Drupal Artificial Intelligence cross-site scripting vulnerability

Drupal versions prior to 1.3.13 and versions 1.4.0 through 1.4.8 contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during page generation, potentially enabling stored cross-site scripting attacks...

Drupal Mermaid Diagram Field authorization issue vulnerability

Drupal Mermaid Diagram Field versions 1.0.4 through 1.0.9 contain an authorization issue vulnerability. This vulnerability stems from improper authorization checks and may lead to forced browsing...

Drupal CSS Usage Analyzer authorization issue vulnerability

Drupal CSS Usage Analyzer versions 1.0.0 through 1.0.2 contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks and may lead to forced browsing...

Drupal Webform cross-site scripting vulnerability

Drupal Webform versions 0.0.0 through 6.2.12 and 6.3.0 through 6.3.1 contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web form generation, potentially enabling stored cross-site scripting attacks...

Drupal amazee.ai Private AI Provider SQL injection vulnerability

Drupal amazee.ai Private AI Provider versions prior to 0.0.0 and 1.3.7, as well as versions prior to 1.4.0 and 1.4.3, contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially leading to SQL injection attacks...

Drupal Email Verification / SMS Verification / OTP Verification authorization issue vulnerability

Drupal Email Verification / SMS Verification / OTP Verification versions prior to 2.4.0 contain an authorization issue vulnerability. This vulnerability arises from the use of alternative paths or channels, potentially leading to authentication bypass...

Drupal Webform cross-site scripting vulnerability

Drupal Webform versions 0.0.0 through 6.2.12 and 6.3.0 through 6.3.1 contain a cross-site scripting vulnerability caused by improper input handling during web page generation, which may lead to cross-site scripting attacks...

Drupal Webform cross-site scripting vulnerability

Drupal Webform versions prior to 6.2.12 and prior to 6.3.1 contain a cross-site scripting vulnerability. This vulnerability stems from improper handling of input during web page generation, potentially enabling cross-site scripting attacks...

Drupal Stop administrator login authorization issue vulnerability

In Drupal Stop, versions 1.0 through 1.6 contain an authorization vulnerability. This vulnerability arises from alternative authentication paths or channels within the authentication mechanism, potentially allowing authentication bypass...

Traefik Labs Traefik processing logic error vulnerability

Traefik Labs Traefik versions prior to 2.11.58 and prior to 3.7.13 contain a logic error vulnerability. This vulnerability arises because a negative Host match is treated as a registered domain, allowing unauthenticated clients to bypass client certificate validation. When routing rules containin...

Roundcube Webmail Project Roundcube Webmail Resource Management Error Vulnerability

The Roundcube Webmail project contains a resource management error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because ImageMagick can bypass resource limits during thumbnail generation. On Windows, memory checks are only performed when rcubeima...

Roundcube Webmail Project Roundcube Webmail Cross-site Request Forgery vulnerability

The Roundcube Webmail project contains a cross-site request forgery vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises from CSRF validation bypass in the markasjunk plugin’s mark-as-junk functionality. The plugin reads the UID parameter from POST data...

Better-Auth authorization issue vulnerability

Versions 1.4.0-beta.18 through 1.7.7 of better-auth contain an authorization vulnerability. This vulnerability arises when Magic Link is enabled and storeToken is set to plain, or when storeToken is set to hashed while global verification.storeIdentifier is also set to hashed; additionally, if th...

Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because rcmailsendmail only strips line breaks from the Subject and Organization headers, failing to sanitize other header values receiv...

Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises from using the subject line of forwarded emails verbatim to generate attachment names. When the subject contains a CRLF sequence, it may...

Traefik Labs Traefik authorization issue vulnerability

Traefik Labs Traefik versions from 2.11.0 up to 2.11.58 and from 3.0.0 up to 3.7.14 contain an authorization issue vulnerability. This vulnerability arises because the first request using Authorization: Negotiate for pre-authentication attempts to authenticate against a global shared backend...

Drupal Project Browser cross-site request forgery vulnerability

Drupal Project Browser versions prior to 0.0.0 and 2.0.3, as well as versions prior to 2.1.0 and 2.1.5, contain a cross-site request forgery vulnerability. This vulnerability stems from the system’s susceptibility to cross-site request forgery attacks...

