Astral UV path traversal vulnerability

Versions of Astral UV prior to 0.11.6 contain a path traversal vulnerability. This vulnerability arises from path traversal, allowing attackers to supply a wheel containing a relative traversal path within a RECORD entry. As a result, users may delete any file other than the installation prefix...

ISC BIND 9 resource management error vulnerability

Versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1 of ISC BIND contain a resource management error vulnerability. This vulnerability arises because the BIND resolver fails to restrict additional processin...

Cisco Emergency Responder: Input validation error vulnerability

Cisco Emergency Responder has a vulnerability related to input validation errors. This vulnerability stems from improper control of resource lifecycle, which may lead to injection attacks...

Zephyr race condition vulnerability

Versions Zephyr 3.4.0 through 4.4.2 contain a race condition vulnerability. This issue arises because the Infineon PSOC 6 BLESS HCI driver stores HCI packet descriptors in shared file-scoped variables and fills those descriptors prior to acquiring signal quantities. As a result, multiple senders...

ArcadeData ArcadeDB Authorization Issue Vulnerability

ArcadeData ArcadeDB versions prior to 26.10.1 have an authorization issue vulnerability. This vulnerability stems from a lack of script authorization checks in GremlinQueryEngine’s command method. As a result, authenticated users including read-only reader roles may submit Gremlin commands to the...

Chris Trudesk arbitrary file upload vulnerability

Versions 1.2.11 and earlier of Chris Trudesk contain an arbitrary file upload vulnerability. This vulnerability stems from improper file upload restrictions; attackers can upload HTML or SVG files via the uploadlogo, uploadpagelogo, and uploadfavicon endpoints. They can also forge image MIME type...

Acronis Cyber Infrastructure Authorization Issue Vulnerability

Versions of Acronis Cyber Infrastructure prior to 6.0.1-112, 6.1.1-64, and 6.2.1-71 have vulnerabilities related to authorization checks. These vulnerabilities stem from improper authorization validation, which may lead to the exposure of sensitive information and data corruption...

Cisco Emergency Responder Authorization Issues Vulnerability

The Cisco Emergency Responder has an authorization issue vulnerability, which stems from improper authentication procedures. This vulnerability may lead to authentication bypasses...

Cisco Cyber Vision buffer error vulnerability

Cisco Cyber Vision has a buffer error vulnerability stemming from an out-of-bounds write issue, which may lead to memory corruption...

ArcadeData ArcadeDB authorization issue vulnerability

In ArcadeData ArcadeDB versions 26.8.1 through 26.10.1, there is an authorization issue vulnerability stemming from authorization bypass. Read-only users can modify the lightweight and unique mode flags of edge types without requiring UPDATESCHEMA privileges. Attackers can send ALTER TYPE command...

Cisco TelePresence Video Communication Server Expressway: Improper exception handling leads to vulnerabilities

The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to improper exception handling. This vulnerability stems from reach assertion issues, which may lead to service crashes...

Chris Trudesk Authorization Issue Vulnerability

Chris Trudesk versions 1.2.11 and earlier have an authorization issue vulnerability. This vulnerability stems from the fact that authorization checks only verify the permissions for the default “tickets:update” role. Any authenticated user can use PUT /api/v1/tickets/:id and PUT...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.20.1 have a resource management error vulnerability. This vulnerability arises when deleting objects such as outline items from a specially crafted circular PDF tree, potentially leading to an infinite loop and blocking the current process...

Chamilo 3 Authorization Issue Vulnerability

Chamilo versions 3 2.0.0-alpha.1 to 2.0.0-RC.3 have an authorization issue. This vulnerability stems from the lack of authorization in the legacy AJAX handlers under the public/main/inc/ajax/ directory. Users without authentication or with low permissions can call functions like...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from a logical flaw in the 32-bit operation zero extension of the BPF verifier, which may allow arbitrary values to be injected into the upper half of the register...

Zephyr buffer error vulnerability

Versions Zephyr 4.3.0 through 4.4.2 contain a buffer error vulnerability. This vulnerability arises when Bluetooth Classic A2DP hosts store codec information elements into a fixed 8-byte array; they only copy the first 8 bytes while retaining the full length specified by the attacker. As a result...

Cisco TelePresence Video Communication Server Expressway buffer error vulnerability

The Cisco TelePresence Video Communication Server Expressway has a buffer error vulnerability stemming from an out-of-bounds write issue...

Improper handling of exceptions vulnerability in Cisco TelePresence Video Communication Server Expressway

The Cisco TelePresence Video Communication Server Expressway has an improper exception handling vulnerability. This vulnerability stems from unhandled exceptions and may lead to a denial of service...

