Traefik Labs Traefik processing logic error vulnerability

Traefik Labs Traefik versions prior to 2.11.58 and prior to 3.7.13 contain a logic error vulnerability. This vulnerability arises because a negative Host match is treated as a registered domain, allowing unauthenticated clients to bypass client certificate validation. When routing rules containin...

Steve Reiner Flexible GraphRAG improper output handling vulnerability

A security vulnerability exists in Steve Reiner Flexible GraphRAG versions 0.6.0 through 0.8.2. This vulnerability arises because the escape helper function in the falkordbadapter.py file first escapes quotes and then escapes backslashes. The resulting values are interpolated into the Cypher...

Roundcube Webmail Project Roundcube Webmail Resource Management Error Vulnerability

The Roundcube Webmail project contains a resource management error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because ImageMagick can bypass resource limits during thumbnail generation. On Windows, memory checks are only performed when rcubeima...

Roundcube Webmail Project Roundcube Webmail Cross-site Request Forgery vulnerability

The Roundcube Webmail project contains a cross-site request forgery vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises from CSRF validation bypass in the markasjunk plugin’s mark-as-junk functionality. The plugin reads the UID parameter from POST data...

Roundcube Webmail Project Roundcube Webmail Cross-site Scripting Vulnerability

The Roundcube Webmail project contains a cross-site scripting vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because the error messages returned by the password driver in the password plugin are concatenated into user messages without proper HTML...

Better-Auth authorization issue vulnerability

Versions 1.4.0-beta.18 through 1.7.7 of better-auth contain an authorization vulnerability. This vulnerability arises when Magic Link is enabled and storeToken is set to plain, or when storeToken is set to hashed while global verification.storeIdentifier is also set to hashed; additionally, if th...

Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because rcmailsendmail only strips line breaks from the Subject and Organization headers, failing to sanitize other header values receiv...

Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises from using the subject line of forwarded emails verbatim to generate attachment names. When the subject contains a CRLF sequence, it may...

Vyper input validation error vulnerability

A input validation error vulnerability exists in VyperLang Vyper versions 0.4.0b1 through 0.5.0b1. This vulnerability arises because parseName parses the names of constants and default parameters from imported modules at the function call site rather than at their declaration site. When contract...

World Wide Broadcast Network AVideo authorization issue vulnerability

Versions of World Wide Broadcast Network AVideo prior to 29.4.0 contain an authorization issue vulnerability. This vulnerability stems from improper authorization checks, allowing a delegated Users Admin account to submit requests to confirmDeleteUser.json.php or userAddNew.json.php. Such request...

Berri AI LiteLLM permission and access control vulnerability

A security vulnerability exists in Berri AI LiteLLM versions from 1.87.0 up to and including 1.100.4, from 1.101.0 up to and including 1.101.3, from 1.102.0 up to and including 1.102.2, from 1.103.0 up to and including 1.103.1, and from 1.104.0-rc.1 up to and including 1.104.0-rc.2. This...

Intermesh group-office path traversal vulnerability

Versions of Intermesh Group-Office prior to 3.3.0 and 3.5.5 contain a path traversal vulnerability. This vulnerability stems from a path traversal flaw in compress.php. Remote attackers can exploit it without authentication by manipulating the ../ sequence within the file parameter, thereby readi...

MassCode information disclosure vulnerability

MassCode version 5.10 contains a security vulnerability. This vulnerability stems from improper handling of unknown functions in the file src/main/api/index.ts within the Local HTTP Service component, potentially leading to information disclosure...

Traefik Labs Traefik authorization issue vulnerability

Traefik Labs Traefik versions from 2.11.0 up to 2.11.58 and from 3.0.0 up to 3.7.14 contain an authorization issue vulnerability. This vulnerability arises because the first request using Authorization: Negotiate for pre-authentication attempts to authenticate against a global shared backend...

Drupal Webform authorization issue vulnerability

Drupal Webform versions 0.0.0 through 6.2.12 and 6.3.0 through 6.3.1 contain an authorization issue vulnerability stemming from improper authorization checks, which may lead to forced browsing...

Drupal REST & JSON API Authentication for Drupal authorization issue vulnerability

The Drupal REST & JSON API authentication issue affects Drupal versions from 0.0.0 up to and including version 3.2.0. This vulnerability arises because authentication can be bypassed via alternate paths or channels, potentially leading to unauthorized access...

