ISC BIND 9 Improper exception handling vulnerability

In versions 9.16.0 to 9.18.50, 9.20.0 to 9.20.29, 9.21.0 to 9.21.26, 9.16.8-S1 to 9.18.50-S1, and 9.20.9-S1 to 9.20.29-S1 of BIND, there are vulnerabilities related to improper exception handling. These vulnerabilities arise from the BIND resolver, which includes both “redirect” and...

Cisco Emergency Responder path traversal vulnerability

Cisco Emergency Responder has a path traversal vulnerability, which stems from improper restrictions on path names within restricted directories, making it susceptible to path traversal attacks...

NoMachine server request forgery vulnerability

NoMachine 9.8.21 version has a vulnerability related to server-side request forgeing. This vulnerability arises from the web service failing to correctly validate URIs before accessing resources. As a result, unauthorized remote attackers can initiate arbitrary server-side requests under the...

BusyBox path traversal vulnerability

BusyBox 1.37.0 has a path traversal vulnerability. This vulnerability stems from the lack of proper validation in the file operations conducted by the libarchive component, allowing for path traversal and the creation of arbitrary files...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.20.0 have a resource management error vulnerability. This vulnerability arises when accessing a specially crafted PDF stream that contains a large number of filters or multiple filters and transmits a large amount of data, potentially leading to excessive memory...

Bartek Pampuch: PDFMake has a vulnerability in input validation.

Bartek Pampuch’s pdfmake version 0.3.8 to 0.3.12 had a vulnerability related to input validation errors. This vulnerability stemmed from the lack of applying setLocalAccessPolicy restrictions on the SVG content that referenced local images. Attackers could exploit this vulnerability by providing...

Best Practice Software Bp Premier Trust Management Vulnerability

The Best Practice Software Bp Premier versions prior to 1.14.1.1128 have a vulnerability related to trust management. This vulnerability arises from the use of a hardcoded Microsoft SQL Server management password shared across all installations. An attacker with network access to database instanc...

Fedora Modularity: libmodulemd buffer error vulnerability

Fedora Modularity’ libmodulemd has a buffer error vulnerability. This vulnerability stems from an internal loop in the rpm-map output path of module stream v2, which incorrectly uses the number of digest algorithms as the boundary, instead of the number of checksums in the current digest table...

Cisco Secure Client input validation error vulnerability

Cisco Secure Client versions 4.9.00086, 4.9.01095, 4.9.02028, 4.9.03047, 4.9.03049, 4.9.04043, 4.9.04053, 4.9.05042, 4.9.06037, 4.10.00093, 4.10.01075, 4.10.02086, 4.10.03104, 4.10.04065, 4.10.04071, 4.10.05085, 4.10.05095, 5.0.00238, 4.10.05111, 5.0.00529, 5.0.00556, 4.10.06079, 5.0.01242,...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability arises from the Android client not verifying the mappedWidth and mappedHeight values. An attacker can send a specially crafted RDP GFXMAPSURFACETOWINDOWPDU with an excessively large size, causing...

Agent2Agent A2A Rust SDK race condition vulnerability

The Agent2Agent A2A Rust SDK versions 0.4.0, 0.4.1, 0.4.2, 0.4.3, and 0.4.4 have a race condition vulnerability. This vulnerability stems from improper handling of the InMemoryTaskStore::update function in the file a2a-server/src/taskstore/inmemory.rs. It may lead to race conditions, and remote...

Cisco TelePresence Video Communication Server Expressway Trust Management Vulnerability

The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to trust management. This vulnerability stems from the use of persistent cookies. When the cluster’s TLS authentication mode is enabled, insufficient client certificate verification occurs. This may allow...

Cisco TelePresence Video Communication Server Expressway information leakage vulnerability

The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to information leakage. This vulnerability stems from insufficient authorization checks for HTTP requests during the Mobile and Remote Access MRA provisioning process. As a result, unauthenticated remote...

Cisco TelePresence Video Communication Server Expressway Resource Management Vulnerability

The Cisco TelePresence Video Communication Server Expressway has a resource management vulnerability caused by insecure temporary files. This vulnerability may allow local, low-privilege attackers to tamper with data under user interaction or affect the availability of services...

Zephyr buffer error vulnerability

Versions of Zephyr 3.6.0 to 4.5.0 had a buffer error vulnerability. This vulnerability arises from the Nuvoton NPCX eSPI driver’s failure to validate the 12-bit length field when parsing TAF requests. As a result, out-of-bounds writes occur, and adjacent SRAM data is leaked into the SPI flash. Th...

Cisco Emergency Responder: Input validation error vulnerability

Cisco Emergency Responder has a vulnerability related to input validation errors. This vulnerability stems from improper control of resource lifecycle, which may lead to injection attacks...