ArcadeData ArcadeDB authorization issue vulnerability

In ArcadeData ArcadeDB versions from 26.2.1 up to but including 26.10.1, there is an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks in the Bolt protocol handler; authenticated users can set the db field in RUN or BEGIN messages and then call...

Improper handling of exceptions vulnerability in Cisco TelePresence Video Communication Server Expressway

The Cisco TelePresence Video Communication Server Expressway has an improper exception handling vulnerability stemming from a null pointer dereference issue, which may lead to denial-of-service attacks...

Airbyte OneDrive Connector server request forgery vulnerability

Version 1.8 of Airbyte OneDrive Connector contains a server-side request forgery vulnerability. This vulnerability stems from the getshareddriveobject method failing to properly validate URIs prior to accessing resources; it may allow authenticated remote attackers to send arbitrary server reques...

Zephyr resource management error vulnerability

Versions Zephyr 4.3.0 through 4.5.0 contain a resource management error vulnerability. This vulnerability arises because the datareadyworkhandler function, driven by the Broadcom AFBR-S50 flight time sensor, fails to return a value when ArgusEvaluateData returns a non-STATUSOK result. As a result...

Itsourcecode Online Cake Ordering System Cross-Site Script Vulnerabilities

The Itsourcecode Online Cake Ordering System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter useruid in the file /404.php, which may lead to cross-site scripting attacks...

Cisco Cyber Vision Resource Management Error Vulnerability

Cisco Cyber Vision 3.0.0 version to 5.8.1 version, Cisco Open Source Snort3 3.1.2.0 version to 3.12.2.0 version, Cisco Secure Firewall Threat Defense FTD Software 7.0.0 version to 10.0.0 version, and Cisco UTD SNORT IPS Engine Software 17.12.1a version to 26.1.2 version contain a resource...

Cisco TelePresence Video Communication Server Expressway: Permissions and access control vulnerabilities

The Cisco TelePresence Video Communication Server Expressway has vulnerabilities related to permission authorization and access control. These vulnerabilities stem from improper permission allocation, which may allow local, low-privilege attackers to escalate their privileges and obtain sensitive...

Cisco Open Source Snort3 Resource Management Error Vulnerability

Several affected versions of Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense FTD software, and Cisco UTD SNORT IPS Engine software have a resource management vulnerability. This vulnerability stems from incomplete error checking during Snort 3’s parsing of UDP NetFlow protocol...

Cisco Emergency Responder SQL Injection Vulnerability

Cisco Emergency Responder has a SQL injection vulnerability, which arises due to improper handling of special elements used in SQL commands, potentially leading to SQL injections...

Cisco Open Source Snort3 Resource Management Error Vulnerability

Cisco Open Source Snort3 and Cisco Secure Firewall Threat Defense FTD software have a resource management vulnerability. This vulnerability stems from incomplete error checks during Snort 3’s processing of files, which may lead to unreleased memory. A remote attacker without authentication can...

Cisco TelePresence Video Communication Server Expressway Postback Vulnerability

The Cisco TelePresence Video Communication Server Expressway has a post-release vulnerability due to improper link resolution. This vulnerability may be exploited by local, low-privilege attackers, resulting in compromised confidentiality, integrity, and availability...

pypdf resource management error vulnerability

Versions of pypdf prior to 6.20.0 have a resource management error vulnerability. This vulnerability arises when accessing a specially crafted PDF stream that contains a large number of filters or multiple filters and transmits a large amount of data, potentially leading to excessive memory...

Vyperlang: Vyper buffer error vulnerability

In the version of VyperLang from 0.3.8 to 0.5.0b1, there is a buffer error vulnerability. This vulnerability stems from compiler errors in the parseIfExp function. The issue arises when using a wider result type for memory layout, which allows reading nested arrays with narrower inner boundaries...

NLnet Labs Unbound Resource Management Vulnerability

NLnet Labs Unbound versions 1.26.1 and earlier have a resource management vulnerability. This vulnerability stems from the lack of a overall budget limit on the incoming decompression workload. A large number of chained compression pointers can lead to excessive CPU usage. Attackers can exploit...

NoMachine server request forgery vulnerability

NoMachine 9.8.21 version has a vulnerability related to server-side request forgeing. This vulnerability arises from the web service failing to correctly validate URIs before accessing resources. As a result, unauthorized remote attackers can initiate arbitrary server-side requests under the...

Chamilo 3 authorization issue vulnerability

Versions of Chamilo prior to 3.2.0.0-alpha.4 and 2.0.0-RC.3 contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks in AiController::openAnswerGrade. Any authenticated user can obtain AI scores for other students’ exam attempts, and they can also...

Apache Traffic Server has a vulnerability related to input validation errors.

The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation error vulnerability. This vulnerability arises from the forwarding of302 responses that should be treated as resolution errors. Additionally, the Transfer-Encoding: chunked...

