199998 matches found
Electron input validation vulnerability
Versions of Electron prior to 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5 contain a vulnerability related to input validation errors. This vulnerability stems from the hid and USB permission checks initiated by iframes. In these versions, setPermissionCheckHandler receives information about the...
Coraza - Web Application Firewall: Input validation error vulnerability
Coraza – Web Application Firewall versions 3.0.4 to 3.8.1 had a vulnerability related to input validation errors. This issue arose from an exact comparison of the entire Content-Type value during the request body processor selection. As a result, URL-encoded request bodies containing media type...
Airbyte OneDrive Connector server request forgery vulnerability
Version 1.8 of Airbyte OneDrive Connector contains a server-side request forgery vulnerability. This vulnerability stems from the getshareddriveobject method failing to properly validate URIs prior to accessing resources; it may allow authenticated remote attackers to send arbitrary server reques...
Cisco Open Source Snort3 Resource Management Error Vulnerability
Cisco Open Source Snort3 has a resource management vulnerability. This vulnerability stems from logical flaws in the codec used by the Snort 3 detection engine when processing GTP extension headers. Unauthenticated remote attackers can send specially crafted fragmented UDP packets, causing the...
pypdf resource management error vulnerability
Versions of pypdf prior to 6.21.0 have a resource management error vulnerability. This vulnerability allows attackers to create PDFs that cause excessive memory usage or prolonged processing times when the application retrieves document form fields...
Itsourcecode Online Cake Ordering System Cross-Site Script Vulnerabilities
The Itsourcecode Online Cake Ordering System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter useruid in the file /404.php, which may lead to cross-site scripting attacks...
D-Link DHP-W610AV Trust Management Vulnerability
The D-Link DHP-W610AV 1.02EUb03 version has a trust management vulnerability. This vulnerability stems from incorrect handling of the parameter “Password” in the “loginpreparehnap” function of the HNAP Login component. As a result, the password in the configuration file may become empty, allowing...
VyperLang Vyper Processing Logic Vulnerability
VyperLang Vyper 0.1.0b10 to 0.2.3 versions have a processing logic error. This bug stems from incorrect code generated by return statements within for loops in internal functions that call other functions at least two levels deep. This results in invalid jump targets stack underflow, causing...
Astral UV path traversal vulnerability
Versions of Astral UV prior to 0.8.22 have a path traversal vulnerability. This vulnerability stems from improper path handling during the tar extraction process in the source code distribution sdist. A specially crafted sequence of symbolic links can redirect file writing to locations outside of...
Chamilo 3 authorization issue vulnerability
Versions 3.2.0-alpha.1 through 2.0.0-RC.3 of Chamilo contain an authorization issue vulnerability. This vulnerability stems from a lack of access control in GradebookController; unauthenticated attackers can use the setdefaultcertificate endpoint to supply arbitrary course IDs and document IDs,...
Chamilo 3 authorization issue vulnerability
Versions of Chamilo prior to 3.2.0.0-alpha.4 and 2.0.0-RC.3 contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks in AiController::openAnswerGrade. Any authenticated user can obtain AI scores for other students’ exam attempts, and they can also...
Abdulla Abdurakhmanov Slack Morphism for Rust log information disclosure vulnerability
In Slack Morphism for Rust versions 1.0.0 through 2.27.0, there is a vulnerability related to log information leakage. This occurs because when signature verification fails, the correct Slack request HMAC is generated and exposed; the default error handler logs this information. As a result,...
ArcadeData ArcadeDB authorization issue vulnerability
In ArcadeData ArcadeDB versions 26.8.1 through 26.10.1, there is an authorization issue vulnerability stemming from authorization bypass. Read-only users can modify the lightweight and unique mode flags of edge types without requiring UPDATESCHEMA privileges. Attackers can send ALTER TYPE command...
Vyperlang: Vyper buffer error vulnerability
In the version of VyperLang from 0.3.8 to 0.5.0b1, there is a buffer error vulnerability. This vulnerability stems from compiler errors in the parseIfExp function. The issue arises when using a wider result type for memory layout, which allows reading nested arrays with narrower inner boundaries...
FreeRDP buffer error vulnerability
Versions of FreeRDP prior to 3.32.1 contain a buffer error vulnerability. This vulnerability arises because clientclipresentgatewaymessage passes the byte count as the precision for printf on wide characters. A malicious RD Gateway can send pre-authenticated consent or service messages, causing t...
Checkmk permission and access control issues vulnerability
Version 2.5.0p14 of Checkmk contains a security vulnerability. This vulnerability arises when a local user possessing write permissions on the Oracle client library directory containing the Oracle home specified in the ‘oratab’ file, or on the ‘oratab’ file itself, enables the ‘mk-oracle’ plugin ...
