ISC BIND 9 race condition vulnerabilities

Security vulnerabilities exist in ISC BIND versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1. These vulnerabilities stem from the ability to replay signed UDP messages with GSS-TSIG signatures, which can...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to the current version contain security vulnerabilities. These vulnerabilities stem from a segmentation violation in the checkmediaprofile function, which could allow attackers to cause denial-of-service attacks by providing specially crafted MP4 files...

Cisco TelePresence Video Communication Server Expressway information leakage vulnerability

The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to information leakage. This vulnerability stems from insufficient authorization checks for HTTP requests during the Mobile and Remote Access MRA provisioning process. As a result, unauthenticated remote...

Cisco TelePresence Video Communication Server Expressway: Permissions and access control vulnerabilities

The Cisco TelePresence Video Communication Server Expressway has vulnerabilities related to permission authorization and access control. These vulnerabilities stem from improper permission allocation, which may allow local, low-privilege attackers to escalate their privileges and obtain sensitive...

Cisco Cyber Vision Digital Error Vulnerability

Cisco Cyber Vision has a numerical error vulnerability, which stems from incorrect calculations and may lead to denial-of-service attacks...

Cisco Emergency Responder path traversal vulnerability

Cisco Emergency Responder has a path traversal vulnerability, which stems from improper restrictions on path names within restricted directories, making it susceptible to path traversal attacks...

Agent2Agent A2A Rust SDK race condition vulnerability

The Agent2Agent A2A Rust SDK versions 0.4.0, 0.4.1, 0.4.2, 0.4.3, and 0.4.4 have a race condition vulnerability. This vulnerability stems from improper handling of the InMemoryTaskStore::update function in the file a2a-server/src/taskstore/inmemory.rs. It may lead to race conditions, and remote...

Astral UV path traversal vulnerability

Versions of Astral UV prior to 0.8.22 have a path traversal vulnerability. This vulnerability stems from improper path handling during the tar extraction process in the source code distribution sdist. A specially crafted sequence of symbolic links can redirect file writing to locations outside of...

VyperLang Vyper Processing Logic Vulnerability

VyperLang Vyper 0.1.0b10 to 0.2.3 versions have a processing logic error. This bug stems from incorrect code generated by return statements within for loops in internal functions that call other functions at least two levels deep. This results in invalid jump targets stack underflow, causing...

Electron input validation vulnerability

Versions of Electron prior to 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5 contain a vulnerability related to input validation errors. This vulnerability arises from requests for external protocol URLs being assigned to documents other than those that initiated the request. As a result, the...

Acronis Cyber Infrastructure Authorization Issue Vulnerability

Versions of Acronis Cyber Infrastructure prior to 6.0.1-112, 6.1.1-64, and 6.2.1-71 have vulnerabilities related to authorization checks. These vulnerabilities stem from improper authorization validation, which may lead to the exposure of sensitive information and data corruption...

NoMachine server request forgery vulnerability

NoMachine 9.8.21 version has a vulnerability related to server-side request forgeing. This vulnerability arises from the web service failing to correctly validate URIs before accessing resources. As a result, unauthorized remote attackers can initiate arbitrary server-side requests under the...

Chris Trudesk path traversal vulnerability

Chris Trudesk versions 1.2.11 and earlier have a path traversal vulnerability. This vulnerability stems from the accountsController.uploadImage function, which involves path traversal and authorization bypasses. Certified users can overwrite other user avatars using the id and username fields...

Cisco Cyber Vision Improper Exception Handling Vulnerabilities

Cisco Cyber Vision has a vulnerability in exception handling. This vulnerability stems from the GRE tunnel decapsulation function in the Snort 3 Detection Engine, which improperly processes nested GRE traffic. Unauthenticated remote attackers can send custom GRE payloads through the affected...

Acronis Cyber Infrastructure Authorization Issue Vulnerability

Versions of Acronis Cyber Infrastructure prior to 6.0.1-112, 6.1.1-64, and 6.2.1-71 have vulnerabilities related to authorization checks. These vulnerabilities stem from improper authorization validation, which may lead to the exposure of sensitive information and data corruption...

vLLM input validation vulnerability

Versions of vLLM prior to 0.31.0 have a vulnerability related to input validation errors. This vulnerability stems from using the multi-modal UUID provided by the client as a cache identifier without proper consistency checks when the cache is hit. This allows unauthenticated attackers to cause t...

Chris Trudesk: Vulnerability in input validation

Chris Trudesk versions 1.2.11 and earlier have a vulnerability in input validation. This vulnerability stems from regular expression injection: unvalidated attackers can submit regular expression patterns to the POST /api/v1/login endpoint. By distinguishing the responses for invalid usernames an...