Cisco TelePresence Video Communication Server Expressway: Permissions and access control vulnerabilities

The Cisco TelePresence Video Communication Server Expressway has vulnerabilities related to permission authorization and access control. These vulnerabilities stem from improper permission allocation, which may allow local, low-privilege attackers to escalate their privileges and obtain sensitive...

Cisco Unified Communications Manager: Vulnerabilities in Permission Authorization and Access Control

Cisco Unified Communications Manager versions 14, 14SU1, 14SU2, 14SU3, 15, 15SU1, 14SU4, 14SU4a, 15SU1a, 15SU2, 15.0.1.13010-1, 15.0.1.13011-1, 15.0.1.13012-1, 15.0.1.13013-1, 15.0.1.13014-1, 15.0.1.13015-1, 15.0.1.13016-1, 15.0.1.13017-1, 15SU3a, 14SU5, 15SU4, 15SU4a, and 14SU6 have...

Cisco Emergency Responder Cross-site Scripting Vulnerability

Cisco Emergency Responder has a cross-site scripting vulnerability, which stems from improper input during web page generation. This vulnerability may lead to cross-site scripting attacks...

Cisco Emergency Responder Authorization Issues Vulnerability

The Cisco Emergency Responder has an authorization issue vulnerability, which stems from improper authentication procedures. This vulnerability may lead to authentication bypasses...

GIMP buffer error vulnerability

GIMP 3.2.2 has a buffer error vulnerability. This vulnerability stems from the improper validation of the length of the data provided by the user when parsing APNG files. The data is copied into the stack buffer without proper validation, leading to a stack buffer overflow. This could allow remot...

NoMachine buffer error vulnerability

NoMachine 9.8.21 version has a buffer overflow vulnerability. This vulnerability stems from the improper validation of the length of data provided by users when parsing mDNS resource records. As a result, a heap buffer overflow occurs, allowing network-near attackers to execute arbitrary code in...

Chris Trudesk path traversal vulnerability

Chris Trudesk versions 1.2.11 and earlier have a path traversal vulnerability. This vulnerability stems from path traversal attacks, where administrators can delete any file by providing encoded traversal sequences for the DELETE /api/v1/backup/:backup request. Additionally, unvalidated file valu...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.20.0 have a resource management error vulnerability. This vulnerability arises when attackers can create incomplete PDFs that end within the standard cross-reference table, causing pypdf to incorrectly handle file endings and enter an infinite loop...

vyperlang Vyper Input Validation Vulnerability

In versions of Vyper from 0.1.0b1 to 0.1.0b12, as well as from 0.1.0b14 to 0.1.0b15, and from 0.4.1 to 0.5.0b1, there is a vulnerability related to input validation errors. This vulnerability stems from the use of character-based line offsets in the vyper/ast/parse.py module, along with Python’s...

Electron input validation vulnerability

Versions of Electron prior to 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5 contain a vulnerability related to input validation errors. This vulnerability arises from requests for external protocol URLs being assigned to documents other than those that initiated the request. As a result, the...

Electron buffer error vulnerability

Versions of Electron prior to 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9 contain a buffer error vulnerability. This vulnerability arises from the main process failing to properly verify the webContents.beginFrameSubscription frame data received from the GPU process. An attacker who gains code...

Projectworlds Advanced Library Management System: Input validation error vulnerability

The Projectworlds Advanced Library Management System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the adminid parameter in the mysqliquery function within the file profile.php, which may lead to remote SQL injection attacks...

vLLM Resource Management Error Vulnerability

Versions of vLLM from 0.7.3 to 0.31.0 contain a resource management vulnerability. This vulnerability arises because remote clients can control multi-modal processor parameters by providing mmprocessorkwargs for each request. This allows them to set larger image sizes, greater number of patches,...

Coraza - Web Application Firewall: Input validation error vulnerability

Coraza – Web Application Firewall versions 3.0.4 to 3.8.1 had a vulnerability related to input validation errors. This issue arose from an exact comparison of the entire Content-Type value during the request body processor selection. As a result, URL-encoded request bodies containing media type...

The Brain ADM-ZIP for NodeJS has vulnerabilities related to permissions and access control.

The Brain ADM-ZIP for NodeJS versions prior to 0.6.1 has a vulnerability related to permission granting and access control. This vulnerability arises from improper permission allocation when keepOriginalPermission is enabled. An attacker can manipulate the properties of external zip files, allowi...

Electron input validation vulnerability

Versions of Electron prior to 42.11.9, 43.0.0-alpha.1 through 43.7.6, 44.0.0-alpha.1 through 44.5.0, and 45.0.0-alpha.1 through 45.0.0-alpha.13 have a input validation error vulnerability. This vulnerability arises from pointerLock permission requests from certain cross-source iframes, causing...

