200255 matches found
Cisco Emergency Responder: Input validation error vulnerability
Cisco Emergency Responder has a vulnerability related to input validation errors. This vulnerability stems from improper control of resource lifecycle, which may lead to injection attacks...
ArcadeData ArcadeDB Authorization Issue Vulnerability
ArcadeData ArcadeDB versions prior to 26.10.1 have an authorization issue vulnerability. This vulnerability stems from a lack of script authorization checks in GremlinQueryEngine’s command method. As a result, authenticated users including read-only reader roles may submit Gremlin commands to the...
Acronis Cyber Infrastructure Authorization Issue Vulnerability
Versions of Acronis Cyber Infrastructure prior to 6.0.1-112, 6.1.1-64, and 6.2.1-71 have vulnerabilities related to authorization checks. These vulnerabilities stem from improper authorization validation, which may lead to the exposure of sensitive information and data corruption...
Cisco Emergency Responder Authorization Issues Vulnerability
The Cisco Emergency Responder has an authorization issue vulnerability, which stems from improper authentication procedures. This vulnerability may lead to authentication bypasses...
ArcadeData ArcadeDB authorization issue vulnerability
In ArcadeData ArcadeDB versions 26.8.1 through 26.10.1, there is an authorization issue vulnerability stemming from authorization bypass. Read-only users can modify the lightweight and unique mode flags of edge types without requiring UPDATESCHEMA privileges. Attackers can send ALTER TYPE command...
Cisco TelePresence Video Communication Server Expressway: Improper exception handling leads to vulnerabilities
The Cisco TelePresence Video Communication Server Expressway has a vulnerability related to improper exception handling. This vulnerability stems from reach assertion issues, which may lead to service crashes...
Chamilo 3 Authorization Issue Vulnerability
Chamilo versions 3 2.0.0-alpha.1 to 2.0.0-RC.3 have an authorization issue. This vulnerability stems from the lack of authorization in the legacy AJAX handlers under the public/main/inc/ajax/ directory. Users without authentication or with low permissions can call functions like...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from a logical flaw in the 32-bit operation zero extension of the BPF verifier, which may allow arbitrary values to be injected into the upper half of the register...
Airbyte OneDrive Connector server request forgery vulnerability
Version 1.8 of Airbyte OneDrive Connector contains a server-side request forgery vulnerability. This vulnerability stems from the getshareddriveobject method failing to properly validate URIs prior to accessing resources; it may allow authenticated remote attackers to send arbitrary server reques...
Itsourcecode Online Cake Ordering System Cross-Site Script Vulnerabilities
The Itsourcecode Online Cake Ordering System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter useruid in the file /404.php, which may lead to cross-site scripting attacks...
Cisco Cyber Vision Resource Management Error Vulnerability
Cisco Cyber Vision 3.0.0 version to 5.8.1 version, Cisco Open Source Snort3 3.1.2.0 version to 3.12.2.0 version, Cisco Secure Firewall Threat Defense FTD Software 7.0.0 version to 10.0.0 version, and Cisco UTD SNORT IPS Engine Software 17.12.1a version to 26.1.2 version contain a resource...
Cisco Open Source Snort3 Resource Management Error Vulnerability
Several affected versions of Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense FTD software, and Cisco UTD SNORT IPS Engine software have a resource management vulnerability. This vulnerability stems from incomplete error checking during Snort 3’s parsing of UDP NetFlow protocol...
Cisco Open Source Snort3 Resource Management Error Vulnerability
Cisco Open Source Snort3 and Cisco Secure Firewall Threat Defense FTD software have a resource management vulnerability. This vulnerability stems from incomplete error checks during Snort 3’s processing of files, which may lead to unreleased memory. A remote attacker without authentication can...
Projectworlds Advanced Library Management System input validation error vulnerability
Version 1.0 of Projectworlds Advanced Library Management System contains a security vulnerability. This vulnerability stems from improper handling of the rollnumber parameter by the mysqliquery function in the file individualreportsearch.php, potentially leading to SQL injection...
Coraza - Web Application Firewall: Input validation error vulnerability
Coraza – Web Application Firewall versions 3.0.4 to 3.8.1 had a vulnerability related to input validation errors. This issue arose from an exact comparison of the entire Content-Type value during the request body processor selection. As a result, URL-encoded request bodies containing media type...
itsourcecode Online Cake Ordering System input validation error vulnerability
The 1.0 version of itsourcecode’s Online Cake Ordering System contains a security vulnerability stemming from improper handling of the ID parameter in the /deletecustomer.php file. This flaw may lead to SQL injection attacks that can be carried out remotely...
Chris Trudesk authorization issue vulnerability
Versions 1.2.11 and earlier of Chris Trudesk contain an authorization issue vulnerability. This vulnerability stems from an authorization bypass in apiMessages.send; attackers can supply arbitrary owner and cId parameters to POST /api/v1/messages/send, thereby posting forged messages as other use...