NLnet Labs Unbound Resource Management Vulnerability
NLnet Labs Unbound versions 1.26.1 and earlier have a resource management vulnerability. This vulnerability stems from the lack of a overall budget limit on the incoming decompression workload. A large number of chained compression pointers can lead to excessive CPU usage. Attackers can exploit...
FreeRDP buffer error vulnerability
Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability arises from the Android client not verifying the mappedWidth and mappedHeight values. An attacker can send a specially crafted RDP GFXMAPSURFACETOWINDOWPDU with an excessively large size, causing...
Airbyte SharePoint Connector Server Request Forgery Vulnerability
The Airbyte SharePoint Connector version 1.8 has a server-side request forgeing vulnerability. This vulnerability stems from the getshareddriveobject method, which does not properly validate the URI before accessing resources. As a result, authenticated remote attackers can initiate arbitrary...
Chris Trudesk: Vulnerability in input validation
Chris Trudesk versions 1.2.11 and earlier have a vulnerability in input validation. This vulnerability stems from regular expression injection: unvalidated attackers can submit regular expression patterns to the POST /api/v1/login endpoint. By distinguishing the responses for invalid usernames an...
Chris Trudesk path traversal vulnerability
Chris Trudesk versions 1.2.11 and earlier have a path traversal vulnerability. This vulnerability stems from the accountsController.uploadImage function, which involves path traversal and authorization bypasses. Certified users can overwrite other user avatars using the id and username fields...
Astral UV path traversal vulnerability
Versions of Astral UV prior to 0.11.15 have a path traversal vulnerability. This vulnerability arises from improper handling of the names of entry points for custom consolescripts or guiscripts, making them susceptible to path traversal attacks. This could allow malicious wheels to write files...
Acronis Cyber Infrastructure Authorization Issue Vulnerability
Versions of Acronis Cyber Infrastructure prior to 6.0.1-112, 6.1.1-64, and 6.2.1-71 have vulnerabilities related to authorization checks. These vulnerabilities stem from improper authorization validation, which may lead to the exposure of sensitive information and data corruption...
NoMachine server request forgery vulnerability
NoMachine 9.8.21 version has a vulnerability related to server-side request forgeing. This vulnerability arises from the web service failing to correctly validate URIs before accessing resources. As a result, unauthorized remote attackers can initiate arbitrary server-side requests under the...
Cisco Cyber Vision Digital Error Vulnerability
Cisco Cyber Vision has a numerical error vulnerability, which stems from incorrect calculations and may lead to denial-of-service attacks...
Apache Traffic Server has a vulnerability related to input validation errors.
The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation vulnerability. This vulnerability arises when the source server returns the connection back to the shared pool while it is still waiting for a request body that was not fully...
Electron buffer error vulnerability
Versions of Electron prior to 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9 contain a buffer error vulnerability. This vulnerability arises from the main process failing to properly verify the webContents.beginFrameSubscription frame data received from the GPU process. An attacker who gains code...
pypdf resource management error vulnerability
Versions of pypdf prior to 6.21.0 have a resource management vulnerability. This vulnerability arises when an attacker can create PDF files that contain arrays or dictionaries with a large number of elements, causing excessive memory consumption during parsing...
pypdf resource management error vulnerability
Versions of pypdf prior to 6.20.1 have a resource management error vulnerability. This vulnerability arises when calling PdfWriter.findoutlineitem to process special PDFs with cyclic outline levels, leading to an infinite loop and blocking the current process...
Agent2Agent A2A Rust SDK information leakage vulnerability
The Agent2Agent A2A Rust SDK 0.4.3 and earlier versions have a security vulnerability. This vulnerability stems from improper handling of the parameter historyLength in the file a2a-server/src/taskstore/inmemory.rs. It can be exploited remotely, leading to information leakage...
Coraza - Web Application Firewall: Input validation error vulnerability
Coraza – Web Application Firewall versions 3.0.0 to 3.8.1 had a vulnerability related to input validation errors. This vulnerability arose when the JSON flattened nested properties into dot-separated ARGSPOST names without escaping the literal dots. This led to conflicts between different...
Cisco Emergency Responder Authorization Issues Vulnerability
The Cisco Emergency Responder has an authorization issue vulnerability, which stems from improper authentication procedures. This vulnerability may lead to authentication bypasses...
Cisco Cyber Vision Improper Exception Handling Vulnerabilities
Cisco Cyber Vision has a vulnerability in exception handling. This vulnerability stems from the GRE tunnel decapsulation function in the Snort 3 Detection Engine, which improperly processes nested GRE traffic. Unauthenticated remote attackers can send custom GRE payloads through the affected...
