199642 matches found
Cisco Emergency Responder SQL Injection Vulnerability
Cisco Emergency Responder has a SQL injection vulnerability, which arises due to improper handling of special elements used in SQL commands, potentially leading to SQL injections...
pypdf resource management error vulnerability
Versions of pypdf prior to 6.21.0 have a resource management vulnerability. This vulnerability arises when an attacker can create PDF files that contain arrays or dictionaries with a large number of elements, causing excessive memory consumption during parsing...
Electron Authorization Issues Vulnerability
Versions of Electron prior to 42.11.1, 43.0.0-alpha.1 through 43.5.1, 44.0.0-alpha.1 through 44.1.1, and 45.0.0-alpha.1 through 45.0.0-alpha.4 have an authorization issue. This issue stems from improper permission checks for the chrome.tabs.query function. It allows extensions that lack both tabs...
GIMP buffer error vulnerability
GIMP 3.2.2 has a buffer error vulnerability. This vulnerability stems from the improper validation of the length of the data provided by the user when parsing APNG files. The data is copied into the stack buffer without proper validation, leading to a stack buffer overflow. This could allow remot...
Cisco Emergency Responder: Input validation error vulnerability
Cisco Emergency Responder has a vulnerability related to input validation errors. This vulnerability stems from improper control of resource lifecycle, which may lead to injection attacks...
The Brain ADM-ZIP for NodeJS: Resource management error vulnerability
The Brain ADM-ZIP for NodeJS version 0.6.0 has a resource management vulnerability. This vulnerability stems from bypassing compression bomb protection. Attackers can exploit the asynchronous getDataAsync method in methods/inflater.js to bypass the maxOutputLength protection and create ZIP entrie...
Agent2Agent A2A Rust SDK information leakage vulnerability
The Agent2Agent A2A Rust SDK 0.4.3 and earlier versions have a security vulnerability. This vulnerability stems from improper handling of the parameter historyLength in the file a2a-server/src/taskstore/inmemory.rs. It can be exploited remotely, leading to information leakage...
Coraza - Web Application Firewall: Input validation error vulnerability
Coraza – Web Application Firewall versions 3.0.0 to 3.8.1 had a vulnerability related to input validation errors. This vulnerability arose when the JSON flattened nested properties into dot-separated ARGSPOST names without escaping the literal dots. This led to conflicts between different...
Cisco Emergency Responder Authorization Issues Vulnerability
The Cisco Emergency Responder has an authorization issue vulnerability, which stems from improper authentication procedures. This vulnerability may lead to authentication bypasses...
Cisco Cyber Vision Improper Exception Handling Vulnerabilities
Cisco Cyber Vision has a vulnerability in exception handling. This vulnerability stems from the GRE tunnel decapsulation function in the Snort 3 Detection Engine, which improperly processes nested GRE traffic. Unauthenticated remote attackers can send custom GRE payloads through the affected...
Astral UV path traversal vulnerability
Versions of Astral UV prior to 0.11.15 have a path traversal vulnerability. This vulnerability arises from improper handling of the names of entry points for custom consolescripts or guiscripts, making them susceptible to path traversal attacks. This could allow malicious wheels to write files...
Chris Trudesk Authorization Issue Vulnerability
Chris Trudesk versions 1.2.11 and earlier have an authorization issue vulnerability. This vulnerability stems from an authorization bypass mechanism. Certified attackers can set the user-controlled ownerId or owner parameter in requests for postComment, postInternalNote, and ticket create. This...
Cisco Emergency Responder Permission Licensing and Access Control Vulnerabilities
The Cisco Emergency Responder has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper access control mechanisms, which may lead to unauthorized access, data breaches, or privilege escalation...
Cisco Open Source Snort3 Resource Management Error Vulnerability
Cisco Open Source Snort3 and Cisco Secure Firewall Threat Defense FTD software have a resource management vulnerability. This vulnerability stems from incomplete error checks during Snort 3’s processing of files, which may lead to unreleased memory. A remote attacker without authentication can...
Zephyr race condition vulnerabilities
Zephyr versions from 2.2.0 to 4.5.0 have a race condition vulnerability. This issue arises when calling zwaitqhead on the SMP system to read the head of the thread wait queue, without holding the scheduler spinlockschedspinlock. This creates a race condition with the haltthread function that...
Apache Traffic Server has a vulnerability related to input validation errors.
The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation vulnerability. This vulnerability arises when the source server returns the connection back to the shared pool while it is still waiting for a request body that was not fully...
Apache Traffic Server has a vulnerability related to input validation errors.