Drupal Mailer Plus Log log information leakage vulnerability

In Drupal Mailer Plus versions 0.0.0 through 1.2.7, there is a vulnerability related to log information leakage. This occurs when sensitive data is inserted into log files, potentially allowing remote services possessing stolen credentials to exploit this flaw...

Knime Business Hub permission and access control issue vulnerability

Versions of KNIME Business Hub prior to 1.19.0 contain a permission and access control vulnerability. This vulnerability arises because network access between execution contexts is unrestricted. Authenticated remote users can access open network ports on executors within different execution...

KNIME Business Hub resource management error vulnerability

Versions prior to KNIME Business Hub 1.19.0 contain a resource management error vulnerability. This vulnerability stems from an excessive resource allocation issue in the remote workflow editing functionality. Authenticated attackers can exploit this flaw to exhaust server-side resources, resulti...

Drupal SAML SSO – Service Provider trust management issue vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain a trust management vulnerability caused by the use of hard-coded credentials. This may lead to the retrieval of sensitive embedded data...

Drupal SAML SSO – Service Provider Authorization issue vulnerability

Drupal SAML SSO: Versions 0.0.0 through 3.2.0 contain an authorization issue vulnerability. This vulnerability arises from capturing and replaying attacks, which can lead to authentication bypass. It may allow attackers to use compromised credentials to access remote services...

CrawlSEO encryption issue vulnerability

Versions of crawlseo prior to 0.2.5 contain an encryption vulnerability. This vulnerability arises because Google OAuth access tokens and refresh tokens are stored unencrypted in the User.googleTokens column. Attackers with database read permissions can read these plaintext long-lived refresh...

webpack-dev-server input validation error vulnerability

A security vulnerability exists in webpack-dev-server versions 5.1.0 through 5.2.7 and 6.0.0. It arises because the unauthenticated open-editor endpoint uses regular expression validation of Host headers against the browser’s Origin scheme. As a result, Host values starting with “file:” or other...

KNIME Business Hub information disclosure vulnerability

Versions of KNIME Business Hub prior to 1.18.5 contain an information disclosure vulnerability. This vulnerability stems from excessive error message content within the catalog functionality, which may allow authenticated remote attackers to view workflow names even when they know the workflow ID...

Drupal SAML SSO – Service Provider Authorization issue vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks and may lead to forced browsing attacks...

Roundcube Webmail Project Roundcube Webmail authorization issue vulnerability

The Roundcube Webmail project contains an authorization issue vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability stems from improper authentication in multi-host installations; when logging in using alias addresses, rcubeuser::query fails to restrict matching...

WordPress Sunshine Photo Cart authorization issue vulnerability

WordPress Sunshine Photo Cart versions 3.7.5 and earlier contain an authorization issue vulnerability. This vulnerability stems from insufficient authorization checks, which may allow attackers to exploit improperly configured access control levels...

WordPress SureDash authorization issue vulnerability

WordPress SureDash versions 1.12.2 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may allow attackers to exploit improperly configured access control levels...

PHPOffice PhpSpreadsheet input validation error vulnerability

A security vulnerability exists in PHPOffice PhpSpreadsheet versions prior to 3.10.8 and 4.0.0 up to 5.10.0. This vulnerability stems from improper entity decoding of SpreadsheetML XML by Reader\Xml. The double-encoded “” becomes a literal “” after two callbacks, allowing SimpleXML to receive...

qcubed cross-site scripting vulnerability

Versions 2.2.0 through 3.1.1 of qcubed contain a cross-site scripting vulnerability. This flaw arises because the installationpath parameter is returned unsanitized or unescaped, potentially enabling reflected XSS attacks. Unauthenticated attackers can craft GET requests to...

WordPress Paid Member Subscriptions authorization issue vulnerability

WordPress Paid Member Subscriptions versions 3.1.2 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may allow attackers to exploit improperly configured access control security levels...

WordPress Page and Post Restriction authorization issue vulnerability

WordPress Page and Post Restriction versions 1.6.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may allow attackers to exploit improperly configured access control levels...

NewType Infortech NT OneAPP encryption issue vulnerability

NewType Infortech NT OneAPP versions 1.5.22 and earlier contain a vulnerability related to encryption issues. This vulnerability stems from improper certificate validation; it fails to verify both server certificates and hostnames. As a result, unauthenticated attackers on adjacent networks may...

WordPress MarketKing authorization issue vulnerability

WordPress MarketKing versions 2.1.72 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks and improper configuration of access control security levels, potentially allowing attackers to exploit misconfigured access controls...

