Javo Spot path traversal vulnerability

Versions of Javo Spot prior to 3.0.0 contain a path traversal vulnerability. This vulnerability stems from a path traversal issue in the fn parameter of the jvfrmspotgetjson AJAX operation. Unauthenticated attackers can read arbitrary files, potentially obtaining database credentials and keys...

i-Netsolution Readymade Unilevel Ecommerce MLM SQL injection vulnerability

The i-netsolution Readymade Unilevel Ecommerce MLM version for 2024-03-15 contains an SQL injection vulnerability. This flaw stems from improper input validation of the id parameter in /product-details.php. Unauthorized attackers can exploit this by sending boolean, stack-based, or time-based SLE...

Grav code injection vulnerability

Versions 2.0.0 through 2.2.5 of Grav contain a code injection vulnerability. This vulnerability stems from improper access control in FlexDirectory::dynamicFlexField, allowing page authors to invoke arbitrary methods on Flex objects via flex-@ directives within the frontmatter section. When users...

Zenorzz Goploy backlink vulnerability

In versions prior to Goploy 1.18.1, version 1.18.0 contains a backlink vulnerability. This vulnerability stems from a link traversal issue in the /deploy/fileDiff and /deploy/fileCompare endpoints. Attackers with repository write permissions can submit symbolic links pointing outside the project...

pylint-dev Pylint deserialization injection vulnerability

PyLint Dev: Versions 0.15.2 through 4.0.9 of PyLint contain a deserialization injection vulnerability. This vulnerability arises because module statistics are stored in a predictable file located under PYLINTHOME. Later, pickle.load is used to load untrusted data, allowing attackers to replace th...

Drupal Taxonomy Term Glossary authorization issue vulnerability

In Drupal Taxonomy Term Glossary versions 0.0.0 through 4.6.0, there is an authorization issue vulnerability stemming from a lack of authorization checks; this may lead to forced browsing...

CESNET Liyang processing logic error vulnerability

CESNET libyang versions 6.4.13 and earlier contain a logic error vulnerability. This vulnerability stems from an uninitialized pointer deallocation issue in the src/parserxml.c file within the lydxmlenvnetconfrpc function when parsing NETCONF RPC action envelopes. Peers with active NETCONF sessio...

KNIME Business Hub SaaS information disclosure vulnerability

Versions prior to KNIME Business Hub SaaS 1.19.0 contain an information disclosure vulnerability stemming from improper authorization. This vulnerability may allow unauthorized remote users to obtain basic account information...

ABB Ability Edgenius authorization issue vulnerability

ABB Ability Edgenius versions 3.2.3.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from the lack of authentication for critical functions, potentially allowing unauthorized access to these functions...

Georg Sieber Open Computer Orchestration Cross-site Scripting Vulnerability

Versions of Georg Sieber Open Computer Orchestration prior to 1.2.1 contain a cross-site scripting vulnerability. This vulnerability arises because Html::commandButton embeds action URLs containing stored computer hostnames into JavaScript strings within its inline onclick handler; only HTML...

Roundcube Webmail Project Roundcube Webmail permission and access control issues vulnerability

The Roundcube Webmail project contains a permission and access control vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability stems from CSS scope bypass in HTML messages. The rcubeutils::modcssstyles function fails to treat the “at-rule” prefix as a selector...

Amazon AWS SAM CLI command injection vulnerability

Versions of Amazon AWS SAM CLI prior to 1.166.2 contain a command injection vulnerability. This vulnerability stems from OS command injection within Terraform hooks; attackers can influence the Terraform configuration or plan files used during builds. By using specially crafted Terraform resource...

Ricardo Olsen {json:scada} SQL injection vulnerability

Ricardo Olsen json:scada Versions prior to 0.65-alpha contain an SQL injection vulnerability. This vulnerability stems from improper handling of the HistoryReadRequest parameter NodeId.Id, StartTime, and EndTime within the opcApi function in src/serverrealtimeauth/index.js. Authenticated users ca...

Drupal Combined image style resource management error vulnerability

In Drupal, there is a resource management error vulnerability in versions 0.0.0 through 1.0.7. This vulnerability arises from the lack of restrictions or throttling on resource allocation, potentially leading to excessive resource consumption...

Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because rcmailsendmail::extractinlineimages fails to validate the media type within inline image data URIs. Remote authenticated attacke...

PHPOffice PhpSpreadsheet resource management error vulnerability

Versions prior to PHPOffice PhpSpreadsheet 1.30.7, versions 2.0.0 through 2.1.19, versions 2.2.0 through 2.4.8, versions 3.3.0 through 3.10.8, and versions 4.0.0 through 5.10.0 contain a resource management error vulnerability. This vulnerability stems from Ods::processTableRow in...

