ISC BIND 9 Improper exception handling vulnerability

In versions 9.16.0 to 9.18.50, 9.20.0 to 9.20.29, 9.21.0 to 9.21.26, 9.16.8-S1 to 9.18.50-S1, and 9.20.9-S1 to 9.20.29-S1 of BIND, there are vulnerabilities related to improper exception handling. These vulnerabilities arise from the BIND resolver, which includes both “redirect” and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from a logical flaw in the 32-bit operation zero extension of the BPF verifier, which may allow arbitrary values to be injected into the upper half of the register...

VyperLang Vyper Processing Logic Vulnerability

In versions of Vyper before 0.1.0b17, there were processing logic errors in versions 0.1.0b1 and from 0.4.1 to 0.5.0b1. This issue arose from using str.splitlines to construct a source code line table, where characters such as the page break character and U+2028 were treated as line breaks that...

vLLM Permission Authorization and Access Control Vulnerabilities

Versions of vLLM prior to 0.31.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from cache alias issues. Authenticated attackers can exploit these vulnerabilities by providing caller-controlled values such as EXIF ImageID or cachesalt, thereby...

Coraza - Web Application Firewall: Input validation error vulnerability

Coraza – Web Application Firewall versions 3.0.0 to 3.8.1 had a vulnerability related to input validation errors. This vulnerability arose when the JSON flattened nested properties into dot-separated ARGSPOST names without escaping the literal dots. This led to conflicts between different...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.20.1 have a resource management error vulnerability. This vulnerability arises when deleting objects such as outline items from a specially crafted circular PDF tree, potentially leading to an infinite loop and blocking the current process...

The Brain ADM-ZIP for NodeJS: Resource management error vulnerability

The Brain ADM-ZIP for NodeJS version 0.6.0 has a resource management vulnerability. This vulnerability stems from bypassing compression bomb protection. Attackers can exploit the asynchronous getDataAsync method in methods/inflater.js to bypass the maxOutputLength protection and create ZIP entrie...

Acronis Cyber Infrastructure Authorization Issue Vulnerability

Versions of Acronis Cyber Infrastructure prior to 6.0.1-112, 6.1.1-64, and 6.2.1-71 have vulnerabilities related to authorization checks. These vulnerabilities stem from improper authorization validation, which may lead to the exposure of sensitive information and data corruption...

Cerberus FTP Server path traversal vulnerability

Versions of the Cerberus FTP Server prior to 2026.3.0 have a path traversal vulnerability. This vulnerability stems from improper handling of parameters. Attackers can exploit this vulnerability by performing UNC path injections and providing malicious SMB share paths. This allows them to execute...

Chris Trudesk Authorization Issue Vulnerability

Chris Trudesk versions 1.2.11 and earlier have an authorization issue vulnerability. This vulnerability stems from the fact that authorization checks only verify the permissions for the default “tickets:update” role. Any authenticated user can use PUT /api/v1/tickets/:id and PUT...

Chamilo 3 Authorization Issue Vulnerability

Chamilo versions 3 2.0.0-alpha.1 to 2.0.0-RC.3 have an authorization issue. This vulnerability stems from the lack of authorization in the legacy AJAX handlers under the public/main/inc/ajax/ directory. Users without authentication or with low permissions can call functions like...

Chris Trudesk path traversal vulnerability

Chris Trudesk versions 1.2.11 and earlier have a path traversal vulnerability. This vulnerability stems from the accountsController.uploadImage function, which involves path traversal and authorization bypasses. Certified users can overwrite other user avatars using the id and username fields...

Chris Trudesk Authorization Issue Vulnerability

Chris Trudesk versions 1.2.11 and earlier have an authorization issue vulnerability. This vulnerability stems from an authorization bypass mechanism. Certified attackers can set the user-controlled ownerId or owner parameter in requests for postComment, postInternalNote, and ticket create. This...

Chris Trudesk: Vulnerability in input validation

Chris Trudesk versions 1.2.11 and earlier have a vulnerability in input validation. This vulnerability stems from regular expression injection: unvalidated attackers can submit regular expression patterns to the POST /api/v1/login endpoint. By distinguishing the responses for invalid usernames an...

Agent2Agent A2A Rust SDK information leakage vulnerability

The Agent2Agent A2A Rust SDK 0.4.3 and earlier versions have a security vulnerability. This vulnerability stems from improper handling of the parameter historyLength in the file a2a-server/src/taskstore/inmemory.rs. It can be exploited remotely, leading to information leakage...

Electron input validation vulnerability

Versions of Electron prior to 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5 contain a vulnerability related to input validation errors. This vulnerability stems from the hid and USB permission checks initiated by iframes. In these versions, setPermissionCheckHandler receives information about the...

