Cisco TelePresence Video Communication Server Expressway information leakage vulnerability

The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to information leakage. This vulnerability stems from insufficient authorization checks for HTTP requests during the Mobile and Remote Access MRA provisioning process. As a result, unauthenticated remote...

Cisco Emergency Responder path traversal vulnerability

Cisco Emergency Responder has a path traversal vulnerability, which stems from improper restrictions on path names within restricted directories, making it susceptible to path traversal attacks...

Agent2Agent A2A Rust SDK race condition vulnerability

The Agent2Agent A2A Rust SDK versions 0.4.0, 0.4.1, 0.4.2, 0.4.3, and 0.4.4 have a race condition vulnerability. This vulnerability stems from improper handling of the InMemoryTaskStore::update function in the file a2a-server/src/taskstore/inmemory.rs. It may lead to race conditions, and remote...

VyperLang Vyper Processing Logic Vulnerability

VyperLang Vyper 0.1.0b10 to 0.2.3 versions have a processing logic error. This bug stems from incorrect code generated by return statements within for loops in internal functions that call other functions at least two levels deep. This results in invalid jump targets stack underflow, causing...

Electron input validation vulnerability

Versions of Electron prior to 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5 contain a vulnerability related to input validation errors. This vulnerability arises from requests for external protocol URLs being assigned to documents other than those that initiated the request. As a result, the...

Acronis Cyber Infrastructure Authorization Issue Vulnerability

Versions of Acronis Cyber Infrastructure prior to 6.0.1-112, 6.1.1-64, and 6.2.1-71 have vulnerabilities related to authorization checks. These vulnerabilities stem from improper authorization validation, which may lead to the exposure of sensitive information and data corruption...

NoMachine server request forgery vulnerability

NoMachine 9.8.21 version has a vulnerability related to server-side request forgeing. This vulnerability arises from the web service failing to correctly validate URIs before accessing resources. As a result, unauthorized remote attackers can initiate arbitrary server-side requests under the...

Chris Trudesk path traversal vulnerability

Chris Trudesk versions 1.2.11 and earlier have a path traversal vulnerability. This vulnerability stems from the accountsController.uploadImage function, which involves path traversal and authorization bypasses. Certified users can overwrite other user avatars using the id and username fields...

Acronis Cyber Infrastructure Authorization Issue Vulnerability

Versions of Acronis Cyber Infrastructure prior to 6.0.1-112, 6.1.1-64, and 6.2.1-71 have vulnerabilities related to authorization checks. These vulnerabilities stem from improper authorization validation, which may lead to the exposure of sensitive information and data corruption...

Chris Trudesk: Vulnerability in input validation

Chris Trudesk versions 1.2.11 and earlier have a vulnerability in input validation. This vulnerability stems from regular expression injection: unvalidated attackers can submit regular expression patterns to the POST /api/v1/login endpoint. By distinguishing the responses for invalid usernames an...

VyperLang Vyper Processing Logic Vulnerability

In versions of Vyper before 0.1.0b17, there were processing logic errors in versions 0.1.0b1 and from 0.4.1 to 0.5.0b1. This issue arose from using str.splitlines to construct a source code line table, where characters such as the page break character and U+2028 were treated as line breaks that...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to a certain date contained a security vulnerability. This vulnerability stemmed from a null pointer dereferencing in the dasherinserttimelineentry function /filters/dasher.c. Attackers could exploit this vulnerability by providing a specially crafted MP4 file,...

Cisco Unified Communications Manager: Vulnerabilities in Permission Authorization and Access Control

Cisco Unified Communications Manager versions 14, 14SU1, 14SU2, 14SU3, 15, 15SU1, 14SU4, 14SU4a, 15SU1a, 15SU2, 15.0.1.13010-1, 15.0.1.13011-1, 15.0.1.13012-1, 15.0.1.13013-1, 15.0.1.13014-1, 15.0.1.13015-1, 15.0.1.13016-1, 15.0.1.13017-1, 15SU3a, 14SU5, 15SU4, 15SU4a, and 14SU6 have...

Best Practice Software Bp Premier Trust Management Vulnerability

The Best Practice Software Bp Premier versions prior to 1.14.1.1128 have a vulnerability related to trust management. This vulnerability arises from the use of a hardcoded Microsoft SQL Server management password shared across all installations. An attacker with network access to database instanc...

vyperlang Vyper Input Validation Vulnerability

In versions of Vyper from 0.1.0b1 to 0.1.0b12, as well as from 0.1.0b14 to 0.1.0b15, and from 0.4.1 to 0.5.0b1, there is a vulnerability related to input validation errors. This vulnerability stems from the use of character-based line offsets in the vyper/ast/parse.py module, along with Python’s...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.20.0 have a resource management error vulnerability. This vulnerability arises when accessing a specially crafted PDF stream that contains a large number of filters or multiple filters and transmits a large amount of data, potentially leading to excessive memory...