Drupal Project Browser cross-site request forgery vulnerability

Drupal Project Browser versions prior to 0.0.0 and 2.0.3, as well as versions prior to 2.1.0 and 2.1.5, contain a cross-site request forgery vulnerability. This vulnerability stems from the system’s susceptibility to cross-site request forgery attacks...

Drupal Mailer Plus Log log information leakage vulnerability

In Drupal Mailer Plus versions 0.0.0 through 1.2.7, there is a vulnerability related to log information leakage. This occurs when sensitive data is inserted into log files, potentially allowing remote services possessing stolen credentials to exploit this flaw...

GitLab authorization issue vulnerability

A security vulnerability exists in GitLab CE/EE versions from 18.2 up to and including 19.3.6, from 19.4 up to and including 19.4.3, and from 19.5 up to and including 19.5.1. This vulnerability stems from insufficient execution of GraphQL field scopes, allowing authenticated users with a readapi...

Knime Business Hub permission and access control issue vulnerability

Versions of KNIME Business Hub prior to 1.19.0 contain a permission and access control vulnerability. This vulnerability arises because network access between execution contexts is unrestricted. Authenticated remote users can access open network ports on executors within different execution...

KNIME Business Hub authorization issue vulnerability

Versions of KNIME Business Hub prior to 1.19.0 contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks; attackers with access to the DataApp “no-login link” may list and access other user jobs created via that link...

KNIME Business Hub resource management error vulnerability

Versions prior to KNIME Business Hub 1.19.0 contain a resource management error vulnerability. This vulnerability stems from an excessive resource allocation issue in the remote workflow editing functionality. Authenticated attackers can exploit this flaw to exhaust server-side resources, resulti...

Drupal SAML SSO – Service Provider input validation error vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain an input validation error vulnerability. This vulnerability stems from URL redirection to untrusted sites open redirect, potentially allowing attackers to forge data sources...

Drupal SAML SSO – Service Provider trust management issue vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain a trust management vulnerability caused by the use of hard-coded credentials. This may lead to the retrieval of sensitive embedded data...

Drupal SAML SSO – Service Provider Authorization issue vulnerability

Drupal SAML SSO: Versions 0.0.0 through 3.2.0 contain an authorization issue vulnerability. This vulnerability arises from capturing and replaying attacks, which can lead to authentication bypass. It may allow attackers to use compromised credentials to access remote services...

CrawlSEO encryption issue vulnerability

Versions of crawlseo prior to 0.2.5 contain an encryption vulnerability. This vulnerability arises because Google OAuth access tokens and refresh tokens are stored unencrypted in the User.googleTokens column. Attackers with database read permissions can read these plaintext long-lived refresh...

webpack-dev-server input validation error vulnerability

A security vulnerability exists in webpack-dev-server versions 5.1.0 through 5.2.7 and 6.0.0. It arises because the unauthenticated open-editor endpoint uses regular expression validation of Host headers against the browser’s Origin scheme. As a result, Host values starting with “file:” or other...

KNIME Business Hub information disclosure vulnerability

Versions of KNIME Business Hub prior to 1.18.5 contain an information disclosure vulnerability. This vulnerability stems from excessive error message content within the catalog functionality, which may allow authenticated remote attackers to view workflow names even when they know the workflow ID...

Drupal SAML SSO – Service Provider cross-site scripting vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to cross-site scripting attacks...

Drupal SAML SSO – Service Provider Authorization issue vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks and may lead to forced browsing attacks...

Drupal Cloud command injection vulnerability

Drupal Cloud versions 0.0.0 through 7.0.1 contain a command injection vulnerability. This vulnerability stems from improper handling of special elements within OS commands, potentially leading to OS command injection...

Drupal Webform information disclosure vulnerability

Drupal Webform versions 0.0.0 through 6.2.12 and 6.3.0 through 6.3.1 contain an information disclosure vulnerability. This vulnerability arises because the web browser cache contains sensitive information, potentially allowing attackers to exploit improperly configured access control settings to...

Drupal Webform cross-site scripting vulnerability

Drupal Webform versions 0.0.0 through 6.2.12 and 6.3.0 through 6.3.1 contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web form generation, potentially enabling stored cross-site scripting attacks...