Electron Authorization Issues Vulnerability

Versions of Electron prior to 42.11.1, 43.0.0-alpha.1 through 43.5.1, 44.0.0-alpha.1 through 44.1.1, and 45.0.0-alpha.1 through 45.0.0-alpha.4 have an authorization issue. This issue stems from improper permission checks for the chrome.tabs.query function. It allows extensions that lack both tabs...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.21.0 have a resource management error vulnerability. This vulnerability allows attackers to create PDFs that cause excessive memory usage or prolonged processing times when the application retrieves document form fields...

Electron Cross-Site Request Forgery Vulnerability

Versions of Electron prior to 42.11.3, 43.0.0-alpha.1 through 43.7.0, 44.0.0-alpha.1 through 44.3.0, and 45.0.0-alpha.1 through 45.0.0-alpha.6 contain a cross-site request forgeing vulnerability. This vulnerability arises from treating a page that opens in a new window as a navigation request...

Apache Traffic Server has a vulnerability related to input validation errors.

The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation error vulnerability. This vulnerability arises from the forwarding of302 responses that should be treated as resolution errors. Additionally, the Transfer-Encoding: chunked...

Vyperlang: Vyper buffer error vulnerability

In the version of VyperLang from 0.3.8 to 0.5.0b1, there is a buffer error vulnerability. This vulnerability stems from compiler errors in the parseIfExp function. The issue arises when using a wider result type for memory layout, which allows reading nested arrays with narrower inner boundaries...

Electron buffer error vulnerability

Versions of Electron prior to 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9 contain a buffer error vulnerability. This vulnerability arises from the main process failing to fully verify the macOS off-screen rendering frame data from the GPU process. This can allow attackers who have obtained code...

Zephyr buffer error vulnerability

Zephyr versions 2.3.0 to 4.4.2 have a buffer error vulnerability. This vulnerability stems from the user-level verifier in the pecitransfer system call, which only checks the device object permissions. It does not validate the buf pointers and len values of the embedded structures pecibuf,...

Cisco Open Source Snort3 Resource Management Error Vulnerability

Several affected versions of Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense FTD software, and Cisco UTD SNORT IPS Engine software have a resource management vulnerability. This vulnerability stems from incomplete error checking during Snort 3’s parsing of UDP NetFlow protocol...

Cisco Cyber Vision Permission Licensing and Access Control Vulnerabilities

Cisco Cyber Vision 3.0.0 to 5.8.1 versions have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper permission management, which may lead to unauthorized privilege escalation...

Cisco Cyber Vision Improper Exception Handling Vulnerabilities

Cisco Cyber Vision has a vulnerability in exception handling. This vulnerability stems from the GRE tunnel decapsulation function in the Snort 3 Detection Engine, which improperly processes nested GRE traffic. Unauthenticated remote attackers can send custom GRE payloads through the affected...

Apache Traffic Server command injection vulnerability

The Apache Traffic Server versions 8.0.1 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a command injection vulnerability. This vulnerability arises from the experimental magick plugin, which allows unauthenticated clients to control the ImageMagick convert parameters under default...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability stems from the DVIADPCM block-aligning arithmetic operations in the rdpnsndserverselectformat function of the server’s rdpnsnd channel. Integer round-off occurs, and validations are bypassed. A malicious RDP...

vLLM input validation vulnerability

Versions of vLLM prior to 0.31.0 have a vulnerability related to input validation errors. This vulnerability stems from using the multi-modal UUID provided by the client as a cache identifier without proper consistency checks when the cache is hit. This allows unauthenticated attackers to cause t...

Cisco Cyber Vision Digital Error Vulnerability

Cisco Cyber Vision has a numerical error vulnerability, which stems from incorrect calculations and may lead to denial-of-service attacks...

Cisco Open Source Snort3 Resource Management Error Vulnerability

Cisco Open Source Snort3 has a resource management vulnerability. This vulnerability stems from logical flaws in the codec used by the Snort 3 detection engine when processing GTP extension headers. Unauthenticated remote attackers can send specially crafted fragmented UDP packets, causing the...

Cisco Emergency Responder Permission Licensing and Access Control Vulnerabilities

The Cisco Emergency Responder has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper access control mechanisms, which may lead to unauthorized access, data breaches, or privilege escalation...

Cisco Emergency Responder: Input validation error vulnerability

Cisco Emergency Responder versions 14, 14SU1, 14SU2, 14SU3, 14SU3a, 15, 15SU1, 15SU1a, 14SU4, 15SU2, 15SU3, 14SU5, 15SU4, and 14SU6 have a vulnerability related to input validation errors. This vulnerability arises from improper input validation, which may allow attackers to exploit custom inputs...

Cisco TelePresence Video Communication Server Expressway: Improper exception handling leads to vulnerabilities

The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to improper exception handling. This vulnerability stems from reach assertion issues, which may lead to service crashes...