The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation error vulnerability. This vulnerability arises from the forwarding of302 responses that should be treated as resolution errors. Additionally, the Transfer-Encoding: chunked...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from a logical flaw in the 32-bit operation zero extension of the BPF verifier, which may allow arbitrary values to be injected into the upper half of the register...
NLnet Labs Unbound Resource Management Vulnerability
NLnet Labs Unbound versions 1.26.1 and earlier have a resource management vulnerability. This vulnerability stems from the lack of a overall budget limit on the incoming decompression workload. A large number of chained compression pointers can lead to excessive CPU usage. Attackers can exploit...
Cisco Open Source Snort3 Resource Management Error Vulnerability
Several affected versions of Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense FTD software, and Cisco UTD SNORT IPS Engine software have a resource management vulnerability. This vulnerability stems from incomplete error checking during Snort 3’s parsing of UDP NetFlow protocol...
Chris Trudesk Authorization Issue Vulnerability
Chris Trudesk versions 1.2.11 and earlier have an authorization issue vulnerability. This vulnerability stems from the fact that authorization checks only verify the permissions for the default “tickets:update” role. Any authenticated user can use PUT /api/v1/tickets/:id and PUT...
VyperLang Vyper Processing Logic Vulnerability
VyperLang Vyper 0.1.0b10 to 0.2.3 versions have a processing logic error. This bug stems from incorrect code generated by return statements within for loops in internal functions that call other functions at least two levels deep. This results in invalid jump targets stack underflow, causing...
Itsourcecode Online Cake Ordering System Cross-Site Script Vulnerabilities
The Itsourcecode Online Cake Ordering System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter useruid in the file /404.php, which may lead to cross-site scripting attacks...
Apache Traffic Server command injection vulnerability
The Apache Traffic Server versions 8.0.1 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a command injection vulnerability. This vulnerability arises from the experimental magick plugin, which allows unauthenticated clients to control the ImageMagick convert parameters under default...
pypdf resource management error vulnerability
Versions of pypdf prior to 6.20.1 have a resource management error vulnerability. This vulnerability arises when calling PdfWriter.findoutlineitem to process special PDFs with cyclic outline levels, leading to an infinite loop and blocking the current process...
WordPress Contest Gallery Cross-site Scripting Vulnerabilities
The WordPress Contest Gallery versions 34.0.1 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input during web page generation, and could lead to storage-based cross-site scripting attacks...
Zephyr buffer error vulnerability
Zephyr versions 2.3.0 to 4.4.2 have a buffer error vulnerability. This vulnerability stems from the user-level verifier in the pecitransfer system call, which only checks the device object permissions. It does not validate the buf pointers and len values of the embedded structures pecibuf,...
The Brain ADM-ZIP for NodeJS processing logic has a vulnerability in its handling of errors.
The Brain ADM-ZIP for NodeJS versions prior to 0.6.1 has a processing logic vulnerability. This vulnerability stems from inconsistent entry parsing: the getEntry function returns the last duplicate entry, while the extractAllTo function writes the first duplicate entry. This allows attackers to...
WordPress weForms path traversal vulnerability
WordPress weForms versions 1.6.28 and earlier have a path traversal vulnerability. This vulnerability stems from improper restrictions on path names for restricted directories, making them susceptible to path traversal attacks...
Cisco Secure Client input validation error vulnerability
Cisco Secure Client versions 4.9.00086, 4.9.01095, 4.9.02028, 4.9.03047, 4.9.03049, 4.9.04043, 4.9.04053, 4.9.05042, 4.9.06037, 4.10.00093, 4.10.01075, 4.10.02086, 4.10.03104, 4.10.04065, 4.10.04071, 4.10.05085, 4.10.05095, 5.0.00238, 4.10.05111, 5.0.00529, 5.0.00556, 4.10.06079, 5.0.01242,...
Chris Trudesk path traversal vulnerability
Chris Trudesk versions 1.2.11 and earlier have a path traversal vulnerability. This vulnerability stems from path traversal attacks, where administrators can delete any file by providing encoded traversal sequences for the DELETE /api/v1/backup/:backup request. Additionally, unvalidated file valu...
Cisco Cyber Vision Resource Management Error Vulnerability
Cisco Cyber Vision 3.0.0 version to 5.8.1 version, Cisco Open Source Snort3 3.1.2.0 version to 3.12.2.0 version, Cisco Secure Firewall Threat Defense FTD Software 7.0.0 version to 10.0.0 version, and Cisco UTD SNORT IPS Engine Software 17.12.1a version to 26.1.2 version contain a resource...