Projectworlds Advanced Library Management System input validation error vulnerability
Version 1.0 of Projectworlds Advanced Library Management System contains a security vulnerability. This vulnerability stems from improper handling of the dateto/datefrom parameters in the mysqliquery function within the file reportsearch.php, potentially leading to SQL injection...
Cisco Cyber Vision Improper Exception Handling Vulnerabilities
Cisco Cyber Vision has a vulnerability in exception handling. This vulnerability stems from the GRE tunnel decapsulation function in the Snort 3 Detection Engine, which improperly processes nested GRE traffic. Unauthenticated remote attackers can send custom GRE payloads through the affected...
Chamilo 3 authorization issue vulnerability
Versions 3.2.0-alpha.1 through 2.0.0-RC.3 of Chamilo contain an authorization issue vulnerability. This vulnerability stems from a lack of access control in GradebookController; unauthenticated attackers can use the setdefaultcertificate endpoint to supply arbitrary course IDs and document IDs,...
NoMachine server request forgery vulnerability
NoMachine 9.8.21 version has a vulnerability related to server-side request forgeing. This vulnerability arises from the web service failing to correctly validate URIs before accessing resources. As a result, unauthorized remote attackers can initiate arbitrary server-side requests under the...
Chamilo 3 authorization issue vulnerability
Versions of Chamilo prior to 3.2.0.0-alpha.4 and 2.0.0-RC.3 contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks in AiController::openAnswerGrade. Any authenticated user can obtain AI scores for other students’ exam attempts, and they can also...
Apache Traffic Server has a vulnerability related to input validation errors.
The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation error vulnerability. This vulnerability arises from the forwarding of302 responses that should be treated as resolution errors. Additionally, the Transfer-Encoding: chunked...
WordPress weForms path traversal vulnerability
WordPress weForms versions 1.6.28 and earlier have a path traversal vulnerability. This vulnerability stems from improper restrictions on path names for restricted directories, making them susceptible to path traversal attacks...
Cisco Secure Client input validation error vulnerability
Cisco Secure Client versions 4.9.00086, 4.9.01095, 4.9.02028, 4.9.03047, 4.9.03049, 4.9.04043, 4.9.04053, 4.9.05042, 4.9.06037, 4.10.00093, 4.10.01075, 4.10.02086, 4.10.03104, 4.10.04065, 4.10.04071, 4.10.05085, 4.10.05095, 5.0.00238, 4.10.05111, 5.0.00529, 5.0.00556, 4.10.06079, 5.0.01242,...
Cisco Emergency Responder Improper Exception Handling Vulnerability
Cisco Emergency Responder has a vulnerability related to improper handling of exceptions. This vulnerability stems from improper processing of exceptional conditions and may lead to denial-of-service attacks...
Cisco Cyber Vision Permission Licensing and Access Control Vulnerabilities
Cisco Cyber Vision 3.0.0 to 5.8.1 versions have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper permission management, which may lead to unauthorized privilege escalation...
FreeRDP buffer error vulnerability
Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability stems from the DVIADPCM block-aligning arithmetic operations in the rdpnsndserverselectformat function of the server’s rdpnsnd channel. Integer round-off occurs, and validations are bypassed. A malicious RDP...
ISC BIND 9 Improper exception handling vulnerability
In versions 9.16.0 to 9.18.50, 9.20.0 to 9.20.29, 9.21.0 to 9.21.26, 9.16.8-S1 to 9.18.50-S1, and 9.20.9-S1 to 9.20.29-S1 of BIND, there are vulnerabilities related to improper exception handling. These vulnerabilities arise from the BIND resolver, which includes both “redirect” and...
ISC BIND 9 race condition vulnerabilities
Security vulnerabilities exist in ISC BIND versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1. These vulnerabilities stem from the ability to replay signed UDP messages with GSS-TSIG signatures, which can...
Cisco Unified Communications Manager: Vulnerabilities in Permission Authorization and Access Control
Cisco Unified Communications Manager versions 14, 14SU1, 14SU2, 14SU3, 15, 15SU1, 14SU4, 14SU4a, 15SU1a, 15SU2, 15.0.1.13010-1, 15.0.1.13011-1, 15.0.1.13012-1, 15.0.1.13013-1, 15.0.1.13014-1, 15.0.1.13015-1, 15.0.1.13016-1, 15.0.1.13017-1, 15SU3a, 14SU5, 15SU4, 15SU4a, and 14SU6 have...
Fedora Modularity: libmodulemd buffer error vulnerability
Fedora Modularity’ libmodulemd has a buffer error vulnerability. This vulnerability stems from an internal loop in the rpm-map output path of module stream v2, which incorrectly uses the number of digest algorithms as the boundary, instead of the number of checksums in the current digest table...
Chris Trudesk arbitrary file upload vulnerability
Versions 1.2.11 and earlier of Chris Trudesk contain an arbitrary file upload vulnerability. This vulnerability stems from improper file upload restrictions; attackers can upload HTML or SVG files via the uploadlogo, uploadpagelogo, and uploadfavicon endpoints. They can also forge image MIME type...
