199736 matches found
pypdf resource management error vulnerability
Versions of pypdf prior to 6.21.0 have a resource management error vulnerability. This vulnerability allows attackers to create PDFs that cause excessive memory usage or prolonged processing times when the application retrieves document form fields...
Agent2Agent A2A Rust SDK information leakage vulnerability
The Agent2Agent A2A Rust SDK 0.4.3 and earlier versions have a security vulnerability. This vulnerability stems from improper handling of the parameter historyLength in the file a2a-server/src/taskstore/inmemory.rs. It can be exploited remotely, leading to information leakage...
Coraza - Web Application Firewall: Input validation error vulnerability
Coraza – Web Application Firewall versions 3.0.0 to 3.8.1 had a vulnerability related to input validation errors. This vulnerability arose when the JSON flattened nested properties into dot-separated ARGSPOST names without escaping the literal dots. This led to conflicts between different...
Cisco Emergency Responder Authorization Issues Vulnerability
The Cisco Emergency Responder has an authorization issue vulnerability, which stems from improper authentication procedures. This vulnerability may lead to authentication bypasses...
Cisco Cyber Vision Improper Exception Handling Vulnerabilities
Cisco Cyber Vision has a vulnerability in exception handling. This vulnerability stems from the GRE tunnel decapsulation function in the Snort 3 Detection Engine, which improperly processes nested GRE traffic. Unauthenticated remote attackers can send custom GRE payloads through the affected...
Chris Trudesk Authorization Issue Vulnerability
Chris Trudesk versions 1.2.11 and earlier have an authorization issue vulnerability. This vulnerability stems from an authorization bypass mechanism. Certified attackers can set the user-controlled ownerId or owner parameter in requests for postComment, postInternalNote, and ticket create. This...
Cisco Emergency Responder Permission Licensing and Access Control Vulnerabilities
The Cisco Emergency Responder has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper access control mechanisms, which may lead to unauthorized access, data breaches, or privilege escalation...
Cisco Open Source Snort3 Resource Management Error Vulnerability
Cisco Open Source Snort3 and Cisco Secure Firewall Threat Defense FTD software have a resource management vulnerability. This vulnerability stems from incomplete error checks during Snort 3’s processing of files, which may lead to unreleased memory. A remote attacker without authentication can...
Zephyr race condition vulnerabilities
Zephyr versions from 2.2.0 to 4.5.0 have a race condition vulnerability. This issue arises when calling zwaitqhead on the SMP system to read the head of the thread wait queue, without holding the scheduler spinlockschedspinlock. This creates a race condition with the haltthread function that...
Apache Traffic Server has a vulnerability related to input validation errors.
The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation vulnerability. This vulnerability arises when the source server returns the connection back to the shared pool while it is still waiting for a request body that was not fully...
Apache Traffic Server has a vulnerability related to input validation errors.
The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation error vulnerability. This vulnerability arises from the forwarding of302 responses that should be treated as resolution errors. Additionally, the Transfer-Encoding: chunked...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from a logical flaw in the 32-bit operation zero extension of the BPF verifier, which may allow arbitrary values to be injected into the upper half of the register...
Cisco Open Source Snort3 Resource Management Error Vulnerability
Several affected versions of Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense FTD software, and Cisco UTD SNORT IPS Engine software have a resource management vulnerability. This vulnerability stems from incomplete error checking during Snort 3’s parsing of UDP NetFlow protocol...
Chris Trudesk Authorization Issue Vulnerability
Chris Trudesk versions 1.2.11 and earlier have an authorization issue vulnerability. This vulnerability stems from the fact that authorization checks only verify the permissions for the default “tickets:update” role. Any authenticated user can use PUT /api/v1/tickets/:id and PUT...
Apache Traffic Server command injection vulnerability
The Apache Traffic Server versions 8.0.1 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a command injection vulnerability. This vulnerability arises from the experimental magick plugin, which allows unauthenticated clients to control the ImageMagick convert parameters under default...
WordPress Contest Gallery Cross-site Scripting Vulnerabilities
The WordPress Contest Gallery versions 34.0.1 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input during web page generation, and could lead to storage-based cross-site scripting attacks...
Zephyr buffer error vulnerability
Zephyr versions 2.3.0 to 4.4.2 have a buffer error vulnerability. This vulnerability stems from the user-level verifier in the pecitransfer system call, which only checks the device object permissions. It does not validate the buf pointers and len values of the embedded structures pecibuf,...
The Brain ADM-ZIP for NodeJS processing logic has a vulnerability in its handling of errors.
The Brain ADM-ZIP for NodeJS versions prior to 0.6.1 has a processing logic vulnerability. This vulnerability stems from inconsistent entry parsing: the getEntry function returns the last duplicate entry, while the extractAllTo function writes the first duplicate entry. This allows attackers to...