VyperLang Vyper Processing Logic Vulnerability

In versions of Vyper before 0.1.0b17, there were processing logic errors in versions 0.1.0b1 and from 0.4.1 to 0.5.0b1. This issue arose from using str.splitlines to construct a source code line table, where characters such as the page break character and U+2028 were treated as line breaks that...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to a certain date contained a security vulnerability. This vulnerability stemmed from a null pointer dereferencing in the dasherinserttimelineentry function /filters/dasher.c. Attackers could exploit this vulnerability by providing a specially crafted MP4 file,...

Apache Traffic Server command injection vulnerability

The Apache Traffic Server versions 8.0.1 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a command injection vulnerability. This vulnerability arises from the experimental magick plugin, which allows unauthenticated clients to control the ImageMagick convert parameters under default...

Cisco Unified Communications Manager: Vulnerabilities in Permission Authorization and Access Control

Cisco Unified Communications Manager versions 14, 14SU1, 14SU2, 14SU3, 15, 15SU1, 14SU4, 14SU4a, 15SU1a, 15SU2, 15.0.1.13010-1, 15.0.1.13011-1, 15.0.1.13012-1, 15.0.1.13013-1, 15.0.1.13014-1, 15.0.1.13015-1, 15.0.1.13016-1, 15.0.1.13017-1, 15SU3a, 14SU5, 15SU4, 15SU4a, and 14SU6 have...

Best Practice Software Bp Premier Trust Management Vulnerability

The Best Practice Software Bp Premier versions prior to 1.14.1.1128 have a vulnerability related to trust management. This vulnerability arises from the use of a hardcoded Microsoft SQL Server management password shared across all installations. An attacker with network access to database instanc...

vyperlang Vyper Input Validation Vulnerability

In versions of Vyper from 0.1.0b1 to 0.1.0b12, as well as from 0.1.0b14 to 0.1.0b15, and from 0.4.1 to 0.5.0b1, there is a vulnerability related to input validation errors. This vulnerability stems from the use of character-based line offsets in the vyper/ast/parse.py module, along with Python’s...

Agent2Agent A2A Rust SDK information leakage vulnerability

The Agent2Agent A2A Rust SDK 0.4.3 and earlier versions have a security vulnerability. This vulnerability stems from improper handling of the parameter historyLength in the file a2a-server/src/taskstore/inmemory.rs. It can be exploited remotely, leading to information leakage...

BusyBox path traversal vulnerability

BusyBox 1.37.0 has a path traversal vulnerability. This vulnerability stems from the lack of proper validation in the file operations conducted by the libarchive component, allowing for path traversal and the creation of arbitrary files...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.20.0 have a resource management error vulnerability. This vulnerability arises when accessing a specially crafted PDF stream that contains a large number of filters or multiple filters and transmits a large amount of data, potentially leading to excessive memory...

WordPress SureCart cross-site scripting vulnerabilities

WordPress SureCart 4.9.5 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper input validation during web page generation, which may lead to stored-cross-site scripting attacks...

Apache Traffic Server has a vulnerability related to input validation errors.

The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation vulnerability. This vulnerability arises when the source server returns the connection back to the shared pool while it is still waiting for a request body that was not fully...

Cisco TelePresence Video Communication Server Expressway Trust Management Vulnerability

The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to trust management. This vulnerability stems from the use of persistent cookies. When the cluster’s TLS authentication mode is enabled, insufficient client certificate verification occurs. This may allow...

Electron input validation vulnerability

Versions of Electron prior to 42.11.9, 43.0.0-alpha.1 through 43.7.6, 44.0.0-alpha.1 through 44.5.0, and 45.0.0-alpha.1 through 45.0.0-alpha.13 have a input validation error vulnerability. This vulnerability arises from pointerLock permission requests from certain cross-source iframes, causing...

Cisco TelePresence Video Communication Server Expressway: Code Injection Vulnerability

Cisco TelePresence Video Communication Server Expressway has a code injection vulnerability. This vulnerability stems from a code injection issue, which may allow for the execution of arbitrary code...

Coraza - Web Application Firewall: Input validation error vulnerability

Coraza – Web Application Firewall versions 3.0.4 to 3.8.1 had a vulnerability related to input validation errors. This issue arose from an exact comparison of the entire Content-Type value during the request body processor selection. As a result, URL-encoded request bodies containing media type...

The Brain ADM-ZIP for NodeJS has vulnerabilities related to permissions and access control.

The Brain ADM-ZIP for NodeJS versions prior to 0.6.1 has a vulnerability related to permission granting and access control. This vulnerability arises from improper permission allocation when keepOriginalPermission is enabled. An attacker can manipulate the properties of external zip files, allowi...