Apache Traffic Server has a vulnerability related to input validation errors.

The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation vulnerability. This vulnerability arises when the source server returns the connection back to the shared pool while it is still waiting for a request body that was not fully...

Astral UV path traversal vulnerability

Versions of Astral UV prior to 0.8.22 have a path traversal vulnerability. This vulnerability stems from improper path handling during the tar extraction process in the source code distribution sdist. A specially crafted sequence of symbolic links can redirect file writing to locations outside of...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to the current version contain security vulnerabilities. These vulnerabilities stem from the use of the gffilterpidsendeventdownstream function /filtercore/filterpid.c, where a stack reutilization issue exists after the heap is released. This could allow attacker...

ArcadeData ArcadeDB Authorization Issue Vulnerability

ArcadeData ArcadeDB versions prior to 26.10.1 have an authorization issue vulnerability. This vulnerability stems from a lack of script authorization checks in GremlinQueryEngine’s command method. As a result, authenticated users including read-only reader roles may submit Gremlin commands to the...

Cisco TelePresence Video Communication Server Expressway Trust Management Vulnerability

The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to trust management. This vulnerability stems from the use of persistent cookies. When the cluster’s TLS authentication mode is enabled, insufficient client certificate verification occurs. This may allow...

Apache Traffic Server command injection vulnerability

The Apache Traffic Server versions 8.0.1 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a command injection vulnerability. This vulnerability arises from the experimental magick plugin, which allows unauthenticated clients to control the ImageMagick convert parameters under default...

Cisco Cyber Vision Digital Error Vulnerability

Cisco Cyber Vision has a numerical error vulnerability, which stems from incorrect calculations and may lead to denial-of-service attacks...

Cisco Cyber Vision Improper Exception Handling Vulnerabilities

Cisco Cyber Vision has a vulnerability in exception handling. This vulnerability stems from the GRE tunnel decapsulation function in the Snort 3 Detection Engine, which improperly processes nested GRE traffic. Unauthenticated remote attackers can send custom GRE payloads through the affected...

Electron Cross-Site Request Forgery Vulnerability

Versions of Electron prior to 42.11.3, 43.0.0-alpha.1 through 43.7.0, 44.0.0-alpha.1 through 44.3.0, and 45.0.0-alpha.1 through 45.0.0-alpha.6 contain a cross-site request forgeing vulnerability. This vulnerability arises from treating a page that opens in a new window as a navigation request...

Coraza - Web Application Firewall: Input validation error vulnerability

Coraza – Web Application Firewall versions 3.0.4 to 3.8.1 had a vulnerability related to input validation errors. This issue arose from an exact comparison of the entire Content-Type value during the request body processor selection. As a result, URL-encoded request bodies containing media type...

The Brain ADM-ZIP for NodeJS has vulnerabilities related to permissions and access control.

The Brain ADM-ZIP for NodeJS versions prior to 0.6.1 has a vulnerability related to permission granting and access control. This vulnerability arises from improper permission allocation when keepOriginalPermission is enabled. An attacker can manipulate the properties of external zip files, allowi...

Zephyr race condition vulnerabilities

Zephyr versions from 2.2.0 to 4.5.0 have a race condition vulnerability. This issue arises when calling zwaitqhead on the SMP system to read the head of the thread wait queue, without holding the scheduler spinlockschedspinlock. This creates a race condition with the haltthread function that...

Itsourcecode Online Cake Ordering System Cross-Site Script Vulnerabilities

The Itsourcecode Online Cake Ordering System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter useruid in the file /404.php, which may lead to cross-site scripting attacks...

Chamilo 3 Authorization Issue Vulnerability

Chamilo versions 3 2.0.0-alpha.1 to 2.0.0-RC.3 have an authorization issue. This vulnerability stems from the lack of authorization in the legacy AJAX handlers under the public/main/inc/ajax/ directory. Users without authentication or with low permissions can call functions like...

Zephyr buffer error vulnerability

Versions of Zephyr 3.6.0 to 4.5.0 had a buffer error vulnerability. This vulnerability arises from the Nuvoton NPCX eSPI driver’s failure to validate the 12-bit length field when parsing TAF requests. As a result, out-of-bounds writes occur, and adjacent SRAM data is leaked into the SPI flash. Th...

Electron buffer error vulnerability

Versions of Electron prior to 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9 contain a buffer error vulnerability. This vulnerability arises from the main process failing to properly verify the webContents.beginFrameSubscription frame data received from the GPU process. An attacker who gains code...