Airbyte SharePoint Connector Server Request Forgery Vulnerability

The Airbyte SharePoint Connector version 1.8 has a server-side request forgeing vulnerability. This vulnerability stems from the getshareddriveobject method, which does not properly validate the URI before accessing resources. As a result, authenticated remote attackers can initiate arbitrary...

ArcadeData ArcadeDB Authorization Issue Vulnerability

ArcadeData ArcadeDB versions prior to 26.10.1 have an authorization issue vulnerability. This vulnerability stems from a lack of script authorization checks in GremlinQueryEngine’s command method. As a result, authenticated users including read-only reader roles may submit Gremlin commands to the...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability arises from the process of converting PNG clipboard items into CFDIB format by using winprreadpngfrombuffer. This function allocates a buffer for PNG images with a depth less than 8, but winprbitmapwritebuff...

ISC BIND 9 race condition vulnerabilities

Security vulnerabilities exist in ISC BIND versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1. These vulnerabilities stem from the ability to replay signed UDP messages with GSS-TSIG signatures, which can...

NLnet Labs Unbound Resource Management Vulnerability

NLnet Labs Unbound versions 1.26.1 and earlier have a resource management vulnerability. This vulnerability stems from the lack of a overall budget limit on the incoming decompression workload. A large number of chained compression pointers can lead to excessive CPU usage. Attackers can exploit...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to a certain date contained a security vulnerability. This vulnerability stemmed from a null pointer dereferencing in the dasherinserttimelineentry function /filters/dasher.c. Attackers could exploit this vulnerability by providing a specially crafted MP4 file,...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to the current version contain security vulnerabilities. These vulnerabilities stem from the use of the gffilterpidsendeventdownstream function /filtercore/filterpid.c, where a stack reutilization issue exists after the heap is released. This could allow attacker...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to the current version contain security vulnerabilities. These vulnerabilities stem from a segmentation violation in the checkmediaprofile function, which could allow attackers to cause denial-of-service attacks by providing specially crafted MP4 files...

Cisco Emergency Responder path traversal vulnerability

Cisco Emergency Responder has a path traversal vulnerability, which stems from improper restrictions on path names within restricted directories, making it susceptible to path traversal attacks...

NoMachine server request forgery vulnerability

NoMachine 9.8.21 version has a vulnerability related to server-side request forgeing. This vulnerability arises from the web service failing to correctly validate URIs before accessing resources. As a result, unauthorized remote attackers can initiate arbitrary server-side requests under the...

BusyBox path traversal vulnerability

BusyBox 1.37.0 has a path traversal vulnerability. This vulnerability stems from the lack of proper validation in the file operations conducted by the libarchive component, allowing for path traversal and the creation of arbitrary files...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.20.0 have a resource management error vulnerability. This vulnerability arises when accessing a specially crafted PDF stream that contains a large number of filters or multiple filters and transmits a large amount of data, potentially leading to excessive memory...

Best Practice Software Bp Premier Trust Management Vulnerability

The Best Practice Software Bp Premier versions prior to 1.14.1.1128 have a vulnerability related to trust management. This vulnerability arises from the use of a hardcoded Microsoft SQL Server management password shared across all installations. An attacker with network access to database instanc...

Cisco TelePresence Video Communication Server Expressway Trust Management Vulnerability

The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to trust management. This vulnerability stems from the use of persistent cookies. When the cluster’s TLS authentication mode is enabled, insufficient client certificate verification occurs. This may allow...

Electron input validation vulnerability

Versions of Electron prior to 42.11.9, 43.0.0-alpha.1 through 43.7.6, 44.0.0-alpha.1 through 44.5.0, and 45.0.0-alpha.1 through 45.0.0-alpha.13 have a input validation error vulnerability. This vulnerability arises from pointerLock permission requests from certain cross-source iframes, causing...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.20.1 have a resource management error vulnerability. This vulnerability arises when calling PdfWriter.findoutlineitem to process special PDFs with cyclic outline levels, leading to an infinite loop and blocking the current process...

vLLM Resource Management Error Vulnerability

Versions of vLLM from 0.7.3 to 0.31.0 contain a resource management vulnerability. This vulnerability arises because remote clients can control multi-modal processor parameters by providing mmprocessorkwargs for each request. This allows them to set larger image sizes, greater number of patches,...

Cisco TelePresence Video Communication Server Expressway: Code Injection Vulnerability

Cisco TelePresence Video Communication Server Expressway has a code injection vulnerability. This vulnerability stems from a code injection issue, which may allow for the execution of arbitrary code...