Cisco Emergency Responder Improper Exception Handling Vulnerability
Cisco Emergency Responder has a vulnerability related to improper handling of exceptions. This vulnerability stems from improper processing of exceptional conditions and may lead to denial-of-service attacks...
Cisco Cyber Vision Permission Licensing and Access Control Vulnerabilities
Cisco Cyber Vision 3.0.0 to 5.8.1 versions have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper permission management, which may lead to unauthorized privilege escalation...
Bartek Pampuch: PDFMake has a vulnerability in input validation.
Bartek Pampuch’s pdfmake version 0.3.8 to 0.3.12 had a vulnerability related to input validation errors. This vulnerability stemmed from the lack of applying setLocalAccessPolicy restrictions on the SVG content that referenced local images. Attackers could exploit this vulnerability by providing...
vLLM Resource Management Error Vulnerability
Versions of vLLM from 0.7.3 to 0.31.0 contain a resource management vulnerability. This vulnerability arises because remote clients can control multi-modal processor parameters by providing mmprocessorkwargs for each request. This allows them to set larger image sizes, greater number of patches,...
Cerberus FTP Server path traversal vulnerability
Versions of the Cerberus FTP Server prior to 2026.3.0 have a path traversal vulnerability. This vulnerability stems from improper handling of parameters. Attackers can exploit this vulnerability by performing UNC path injections and providing malicious SMB share paths. This allows them to execute...
Cisco TelePresence Video Communication Server Expressway: Permissions and access control vulnerabilities
The Cisco TelePresence Video Communication Server Expressway has vulnerabilities related to permission authorization and access control. These vulnerabilities stem from improper permission allocation, which may allow local, low-privilege attackers to escalate their privileges and obtain sensitive...
FreeRDP buffer error vulnerability
Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability arises from the Android client not verifying the mappedWidth and mappedHeight values. An attacker can send a specially crafted RDP GFXMAPSURFACETOWINDOWPDU with an excessively large size, causing...
Fedora Modularity: libmodulemd buffer error vulnerability
Fedora Modularity’ libmodulemd has a buffer error vulnerability. This vulnerability stems from an internal loop in the rpm-map output path of module stream v2, which incorrectly uses the number of digest algorithms as the boundary, instead of the number of checksums in the current digest table...
Cisco Open Source Snort3 Authorization Issue Vulnerability
The Cisco Open Source Snort3 has an authorization issue vulnerability. This vulnerability stems from the lack of authentication in the control channel socket implementation. It may allow authenticated, low-privilege local attackers to execute arbitrary commands as the Snort 3 process user, and to...
vLLM Permission Authorization and Access Control Vulnerabilities
Versions of vLLM prior to 0.31.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from cache alias issues. Authenticated attackers can exploit these vulnerabilities by providing caller-controlled values such as EXIF ImageID or cachesalt, thereby...
Cisco TelePresence Video Communication Server Expressway: Improper exception handling leads to vulnerabilities
The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to improper exception handling. This vulnerability stems from reach assertion issues, which may lead to service crashes...
Cisco Open Source Snort3 Resource Management Error Vulnerability
Cisco Open Source Snort3 has a resource management vulnerability. This vulnerability stems from logical flaws in the codec used by the Snort 3 detection engine when processing GTP extension headers. Unauthenticated remote attackers can send specially crafted fragmented UDP packets, causing the...
Electron buffer error vulnerability
Versions of Electron prior to 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9 contain a buffer error vulnerability. This vulnerability arises from the main process failing to properly verify the webContents.beginFrameSubscription frame data received from the GPU process. An attacker who gains code...
Cisco Emergency Responder Cross-site Scripting Vulnerability
Cisco Emergency Responder has a cross-site scripting vulnerability, which stems from improper input during web page generation. This vulnerability may lead to cross-site scripting attacks...
FreeRDP buffer error vulnerability
Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability stems from the DVIADPCM block-aligning arithmetic operations in the rdpnsndserverselectformat function of the server’s rdpnsnd channel. Integer round-off occurs, and validations are bypassed. A malicious RDP...
Cisco TelePresence Video Communication Server Expressway Postback Vulnerability
The Cisco TelePresence Video Communication Server Expressway has a post-release vulnerability due to improper link resolution. This vulnerability may be exploited by local, low-privilege attackers, resulting in compromised confidentiality, integrity, and availability...
Cisco TelePresence Video Communication Server Expressway Trust Management Vulnerability
The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to trust management. This vulnerability stems from the use of persistent cookies. When the cluster’s TLS authentication mode is enabled, insufficient client certificate verification occurs. This may allow...