Lexi Wilson exposed a resource management error vulnerability

Lexi Wilson has identified a resource management error vulnerability in versions 0.1.0 and later of esaml. This vulnerability arises because when esamlbinding:decoderesponse/2 uses xmerlscan:string/2 to parse SAML Responses, it registers element names, attribute names, and namespace prefixes as...

liukuo362573 YiShaAdmin path traversal vulnerability

Liukuo362573 YiShaAdmin Versions 2.2 through 3.1 contain a path traversal vulnerability. This vulnerability stems from an unauthenticated path traversal flaw in the /admin/File/DownloadFile endpoint. Attackers can exploit this by using directory traversal sequences in the filePath parameter and...

WordPress SureCart authorization issue vulnerability

WordPress SureCart versions 4.9.5 and earlier contain an authorization issue vulnerability. This vulnerability stems from susceptibility to deception attacks, leading to authentication bypass and potential for unauthorized use of authentication mechanisms...

Intermesh group-office path traversal vulnerability

Versions of Intermesh Group-Office prior to 3.3.0 and 3.5.5 contain a path traversal vulnerability. This vulnerability stems from a path traversal flaw in compress.php. Remote attackers can exploit it without authentication by manipulating the ../ sequence within the file parameter, thereby readi...

NewType Infortech NT OneAPP trust management issue vulnerability

NewType Infortech NT OneAPP versions 1.5.22 and earlier contain a trust management vulnerability. This vulnerability arises because WebView fails to validate origins; as a result, an HTTP Basic Authentication query is triggered, potentially allowing unauthenticated remote attackers to obtain the...

Berri AI LiteLLM permission and access control vulnerability

A security vulnerability exists in Berri AI LiteLLM versions from 1.87.0 up to and including 1.100.4, from 1.101.0 up to and including 1.101.3, from 1.102.0 up to and including 1.102.2, from 1.103.0 up to and including 1.103.1, and from 1.104.0-rc.1 up to and including 1.104.0-rc.2. This...

World Wide Broadcast Network AVideo authorization issue vulnerability

Versions of World Wide Broadcast Network AVideo prior to 29.4.0 contain an authorization issue vulnerability. This vulnerability stems from improper authorization checks, allowing a delegated Users Admin account to submit requests to confirmDeleteUser.json.php or userAddNew.json.php. Such request...

Steve Reiner Flexible GraphRAG improper output handling vulnerability

A security vulnerability exists in Steve Reiner Flexible GraphRAG versions 0.6.0 through 0.8.2. This vulnerability arises because the escape helper function in the falkordbadapter.py file first escapes quotes and then escapes backslashes. The resulting values are interpolated into the Cypher...

WordPress Strong Testimonials authorization issue vulnerability

WordPress Strong Testimonials versions 3.3.14 and earlier contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks, which may lead to exploitation of improperly configured access control levels...

WordPress eRoom authorization issue vulnerability

WordPress eRoom versions 1.7.1 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may lead to exploitation of improperly configured access control levels...

Silicon Labs EmberZNet resource management error vulnerability

Silicon Labs EmberZNet versions 9.1.1 and earlier contain a resource management error vulnerability. This vulnerability arises because malformed Discover Attributes commands can lead to loops with an unreachable exit condition; such commands must originate from devices on the network, and they...

TOTOLINK a950rg firmware input validation error vulnerability

The TOTOLINK a950rg firmware version 4.1.2cu.5268B20221104 contains a security vulnerability. This vulnerability stems from improper handling of the FileMd5 parameter in the UploadCustomModule function within the file lib/cstemodules/product.so. It may lead to command injection, allowing attacker...

Drupal Webform authorization issue vulnerability

Drupal Webform versions 0.0.0 through 6.2.12 and 6.3.0 through 6.3.1 contain an authorization issue vulnerability stemming from improper authorization checks, which may lead to forced browsing...

Drupal Central Authentication System Server input validation error vulnerability

The Drupal Central Authentication System Server versions prior to 0.0.0 and 2.0.4, as well as versions prior to 2.1.0 and 2.1.3, contain an input validation error vulnerability. This vulnerability stems from URL redirection to untrusted sites open redirect, potentially leading to forged data...

Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability stems from incomplete recognition of CSS escape sequences when processing the FuncIRI attribute, allowing remote content to be bypassed. As a...