WordPress weForms path traversal vulnerability

WordPress weForms versions 1.6.28 and earlier have a path traversal vulnerability. This vulnerability stems from improper restrictions on path names for restricted directories, making them susceptible to path traversal attacks...

Cisco Secure Client input validation error vulnerability

Cisco Secure Client versions 4.9.00086, 4.9.01095, 4.9.02028, 4.9.03047, 4.9.03049, 4.9.04043, 4.9.04053, 4.9.05042, 4.9.06037, 4.10.00093, 4.10.01075, 4.10.02086, 4.10.03104, 4.10.04065, 4.10.04071, 4.10.05085, 4.10.05095, 5.0.00238, 4.10.05111, 5.0.00529, 5.0.00556, 4.10.06079, 5.0.01242,...

Cisco Emergency Responder Improper Exception Handling Vulnerability

Cisco Emergency Responder has a vulnerability related to improper handling of exceptions. This vulnerability stems from improper processing of exceptional conditions and may lead to denial-of-service attacks...

Cisco Cyber Vision Permission Licensing and Access Control Vulnerabilities

Cisco Cyber Vision 3.0.0 to 5.8.1 versions have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper permission management, which may lead to unauthorized privilege escalation...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability stems from the DVIADPCM block-aligning arithmetic operations in the rdpnsndserverselectformat function of the server’s rdpnsnd channel. Integer round-off occurs, and validations are bypassed. A malicious RDP...

ISC BIND 9 Improper exception handling vulnerability

In versions 9.16.0 to 9.18.50, 9.20.0 to 9.20.29, 9.21.0 to 9.21.26, 9.16.8-S1 to 9.18.50-S1, and 9.20.9-S1 to 9.20.29-S1 of BIND, there are vulnerabilities related to improper exception handling. These vulnerabilities arise from the BIND resolver, which includes both “redirect” and...

CrewAI AMP Suite Code Injection Vulnerability

The CrewAI AMP Suite has a code injection vulnerability. This vulnerability stems from the loadagentfromrepository function not properly restricting the parameters provided by the user before they are used to import modules. This could allow remote attackers to execute arbitrary code within the...

NoMachine buffer error vulnerability

NoMachine 9.8.21 version has a buffer overflow vulnerability. This vulnerability stems from the improper validation of the length of data provided by users when parsing mDNS resource records. As a result, a heap buffer overflow occurs, allowing network-near attackers to execute arbitrary code in...

Zephyr buffer error vulnerability

Versions of Zephyr 3.6.0 to 4.5.0 had a buffer error vulnerability. This vulnerability arises from the Nuvoton NPCX eSPI driver’s failure to validate the 12-bit length field when parsing TAF requests. As a result, out-of-bounds writes occur, and adjacent SRAM data is leaked into the SPI flash. Th...

ISC BIND 9 race condition vulnerabilities

Security vulnerabilities exist in ISC BIND versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1. These vulnerabilities stem from the ability to replay signed UDP messages with GSS-TSIG signatures, which can...

Cisco Unified Communications Manager: Vulnerabilities in Permission Authorization and Access Control

Cisco Unified Communications Manager versions 14, 14SU1, 14SU2, 14SU3, 15, 15SU1, 14SU4, 14SU4a, 15SU1a, 15SU2, 15.0.1.13010-1, 15.0.1.13011-1, 15.0.1.13012-1, 15.0.1.13013-1, 15.0.1.13014-1, 15.0.1.13015-1, 15.0.1.13016-1, 15.0.1.13017-1, 15SU3a, 14SU5, 15SU4, 15SU4a, and 14SU6 have...

Electron buffer error vulnerability

Versions of Electron prior to 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9 contain a buffer error vulnerability. This vulnerability arises from the main process failing to fully verify the macOS off-screen rendering frame data from the GPU process. This can allow attackers who have obtained code...

Bartek Pampuch: PDFMake has a vulnerability in input validation.

Bartek Pampuch’s pdfmake version 0.3.8 to 0.3.12 had a vulnerability related to input validation errors. This vulnerability stemmed from the lack of applying setLocalAccessPolicy restrictions on the SVG content that referenced local images. Attackers could exploit this vulnerability by providing...

vLLM input validation vulnerability

Versions of vLLM prior to 0.31.0 have a vulnerability related to input validation errors. This vulnerability stems from using the multi-modal UUID provided by the client as a cache identifier without proper consistency checks when the cache is hit. This allows unauthenticated attackers to cause t...

Fedora Modularity: libmodulemd buffer error vulnerability

Fedora Modularity’ libmodulemd has a buffer error vulnerability. This vulnerability stems from an internal loop in the rpm-map output path of module stream v2, which incorrectly uses the number of digest algorithms as the boundary, instead of the number of checksums in the current digest table...