.10.03104, 4.10.04065, 4.10.04071, 4.10.05085, 4.10.05095, 5.0.00238, 4.10.05111, 5.0.00529, 5.0.00556, 4.10.06079, 5.0.01242,...

Model Context Protocol MCP TypeScript SDK Authorization Vulnerability

The Model Context Protocol MCP TypeScript SDK versions from 1.24.0 to 1.32.0 have a security vulnerability. This vulnerability arises from the experimental task feature taskStore not checking the sessions used to create tasks. Clients sharing the same InMemoryTaskStore can potentially list, read,...

Apostrophe Technologies ApostropheCMS Authorization Issues Vulnerability

Apostrophe Technologies’ ApostropheCMS versions prior to 4.33.0 have a vulnerability related to authorization. This vulnerability stems from the notification module exposing PATCH and DELETE REST endpoints that directly operate on the underlying MongoDB collections. No verification is performed t...

Eosphoros DB-GPT Trust Management Vulnerabilities

eosphoros DB-GPT versions 0.8.2 and earlier have a trust management vulnerability. This vulnerability stems from hard-coded credentials in the default docker-compose.yml file. A static MYSQLROOTPASSWORD is set, and port 3306 is exposed on all interfaces. An attacker can authenticate as root@% and...

EspoCRM authorization issue vulnerability

EspoCRM versions 9.3.10 and earlier, as well as 10.0.10 and earlier, have an authorization vulnerability. This vulnerability stems from improper handling of the parameter ID in the ImageSourceProvider::get function within the PDF Rendering Pipeline component. This could lead to authorization...

Letta encryption problem vulnerabilities

Letta versions 0.16.8 and earlier have encryption-related vulnerabilities. This vulnerability stems from the LocalSandbox sub-process inheriting the entire server environment. Attackers can exploit this by running code via POST /v1/tools/run or custom tools, thereby reading LETTAPGURI,...

WordPress Brizy Cross-Site Script Vulnerability

WordPress Brizy 2.8.23 has a cross-site scripting vulnerability, which stems from improper input during web page generation. This vulnerability may lead to storage-based cross-site scripting attacks...

Apple iOS Security Vulnerabilities

Versions of Apple’s operating systems prior to iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 contain security vulnerabilities. These vulnerabilities stem from access control issues, which may allow applications to access sensitive user data...

WordPress Seriously Simple Podcasting Authorization Issue Vulnerability

WordPress Seriously Simple Podcasting 3.17.0 and earlier versions have a licensing issue vulnerability. This vulnerability stems from an absence of proper authorization, allowing attackers to exploit improperly configured access control levels...

Optimal IdM OptimalCloud cross-site scripting vulnerabilities

The Optimal IdM OptimalCloud 5.0 version contains a security vulnerability. This vulnerability stems from incorrect handling of the parameter “tz” in the file /v5.0/webapps/pages/public/Login, which may lead to cross-site scripting attacks...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component. This could allow low-privilege attackers to log into the infrastructure where the vulnerabilities reside,...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Adapters component. Unauthorized attackers may gain access through HTTP network connections. They can unauthorizedly create, delete, or modify critical data or all...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the E1 Dev Platform Tech - Cloud component. They are difficult to exploit and could allow high-privilege attackers to log in and execute actions on the...

EventON – Subscriber SQL injection vulnerability

EventON – Subscriptions versions 1.4.5 and earlier have a SQL injection vulnerability. This vulnerability stems from insufficient escaping of the email parameters and inadequate preparation for existing SQL queries. It may allow unauthenticated attackers to append additional SQL queries to existi...