GitLab trust management issue vulnerability

GitLab EE versions prior to 17.8 through 19.3.6, 19.4 through 19.4.3, and 19.5 through 19.5.1 contain a trust management vulnerability. This vulnerability stems from insufficient server-side validation during billing eligibility checks, potentially allowing authenticated users to access paid AI...

Drupal Diba carousel slider cross-site scripting vulnerability

Drupal Diba carousel slider versions prior to 0.0.0 and 3.0.2 contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

Drupal Webform code injection vulnerability

Drupal Webform versions prior to 6.2.12 and from 6.3.0 up to but including 6.3.1 contain a code injection vulnerability. This vulnerability stems from improper handling of special elements by the template engine, potentially leading to code injection...

GitLab authorization issue vulnerability

Versions prior to GitLab EE 19.3.6—specifically 19.2, 19.4 prior to 19.4.3, and 19.5 prior to 19.5.1—are affected by an authorization issue vulnerability. This vulnerability stems from insufficient granularity in administrator lockout controls; it may allow authenticated users with group Owner...

LocalStack security vulnerability

A security vulnerability exists in LocalStack version 4.9.2. It arises when a URL hosting specially crafted content is passed as templateURL to the localstack/cloudformation/deploy endpoint, potentially allowing arbitrary code execution within a Docker container environment...

TMS Amelia SQL injection vulnerability

TMS Amelia versions 2.4.11 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, making them susceptible to SQL injection attacks...

WatchGuard Agent permission and access control issue vulnerability

Versions of WatchGuard Agent prior to 1.25.14.0000 contain a privilege escalation and access control vulnerability. This vulnerability stems from improper permission allocation within the log directory, potentially allowing locally authenticated non-administrator users to create, modify, append, ...

oretnom23 php-travel-agency-system input validation error vulnerability

The oretnom23 php-travel-agency-system contains a security vulnerability stemming from improper handling of parameters costomerid/paymenttype/amount/description/user/uploadimage/fullname/visano in the admin/insert.php file, which may lead to SQL injection...

hupe13 Extensions for Leaflet Map Cross-site Scripting Vulnerability

The hupe13 extensions for Leaflet Map versions 6.0 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

Drupal SAML SSO – Service Provider side channel information disclosure vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain a side-channel information disclosure vulnerability. This vulnerability stems from an observable time difference that may lead to brute-force attacks...

Traefik Labs Traefik authorization issue vulnerability

In Traefik Labs Traefik versions 3.7.13 through 3.7.14, there is an authorization issue vulnerability. This vulnerability stems from HTTP router generation in the Kubernetes Ingress NGINX provider for non-TLS ingress points; no access control annotations are applied to generated routes. As a...

GitLab authorization issue vulnerability

GitLab CE/EE versions prior to 15.10 through 19.3.6, 19.4 through 19.4.3, and 19.5 through 19.5.1 contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks on user-supplied project filtering parameters within the group milestone API. As a result,...

Traefik Labs Traefik authorization issue vulnerability

Traefik Labs Traefik versions prior to 3.7.0 and 3.7.14 contain an authorization issue vulnerability. This vulnerability arises because the Kubernetes Ingress-NGINX provider forwards client-supplied Ssl-Client- headers to plaintext HTTP routers. When ssl-redirect is disabled and...

OrbiTeam BSCW Server path traversal vulnerability

Versions 5.x prior to OrbiTeam BSCW Server 5.2.5 and versions 7.x prior to 7.4.4 contain a path traversal vulnerability. This vulnerability stems from the use of the stylename parameter in theme operations, allowing unauthenticated attackers to send GET requests containing ../ sequences to...

Drupal Webform permission and access control issues vulnerability

Versions 0.0.0 through 6.2.12 and versions 6.3.0 through 6.3.1 of Drupal Webform contain a permission and access control vulnerability. This vulnerability stems from the use of unsafe operations in permission definitions, potentially leading to stored cross-site scripting attacks...

WordPress User Profile Builder permission and access control issue vulnerability

WordPress User Profile Builder versions 4.0.4 and earlier contain a privilege escalation vulnerability related to permission handling and access control. This issue stems from improper permission allocation and may lead to privilege escalation...