NoMachine encryption issue vulnerabilities
NoMachine version 9.7.3 has an encryption-related vulnerability. This vulnerability stems from insufficient entropy during the generation of credentials in the Redis database access authentication mechanism. Attackers need to execute low-privilege code on the target system first. This may allow...
Electron Cross-Site Request Forgery Vulnerability
Versions of Electron prior to 42.11.3, 43.0.0-alpha.1 through 43.7.0, 44.0.0-alpha.1 through 44.3.0, and 45.0.0-alpha.1 through 45.0.0-alpha.6 contain a cross-site request forgeing vulnerability. This vulnerability arises from treating a page that opens in a new window as a navigation request...
Zephyr authorization issue vulnerability
Versions Zephyr 3.6.0 through 4.5.0 contain an authorization issue vulnerability. This vulnerability stems from the exposure of the device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c; specifically, the system calls devmuxselectget and devmuxselectset are not properly validated by th...
Zephyr buffer error vulnerability
Versions Zephyr 4.3.0 through 4.4.2 contain a buffer error vulnerability. This vulnerability arises when Bluetooth Classic A2DP hosts store codec information elements into a fixed 8-byte array; they only copy the first 8 bytes while retaining the full length specified by the attacker. As a result...
Electron input validation vulnerability
Versions of Electron prior to 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5 contain a vulnerability related to input validation errors. This vulnerability stems from the hid and USB permission checks initiated by iframes. In these versions, setPermissionCheckHandler receives information about the...
Electron input validation vulnerability
Versions of Electron prior to 42.11.9, 43.0.0-alpha.1 through 43.7.6, 44.0.0-alpha.1 through 44.5.0, and 45.0.0-alpha.1 through 45.0.0-alpha.13 have a input validation error vulnerability. This vulnerability arises from pointerLock permission requests from certain cross-source iframes, causing...
Electron buffer error vulnerability
Versions of Electron prior to 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9 contain a buffer error vulnerability. This vulnerability arises from the main process failing to properly verify the webContents.beginFrameSubscription frame data received from the GPU process. An attacker who gains code...
Electron input validation vulnerability
Versions of Electron prior to 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5 contain a vulnerability related to input validation errors. This vulnerability arises from requests for external protocol URLs being assigned to documents other than those that initiated the request. As a result, the...
ISC BIND 9 Improper exception handling vulnerability
In versions 9.16.0 to 9.18.50, 9.20.0 to 9.20.29, 9.21.0 to 9.21.26, 9.11.3-S1 to 9.18.50-S1, and 9.20.9-S1 to 9.20.29-S1 of BIND, there are vulnerabilities related to improper exception handling. These vulnerabilities arise when the BIND server processes query sequences where RD=1 is followed by...
ArcadeData ArcadeDB authorization issue vulnerability
In ArcadeData ArcadeDB versions from 26.2.1 up to but including 26.10.1, there is an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks in the Bolt protocol handler; authenticated users can set the db field in RUN or BEGIN messages and then call...
FreeRDP buffer error vulnerability
Versions of FreeRDP prior to 3.32.1 contain a buffer error vulnerability. This vulnerability arises because clientclipresentgatewaymessage passes the byte count as the precision for printf on wide characters. A malicious RD Gateway can send pre-authenticated consent or service messages, causing t...
Zephyr improper exception handling vulnerability
Versions Zephyr 4.3.0 through 4.4.2 contain an improper exception handling vulnerability. This vulnerability arises because the MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctpi2cgpiotarget.c fails to clear selected registers and data phase flags when I2C is in STOP mode. As a result,...
Zephyr resource management error vulnerability
Versions Zephyr 4.3.0 through 4.5.0 contain a resource management error vulnerability. This vulnerability arises because the datareadyworkhandler function, driven by the Broadcom AFBR-S50 flight time sensor, fails to return a value when ArgusEvaluateData returns a non-STATUSOK result. As a result...
Improper FreeRDP exception handling vulnerability
Versions FreeRDP from 3.0.0 up to 3.32.0 contain an improper exception handling vulnerability. This vulnerability stems from a null pointer dereference in the smart card simulation backend; it fails to properly handle empty reader names in SCardGetStatusChange requests. A malicious RDP server can...
GIMP buffer error vulnerability
GIMP 3.2.2 has a buffer error vulnerability. This vulnerability stems from the improper validation of the length of the data provided by the user when parsing APNG files. The data is copied into the stack buffer without proper validation, leading to a stack buffer overflow. This could allow remot...
GPAC MP4Box security vulnerability
Versions of GPAC MP4Box 2.5 prior to the current version contain security vulnerabilities. These vulnerabilities stem from a segmentation violation in the checkmediaprofile function, which could allow attackers to cause denial-of-service attacks by providing specially crafted MP4 files...
BusyBox path traversal vulnerability
BusyBox 1.37.0 has a path traversal vulnerability. This vulnerability stems from the lack of proper validation in the file operations conducted by the libarchive component, allowing for path traversal and the creation of arbitrary files...