Drupal Central Authentication System Server input validation error vulnerability

The Drupal Central Authentication System Server versions prior to 0.0.0 and 2.0.4, as well as versions prior to 2.1.0 and 2.1.3, contain an input validation error vulnerability. This vulnerability stems from URL redirection to untrusted sites open redirect, potentially leading to forged data...

Drupal amazee.ai Private AI Provider SQL injection vulnerability

Drupal amazee.ai Private AI Provider versions prior to 0.0.0 and 1.3.7, as well as versions prior to 1.4.0 and 1.4.3, contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially leading to SQL injection attacks...

Drupal Email Verification / SMS Verification / OTP Verification authorization issue vulnerability

Drupal Email Verification / SMS Verification / OTP Verification versions prior to 2.4.0 contain an authorization issue vulnerability. This vulnerability arises from the use of alternative paths or channels, potentially leading to authentication bypass...

Drupal Component blocks cross-site scripting vulnerability

Drupal Component blocks versions 0.0.0 through 1.2.7 contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and may lead to stored cross-site scripting attacks...

Drupal AI Translate authorization issue vulnerability

Drupal AI Translate versions prior to 0.0.0 and 1.3.2, as well as versions prior to 1.4.0 and 1.4.1, contain an authorization issue vulnerability stemming from a lack of authorization checks. This vulnerability may lead to forced browsing...

Drupal Webform cross-site scripting vulnerability

Drupal Webform versions 0.0.0 through 6.2.12 and 6.3.0 through 6.3.1 contain a cross-site scripting vulnerability caused by improper input handling during web page generation, which may lead to cross-site scripting attacks...

Drupal Webform cross-site scripting vulnerability

Drupal Webform versions prior to 6.2.12 and prior to 6.3.1 contain a cross-site scripting vulnerability. This vulnerability stems from improper handling of input during web page generation, potentially enabling cross-site scripting attacks...

Drupal Stop administrator login authorization issue vulnerability

In Drupal Stop, versions 1.0 through 1.6 contain an authorization vulnerability. This vulnerability arises from alternative authentication paths or channels within the authentication mechanism, potentially allowing authentication bypass...

AiDot Linkind Matter Smart Plug security vulnerability

The AiDot Linkind Matter Smart Plug version 1.01.32 contains a security vulnerability stemming from a buffer overflow in SSDP local header parsing...

Drupal Mermaid Diagram Field authorization issue vulnerability

Drupal Mermaid Diagram Field versions 1.0.4 through 1.0.9 contain an authorization issue vulnerability. This vulnerability stems from improper authorization checks and may lead to forced browsing...

Drupal CSS Usage Analyzer authorization issue vulnerability

Drupal CSS Usage Analyzer versions 1.0.0 through 1.0.2 contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks and may lead to forced browsing...

Drupal Webform REST authorization issue vulnerability

Drupal Webform REST versions 0.0.0 through 4.2.1 contain an authorization issue vulnerability stemming from missing authorization checks, which may lead to forced browsing...

Drupal Webform cross-site scripting vulnerability

Drupal Webform versions prior to 6.2.12 and from 6.3.0 up to but including 6.3.1 contain a cross-site scripting vulnerability. This vulnerability stems from improper handling of input during web form generation, potentially enabling stored cross-site scripting attacks...

Drupal Artificial Intelligence authorization issue vulnerability

Drupal Artificial Intelligence versions 0.0.0 through 1.3.13 and 1.4.0 through 1.4.8 contain an authorization issue vulnerability stemming from missing authorization checks, which may lead to forced browsing...

Drupal Artificial Intelligence cross-site scripting vulnerability

Drupal versions prior to 1.3.13 and versions 1.4.0 through 1.4.8 contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during page generation, potentially enabling stored cross-site scripting attacks...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from a logical flaw in the 32-bit operation zero extension of the BPF verifier, which may allow arbitrary values to be injected into the upper half of the register...

vLLM code injection vulnerability

Versions vLLM 0.7.3 through 0.31.0 contain a code injection vulnerability. This vulnerability arises when the mmprocessorkwargs.coderevision parameter provided by the request is passed to Transformers AutoProcessor.frompretrained. When trustremotecode is enabled, it allows clients to specify whic...