WordPress weForms path traversal vulnerability
WordPress weForms versions 1.6.28 and earlier have a path traversal vulnerability. This vulnerability stems from improper restrictions on path names for restricted directories, making them susceptible to path traversal attacks...
Cisco Secure Client input validation error vulnerability
Cisco Secure Client versions 4.9.00086, 4.9.01095, 4.9.02028, 4.9.03047, 4.9.03049, 4.9.04043, 4.9.04053, 4.9.05042, 4.9.06037, 4.10.00093, 4.10.01075, 4.10.02086, 4.10.03104, 4.10.04065, 4.10.04071, 4.10.05085, 4.10.05095, 5.0.00238, 4.10.05111, 5.0.00529, 5.0.00556, 4.10.06079, 5.0.01242,...
Chris Trudesk path traversal vulnerability
Chris Trudesk versions 1.2.11 and earlier have a path traversal vulnerability. This vulnerability stems from path traversal attacks, where administrators can delete any file by providing encoded traversal sequences for the DELETE /api/v1/backup/:backup request. Additionally, unvalidated file valu...
Cisco Cyber Vision Resource Management Error Vulnerability
Cisco Cyber Vision 3.0.0 version to 5.8.1 version, Cisco Open Source Snort3 3.1.2.0 version to 3.12.2.0 version, Cisco Secure Firewall Threat Defense FTD Software 7.0.0 version to 10.0.0 version, and Cisco UTD SNORT IPS Engine Software 17.12.1a version to 26.1.2 version contain a resource...
Cisco Emergency Responder Improper Exception Handling Vulnerability
Cisco Emergency Responder has a vulnerability related to improper handling of exceptions. This vulnerability stems from improper processing of exceptional conditions and may lead to denial-of-service attacks...
Cisco Cyber Vision Permission Licensing and Access Control Vulnerabilities
Cisco Cyber Vision 3.0.0 to 5.8.1 versions have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper permission management, which may lead to unauthorized privilege escalation...
vLLM Resource Management Error Vulnerability
Versions of vLLM from 0.7.3 to 0.31.0 contain a resource management vulnerability. This vulnerability arises because remote clients can control multi-modal processor parameters by providing mmprocessorkwargs for each request. This allows them to set larger image sizes, greater number of patches,...
Cerberus FTP Server path traversal vulnerability
Versions of the Cerberus FTP Server prior to 2026.3.0 have a path traversal vulnerability. This vulnerability stems from improper handling of parameters. Attackers can exploit this vulnerability by performing UNC path injections and providing malicious SMB share paths. This allows them to execute...
Cisco TelePresence Video Communication Server Expressway: Permissions and access control vulnerabilities
The Cisco TelePresence Video Communication Server Expressway has vulnerabilities related to permission authorization and access control. These vulnerabilities stem from improper permission allocation, which may allow local, low-privilege attackers to escalate their privileges and obtain sensitive...
FreeRDP buffer error vulnerability
Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability arises from the Android client not verifying the mappedWidth and mappedHeight values. An attacker can send a specially crafted RDP GFXMAPSURFACETOWINDOWPDU with an excessively large size, causing...
Fedora Modularity: libmodulemd buffer error vulnerability
Fedora Modularity’ libmodulemd has a buffer error vulnerability. This vulnerability stems from an internal loop in the rpm-map output path of module stream v2, which incorrectly uses the number of digest algorithms as the boundary, instead of the number of checksums in the current digest table...
vLLM Permission Authorization and Access Control Vulnerabilities
Versions of vLLM prior to 0.31.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from cache alias issues. Authenticated attackers can exploit these vulnerabilities by providing caller-controlled values such as EXIF ImageID or cachesalt, thereby...
Cisco TelePresence Video Communication Server Expressway: Improper exception handling leads to vulnerabilities
The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to improper exception handling. This vulnerability stems from reach assertion issues, which may lead to service crashes...
Cisco Open Source Snort3 Resource Management Error Vulnerability
Cisco Open Source Snort3 has a resource management vulnerability. This vulnerability stems from logical flaws in the codec used by the Snort 3 detection engine when processing GTP extension headers. Unauthenticated remote attackers can send specially crafted fragmented UDP packets, causing the...
Cisco Emergency Responder Cross-site Scripting Vulnerability
Cisco Emergency Responder has a cross-site scripting vulnerability, which stems from improper input during web page generation. This vulnerability may lead to cross-site scripting attacks...
FreeRDP buffer error vulnerability
Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability stems from the DVIADPCM block-aligning arithmetic operations in the rdpnsndserverselectformat function of the server’s rdpnsnd channel. Integer round-off occurs, and validations are bypassed. A malicious RDP...