Chris Trudesk Authorization Issue Vulnerability
Chris Trudesk versions 1.2.11 and earlier have an authorization issue vulnerability. This vulnerability stems from an authorization bypass mechanism. Certified attackers can set the user-controlled ownerId or owner parameter in requests for postComment, postInternalNote, and ticket create. This...
Cisco Emergency Responder Permission Licensing and Access Control Vulnerabilities
The Cisco Emergency Responder has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper access control mechanisms, which may lead to unauthorized access, data breaches, or privilege escalation...
Cisco Open Source Snort3 Resource Management Error Vulnerability
Cisco Open Source Snort3 and Cisco Secure Firewall Threat Defense FTD software have a resource management vulnerability. This vulnerability stems from incomplete error checks during Snort 3’s processing of files, which may lead to unreleased memory. A remote attacker without authentication can...
Zephyr race condition vulnerabilities
Zephyr versions from 2.2.0 to 4.5.0 have a race condition vulnerability. This issue arises when calling zwaitqhead on the SMP system to read the head of the thread wait queue, without holding the scheduler spinlockschedspinlock. This creates a race condition with the haltthread function that...
Apache Traffic Server has a vulnerability related to input validation errors.
The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation error vulnerability. This vulnerability arises from the forwarding of302 responses that should be treated as resolution errors. Additionally, the Transfer-Encoding: chunked...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from a logical flaw in the 32-bit operation zero extension of the BPF verifier, which may allow arbitrary values to be injected into the upper half of the register...
Cisco Open Source Snort3 Resource Management Error Vulnerability
Several affected versions of Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense FTD software, and Cisco UTD SNORT IPS Engine software have a resource management vulnerability. This vulnerability stems from incomplete error checking during Snort 3’s parsing of UDP NetFlow protocol...
Apache Traffic Server command injection vulnerability
The Apache Traffic Server versions 8.0.1 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a command injection vulnerability. This vulnerability arises from the experimental magick plugin, which allows unauthenticated clients to control the ImageMagick convert parameters under default...
WordPress Contest Gallery Cross-site Scripting Vulnerabilities
The WordPress Contest Gallery versions 34.0.1 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input during web page generation, and could lead to storage-based cross-site scripting attacks...
The Brain ADM-ZIP for NodeJS processing logic has a vulnerability in its handling of errors.
The Brain ADM-ZIP for NodeJS versions prior to 0.6.1 has a processing logic vulnerability. This vulnerability stems from inconsistent entry parsing: the getEntry function returns the last duplicate entry, while the extractAllTo function writes the first duplicate entry. This allows attackers to...
WordPress weForms path traversal vulnerability
WordPress weForms versions 1.6.28 and earlier have a path traversal vulnerability. This vulnerability stems from improper restrictions on path names for restricted directories, making them susceptible to path traversal attacks...
Cisco Secure Client input validation error vulnerability
Cisco Secure Client versions 4.9.00086, 4.9.01095, 4.9.02028, 4.9.03047, 4.9.03049, 4.9.04043, 4.9.04053, 4.9.05042, 4.9.06037, 4.10.00093, 4.10.01075, 4.10.02086, 4.10.03104, 4.10.04065, 4.10.04071, 4.10.05085, 4.10.05095, 5.0.00238, 4.10.05111, 5.0.00529, 5.0.00556, 4.10.06079, 5.0.01242,...
Chris Trudesk path traversal vulnerability
Chris Trudesk versions 1.2.11 and earlier have a path traversal vulnerability. This vulnerability stems from path traversal attacks, where administrators can delete any file by providing encoded traversal sequences for the DELETE /api/v1/backup/:backup request. Additionally, unvalidated file valu...
Cisco Emergency Responder Improper Exception Handling Vulnerability
Cisco Emergency Responder has a vulnerability related to improper handling of exceptions. This vulnerability stems from improper processing of exceptional conditions and may lead to denial-of-service attacks...
Cisco Cyber Vision Permission Licensing and Access Control Vulnerabilities
Cisco Cyber Vision 3.0.0 to 5.8.1 versions have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper permission management, which may lead to unauthorized privilege escalation...
Cerberus FTP Server path traversal vulnerability
Versions of the Cerberus FTP Server prior to 2026.3.0 have a path traversal vulnerability. This vulnerability stems from improper handling of parameters. Attackers can exploit this vulnerability by performing UNC path injections and providing malicious SMB share paths. This allows them to execute...
Cisco TelePresence Video Communication Server Expressway: Permissions and access control vulnerabilities
The Cisco TelePresence Video Communication Server Expressway has vulnerabilities related to permission authorization and access control. These vulnerabilities stem from improper permission allocation, which may allow local, low-privilege attackers to escalate their privileges and obtain sensitive...