Cisco Secure Client input validation error vulnerability

Cisco Secure Client versions 4.9.00086, 4.9.01095, 4.9.02028, 4.9.03047, 4.9.03049, 4.9.04043, 4.9.04053, 4.9.05042, 4.9.06037, 4.10.00093, 4.10.01075, 4.10.02086, 4.10.03104, 4.10.04065, 4.10.04071, 4.10.05085, 4.10.05095, 5.0.00238, 4.10.05111, 5.0.00529, 5.0.00556, 4.10.06079, 5.0.01242,...

Zephyr race condition vulnerabilities

Zephyr versions from 2.2.0 to 4.5.0 have a race condition vulnerability. This issue arises when calling zwaitqhead on the SMP system to read the head of the thread wait queue, without holding the scheduler spinlockschedspinlock. This creates a race condition with the haltthread function that...

Itsourcecode Online Cake Ordering System Cross-Site Script Vulnerabilities

The Itsourcecode Online Cake Ordering System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter useruid in the file /404.php, which may lead to cross-site scripting attacks...

Cisco Open Source Snort3 numerical error vulnerability

Multiple versions of Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense FTD software, and Cisco UTD SNORT IPS Engine software contain a numerical error vulnerability. This vulnerability stems from incomplete error checks during Snort 3’s parsing of GRE packet data. It could allow...

D-Link DHP-W610AV Trust Management Vulnerability

The D-Link DHP-W610AV 1.02EUb03 version has a trust management vulnerability. This vulnerability stems from incorrect handling of the parameter “Password” in the “loginpreparehnap” function of the HNAP Login component. As a result, the password in the configuration file may become empty, allowing...

Cisco TelePresence Video Communication Server Expressway Postback Vulnerability

The Cisco TelePresence Video Communication Server Expressway has a post-release vulnerability due to improper link resolution. This vulnerability may be exploited by local, low-privilege attackers, resulting in compromised confidentiality, integrity, and availability...

Chamilo 3 Authorization Issue Vulnerability

Chamilo versions 3 2.0.0-alpha.1 to 2.0.0-RC.3 have an authorization issue. This vulnerability stems from the lack of authorization in the legacy AJAX handlers under the public/main/inc/ajax/ directory. Users without authentication or with low permissions can call functions like...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from a logical flaw in the 32-bit operation zero extension of the BPF verifier, which may allow arbitrary values to be injected into the upper half of the register...

Electron buffer error vulnerability

Versions of Electron prior to 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9 contain a buffer error vulnerability. This vulnerability arises from the main process failing to fully verify the macOS off-screen rendering frame data from the GPU process. This can allow attackers who have obtained code...

Zephyr buffer error vulnerability

Versions of Zephyr 3.6.0 to 4.5.0 had a buffer error vulnerability. This vulnerability arises from the Nuvoton NPCX eSPI driver’s failure to validate the 12-bit length field when parsing TAF requests. As a result, out-of-bounds writes occur, and adjacent SRAM data is leaked into the SPI flash. Th...

Projectworlds Advanced Library Management System: Input validation error vulnerability

The Projectworlds Advanced Library Management System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the adminid parameter in the mysqliquery function within the file profile.php, which may lead to remote SQL injection attacks...

Electron buffer error vulnerability

Versions of Electron prior to 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9 contain a buffer error vulnerability. This vulnerability arises from the main process failing to properly verify the webContents.beginFrameSubscription frame data received from the GPU process. An attacker who gains code...

Cisco Emergency Responder Cross-site Scripting Vulnerability

Cisco Emergency Responder has a cross-site scripting vulnerability, which stems from improper input during web page generation. This vulnerability may lead to cross-site scripting attacks...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability stems from the DVIADPCM block-aligning arithmetic operations in the rdpnsndserverselectformat function of the server’s rdpnsnd channel. Integer round-off occurs, and validations are bypassed. A malicious RDP...

ArcadeData ArcadeDB Authorization Issue Vulnerability

ArcadeData ArcadeDB versions prior to 26.10.1 have an authorization issue vulnerability. This vulnerability stems from a lack of script authorization checks in GremlinQueryEngine’s command method. As a result, authenticated users including read-only reader roles may submit Gremlin commands to the...

vLLM Resource Management Error Vulnerability

Versions of vLLM from 0.7.3 to 0.31.0 contain a resource management vulnerability. This vulnerability arises because remote clients can control multi-modal processor parameters by providing mmprocessorkwargs for each request. This allows them to set larger image sizes, greater number of patches,...

Cisco Cyber Vision Permission Licensing and Access Control Vulnerabilities

Cisco Cyber Vision 3.0.0 to 5.8.1 versions have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper permission management, which may lead to unauthorized privilege escalation...