Silicon Labs Z-Wave SDK authorization issue vulnerability

Silicon Labs Z-Wave SDK versions 8.1.1 and earlier for 700/800 series devices and 6.85.02 and earlier for 500 series devices contain an authorization issue vulnerability. This vulnerability stems from a lack of validation in the ZWAVECMDNODESEXIST handler, potentially allowing devices already on...

hwk-fr ACF Extended cross-site scripting vulnerability

The hwk-fr ACF Extended versions 0.9.2.7 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

Silicon Labs EmberZNet buffer error vulnerability

Silicon Labs EmberZNet versions 9.1.1 and earlier contain a buffer error vulnerability. This vulnerability arises from an out-of-bounds write when processing malformed GetGroupMembership messages, potentially leading to a crash...

Pascal Buchbinder mod_qos numerical error vulnerability

Versions 11.74, 11.76, and 11.79 of Pascal Buchbinder’s modqos contain a numeric error vulnerability. This vulnerability arises from an off-by-one pointer calculation when merging request body parameters with existing URL query parameters. As a result, the query string is truncated during securit...

GitLab input validation error vulnerability

Versions 17.4 prior to GitLab EE 19.3.6, version 19.4 prior to 19.4.3, and version 19.5 prior to 19.5.1 contain an input validation error vulnerability. This vulnerability stems from improper access control during synchronization of approval rules, potentially allowing authenticated users to bypa...

MetInfo path traversal vulnerability

Versions prior to MetInfo 6.1.1, specifically version 6.0.0, contain a path traversal vulnerability. This vulnerability stems from a path traversal issue in the dir parameter within the file /include/thumb.php. Attackers can send specially crafted requests containing backslashes to bypass...

Drupal SAML SSO – Service Provider cross-site scripting vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain a cross-site scripting vulnerability. This flaw stems from improper input handling during web page generation and may lead to cross-site scripting attacks...

WordPress Addon Elements for Elementor cross-site scripting vulnerability

WordPress Addon Elements for Elementor versions 1.14.4 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and may lead to stored cross-site scripting attacks...

WordPress cross-site scripting vulnerability

WordPress versions 7.0.2 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient escaping of user display names in Quick Edit, making it susceptible to stored cross-site scripting attacks. Authenticated attackers with Contributor or higher privileges can inject...

Silicon Labs Connect SDK authorization issue vulnerability

Silicon Labs Connect SDK versions 4.3.1 and earlier, as well as Flex SDK versions 3.7.7 and earlier, contain an authorization issue vulnerability. This vulnerability arises because messages containing invalid security settings can bypass authentication, potentially leading to network disruptions...

Drupal SAML SSO – Service Provider server-side request forgery vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain a server-side request forgery vulnerability. This vulnerability stems from susceptibility to server-side request forgery attacks...

Lotus authorization issue vulnerability

Lotus versions 0.10.2 and earlier contain an authorization issue vulnerability. This vulnerability arises because SubscriptionViewSet.getobject utilizes a query set without any limits or organization filters or permission checks. As a result, authenticated users or API keys belonging to any...

Subhajit Khan Online Clinic Management System Cross-site Scripting Vulnerability

The subhajit khan online-clinic-management-system contains a security vulnerability stemming from improper handling of the Query parameter in the patdocmsg.php file. This vulnerability may lead to cross-site scripting attacks that can be executed remotely...

Subhajit Khan Online Clinic Management System encryption issue vulnerability

The subhajit khan online-clinic-management-system contains an encryption vulnerability. This vulnerability arises from improper handling of the patpswd and docpswd parameters in the patientregistration.php file, resulting in the lack of encryption for sensitive data. It may lead to the leakage of...

Roundcube Webmail Project Roundcube Webmail software supply chain issue vulnerability

The Roundcube Webmail project contains a software supply chain vulnerability affecting versions prior to 1.6.20 and 1.7.5 within the 1.7.x series. This vulnerability arises because potentially unsafe content is passed to ImageMagick during image scaling. Additionally, SVG and EPS are accepted as...

Roundcube Webmail Project Roundcube Webmail authorization issue vulnerability

The Roundcube Webmail project contains an authorization issue vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability arises because the check only compares the action name of a request without parsing any deprecated aliases. Remote authenticated attackers can...

Gloriafood Restaurant Menu – Food Ordering System – Table Reservation Cross-site scripting vulnerability

Gloriafood Restaurant Menu – Food Ordering System – Versions 2.4.4 and earlier contain a cross-site scripting vulnerability. This vulnerability arises from improper sanitization of input during web page generation, potentially enabling stored cross-site scripting attacks...

Drupal Webform cross-site scripting vulnerability

Drupal Webform versions 0.0.0 through 6.2.12 and 6.3.0 through 6.3.1 contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation, potentially enabling cross-site scripting attacks...