WordPress Contest Gallery Cross-site Scripting Vulnerabilities

The WordPress Contest Gallery versions 34.0.1 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input during web page generation, and could lead to storage-based cross-site scripting attacks...

Zephyr buffer error vulnerability

Zephyr versions 2.3.0 to 4.4.2 have a buffer error vulnerability. This vulnerability stems from the user-level verifier in the pecitransfer system call, which only checks the device object permissions. It does not validate the buf pointers and len values of the embedded structures pecibuf,...

Cisco Emergency Responder: Input validation error vulnerability

Cisco Emergency Responder versions 14, 14SU1, 14SU2, 14SU3, 14SU3a, 15, 15SU1, 15SU1a, 14SU4, 15SU2, 15SU3, 14SU5, 15SU4, and 14SU6 have a vulnerability related to input validation errors. This vulnerability arises from improper input validation, which may allow attackers to exploit custom inputs...

Cisco TelePresence Video Communication Server Expressway: Improper exception handling leads to vulnerabilities

The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to improper exception handling. This vulnerability stems from reach assertion issues, which may lead to service crashes...

Fedora Modularity: libmodulemd buffer error vulnerability

Fedora Modularity’ libmodulemd has a buffer error vulnerability. This vulnerability stems from an internal loop in the rpm-map output path of module stream v2, which incorrectly uses the number of digest algorithms as the boundary, instead of the number of checksums in the current digest table...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability arises from the Android client not verifying the mappedWidth and mappedHeight values. An attacker can send a specially crafted RDP GFXMAPSURFACETOWINDOWPDU with an excessively large size, causing...

Cisco Open Source Snort3 Resource Management Error Vulnerability

Cisco Open Source Snort3 has a resource management vulnerability. This vulnerability stems from logical flaws in the codec used by the Snort 3 detection engine when processing GTP extension headers. Unauthenticated remote attackers can send specially crafted fragmented UDP packets, causing the...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.21.0 have a resource management vulnerability. This vulnerability arises from the excessive memory consumption when parsing specially crafted PDF files that contain a large number of small operation streams, which may lead to a denial-of-service attack...

Cisco Open Source Snort3 buffer error vulnerability

Cisco Open Source Snort 3 versions from 3.1.2.0 to 3.12.2.0, Cisco Secure Firewall Threat Defense FTD Software versions from 7.2.0 to 10.0.0, and Cisco UTD SNORT IPS Engine Software versions from 17.12.1a to 26.1.2 have a buffer error vulnerability. This vulnerability stems from the improper rang...

Cisco Open Source Snort3 Authorization Issue Vulnerability

The Cisco Open Source Snort3 has an authorization issue vulnerability. This vulnerability stems from the lack of authentication in the control channel socket implementation. It may allow authenticated, low-privilege local attackers to execute arbitrary commands as the Snort 3 process user, and to...

Cisco Emergency Responder Improper Exception Handling Vulnerability

Cisco Emergency Responder has a vulnerability related to improper handling of exceptions. This vulnerability stems from improper processing of exceptional conditions and may lead to denial-of-service attacks...

Coraza - Web Application Firewall: Input validation error vulnerability

Coraza – Web Application Firewall versions 3.0.4 to 3.8.1 had a vulnerability related to input validation errors. This issue arose from an exact comparison of the entire Content-Type value during the request body processor selection. As a result, URL-encoded request bodies containing media type...

The Brain ADM-ZIP for NodeJS has vulnerabilities related to permissions and access control.

The Brain ADM-ZIP for NodeJS versions prior to 0.6.1 has a vulnerability related to permission granting and access control. This vulnerability arises from improper permission allocation when keepOriginalPermission is enabled. An attacker can manipulate the properties of external zip files, allowi...

Projectworlds Advanced Library Management System: Input validation error vulnerability

The Projectworlds Advanced Library Management System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the adminid parameter in the mysqliquery function within the file profile.php, which may lead to remote SQL injection attacks...

Cisco Secure Client input validation error vulnerability

Cisco Secure Client versions 4.9.00086, 4.9.01095, 4.9.02028, 4.9.03047, 4.9.03049, 4.9.04043, 4.9.04053, 4.9.05042, 4.9.06037, 4.10.00093, 4.10.01075, 4.10.02086, 4.10.03104, 4.10.04065, 4.10.04071, 4.10.05085, 4.10.05095, 5.0.00238, 4.10.05111, 5.0.00529, 5.0.00556, 4.10.06079, 5.0.01242,...

Zephyr race condition vulnerabilities

Zephyr versions from 2.2.0 to 4.5.0 have a race condition vulnerability. This issue arises when calling zwaitqhead on the SMP system to read the head of the thread wait queue, without holding the scheduler spinlockschedspinlock. This creates a race condition with the haltthread function that...