Cisco TelePresence Video Communication Server Expressway Trust Management Vulnerability
The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to trust management. This vulnerability stems from the use of persistent cookies. When the cluster’s TLS authentication mode is enabled, insufficient client certificate verification occurs. This may allow...
Cisco Cyber Vision Digital Error Vulnerability
Cisco Cyber Vision has a numerical error vulnerability, which stems from incorrect calculations and may lead to denial-of-service attacks...
Chamilo 3 Authorization Issue Vulnerability
Chamilo versions 3 2.0.0-alpha.1 to 2.0.0-RC.3 have an authorization issue. This vulnerability stems from the lack of authorization in the legacy AJAX handlers under the public/main/inc/ajax/ directory. Users without authentication or with low permissions can call functions like...
pypdf resource management error vulnerability
Versions of pypdf prior to 6.20.1 have a resource management error vulnerability. This vulnerability arises when deleting objects such as outline items from a specially crafted circular PDF tree, potentially leading to an infinite loop and blocking the current process...
ISC BIND 9 Improper exception handling vulnerability
In versions 9.16.0 to 9.18.50, 9.20.0 to 9.20.29, 9.21.0 to 9.21.26, 9.16.8-S1 to 9.18.50-S1, and 9.20.9-S1 to 9.20.29-S1 of BIND, there are vulnerabilities related to improper exception handling. These vulnerabilities arise from the BIND resolver, which includes both “redirect” and...
pypdf resource management error vulnerability
Versions of pypdf prior to 6.20.0 have a resource management error vulnerability. This vulnerability arises when accessing a specially crafted PDF stream that contains a large number of filters or multiple filters and transmits a large amount of data, potentially leading to excessive memory...
GPAC MP4Box security vulnerability
Versions of GPAC MP4Box 2.5 prior to the current version contain security vulnerabilities. These vulnerabilities stem from the use of the gffilterpidsendeventdownstream function /filtercore/filterpid.c, where a stack reutilization issue exists after the heap is released. This could allow attacker...
ArcadeData ArcadeDB Authorization Issue Vulnerability
ArcadeData ArcadeDB versions prior to 26.10.1 have an authorization issue vulnerability. This vulnerability stems from a lack of script authorization checks in GremlinQueryEngine’s command method. As a result, authenticated users including read-only reader roles may submit Gremlin commands to the...
CrewAI AMP Suite Code Injection Vulnerability
The CrewAI AMP Suite has a code injection vulnerability. This vulnerability stems from the loadagentfromrepository function not properly restricting the parameters provided by the user before they are used to import modules. This could allow remote attackers to execute arbitrary code within the...
GPAC MP4Box security vulnerability
Versions of GPAC MP4Box 2.5 prior to the current version contain security vulnerabilities. These vulnerabilities stem from a segmentation violation in the checkmediaprofile function, which could allow attackers to cause denial-of-service attacks by providing specially crafted MP4 files...
Cisco Emergency Responder: Input validation error vulnerability
Cisco Emergency Responder versions 14, 14SU1, 14SU2, 14SU3, 14SU3a, 15, 15SU1, 15SU1a, 14SU4, 15SU2, 15SU3, 14SU5, 15SU4, and 14SU6 have a vulnerability related to input validation errors. This vulnerability arises from improper input validation, which may allow attackers to exploit custom inputs...
Projectworlds Advanced Library Management System: Input validation error vulnerability
The Projectworlds Advanced Library Management System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the adminid parameter in the mysqliquery function within the file profile.php, which may lead to remote SQL injection attacks...
Airbyte SharePoint Connector Server Request Forgery Vulnerability
The Airbyte SharePoint Connector version 1.8 has a server-side request forgeing vulnerability. This vulnerability stems from the getshareddriveobject method, which does not properly validate the URI before accessing resources. As a result, authenticated remote attackers can initiate arbitrary...
Vyperlang: Vyper buffer error vulnerability
In the version of VyperLang from 0.3.8 to 0.5.0b1, there is a buffer error vulnerability. This vulnerability stems from compiler errors in the parseIfExp function. The issue arises when using a wider result type for memory layout, which allows reading nested arrays with narrower inner boundaries...
NoMachine buffer error vulnerability
NoMachine 9.8.21 version has a buffer overflow vulnerability. This vulnerability stems from the improper validation of the length of data provided by users when parsing mDNS resource records. As a result, a heap buffer overflow occurs, allowing network-near attackers to execute arbitrary code in...
Zephyr buffer error vulnerability
Versions of Zephyr 3.6.0 to 4.5.0 had a buffer error vulnerability. This vulnerability arises from the Nuvoton NPCX eSPI driver’s failure to validate the 12-bit length field when parsing TAF requests. As a result, out-of-bounds writes occur, and adjacent SRAM data is leaked into the SPI flash. Th...