Cisco Emergency Responder Cross-site Scripting Vulnerability

Cisco Emergency Responder has a cross-site scripting vulnerability, which stems from improper input during web page generation. This vulnerability may lead to cross-site scripting attacks...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability stems from the DVIADPCM block-aligning arithmetic operations in the rdpnsndserverselectformat function of the server’s rdpnsnd channel. Integer round-off occurs, and validations are bypassed. A malicious RDP...

vLLM Resource Management Error Vulnerability

Versions of vLLM from 0.7.3 to 0.31.0 contain a resource management vulnerability. This vulnerability arises because remote clients can control multi-modal processor parameters by providing mmprocessorkwargs for each request. This allows them to set larger image sizes, greater number of patches,...

Cisco TelePresence Video Communication Server Expressway Postback Vulnerability

The Cisco TelePresence Video Communication Server Expressway has a post-release vulnerability due to improper link resolution. This vulnerability may be exploited by local, low-privilege attackers, resulting in compromised confidentiality, integrity, and availability...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.21.0 have a resource management vulnerability. This vulnerability arises from the excessive memory consumption when parsing specially crafted PDF files that contain a large number of small operation streams, which may lead to a denial-of-service attack...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to the current version contain security vulnerabilities. These vulnerabilities stem from a segmentation violation in the checkmediaprofile function, which could allow attackers to cause denial-of-service attacks by providing specially crafted MP4 files...

Cisco Emergency Responder: Input validation error vulnerability

Cisco Emergency Responder versions 14, 14SU1, 14SU2, 14SU3, 14SU3a, 15, 15SU1, 15SU1a, 14SU4, 15SU2, 15SU3, 14SU5, 15SU4, and 14SU6 have a vulnerability related to input validation errors. This vulnerability arises from improper input validation, which may allow attackers to exploit custom inputs...

CrewAI AMP Suite Code Injection Vulnerability

The CrewAI AMP Suite has a code injection vulnerability. This vulnerability stems from the loadagentfromrepository function not properly restricting the parameters provided by the user before they are used to import modules. This could allow remote attackers to execute arbitrary code within the...

Cisco Cyber Vision Permission Licensing and Access Control Vulnerabilities

Cisco Cyber Vision 3.0.0 to 5.8.1 versions have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper permission management, which may lead to unauthorized privilege escalation...

Projectworlds Advanced Library Management System: Input validation error vulnerability

The Projectworlds Advanced Library Management System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the adminid parameter in the mysqliquery function within the file profile.php, which may lead to remote SQL injection attacks...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.20.1 have a resource management error vulnerability. This vulnerability arises when deleting objects such as outline items from a specially crafted circular PDF tree, potentially leading to an infinite loop and blocking the current process...

Electron input validation vulnerability

Versions of Electron prior to 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5 contain a vulnerability related to input validation errors. This vulnerability stems from the hid and USB permission checks initiated by iframes. In these versions, setPermissionCheckHandler receives information about the...

ISC BIND 9 Improper exception handling vulnerability

In versions 9.16.0 to 9.18.50, 9.20.0 to 9.20.29, 9.21.0 to 9.21.26, 9.16.8-S1 to 9.18.50-S1, and 9.20.9-S1 to 9.20.29-S1 of BIND, there are vulnerabilities related to improper exception handling. These vulnerabilities arise from the BIND resolver, which includes both “redirect” and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from a logical flaw in the 32-bit operation zero extension of the BPF verifier, which may allow arbitrary values to be injected into the upper half of the register...

Electron buffer error vulnerability

Versions of Electron prior to 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9 contain a buffer error vulnerability. This vulnerability arises from the main process failing to fully verify the macOS off-screen rendering frame data from the GPU process. This can allow attackers who have obtained code...

NLnet Labs Unbound Resource Management Vulnerability

NLnet Labs Unbound versions 1.26.1 and earlier have a resource management vulnerability. This vulnerability stems from the lack of a overall budget limit on the incoming decompression workload. A large number of chained compression pointers can lead to excessive CPU usage. Attackers can exploit...

ISC BIND 9 race condition vulnerabilities

Security vulnerabilities exist in ISC BIND versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1. These vulnerabilities stem from the ability to replay signed UDP messages with GSS-TSIG signatures, which can...

D-Link DHP-W610AV Trust Management Vulnerability

The D-Link DHP-W610AV 1.02EUb03 version has a trust management vulnerability. This vulnerability stems from incorrect handling of the parameter “Password” in the “loginpreparehnap” function of the HNAP Login component. As a result, the password in the configuration file may become empty, allowing...