Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.10. It stems from improper handling of BPF JIT execmem addresses by riscv patchmap. When CONFIGSTRICTMODULERWX is not enabled, it returns a read-only address directly, causing subsequent calls to copytokernelnofault to trigger a page fault...

Cross-site scripting vulnerability in WordPress Event Booking Manager for WooCommerce

WordPress Event Booking Manager for WooCommerce versions 5.7.9 and earlier contain a cross-site scripting vulnerability. This flaw stems from improper handling of script-related HTML tags within web pages, making them susceptible to basic cross-site scripting attacks that could lead to code...

RT-Labs AB SOEM buffer error vulnerability

RT-Labs AB’s SOEM 2.0.0 and earlier versions contain a security vulnerability. This vulnerability arises from failing to verify whether the length value in a device response exceeds the actual buffer size, potentially leading to an out-of-bounds read. Attackers can extract up to 64 KB of data fro...

Esri ArcGIS Server authorization issue vulnerability

Versions 11.3 through 12.0 of Esri ArcGIS Server contain an authorization issue vulnerability. This vulnerability stems from improper permission control, allowing remote unauthenticated attackers to update service metadata...

Apple macOS buffer error vulnerability

Apple macOS Golden Gate versions prior to 27.2 contain a buffer error vulnerability stemming from an out-of-bounds write issue. Mounting a specially crafted disk image may lead to unintended system termination or corruption of kernel memory...

boneIO Black encryption issue vulnerability

Versions 1.2.0 through 1.6.0 of boneIO Black contain an encryption vulnerability. This vulnerability arises because MQTT broker and web panel passwords are stored in plain text, and the GET /api/config endpoint returns a full configuration containing the subservice password. As a result,...

MISP Project misp-guard input validation error vulnerability

Versions 1.3 and earlier of the MISP Project’s misp-guard contain an input validation error vulnerability. This flaw arises from multiple policy execution checks that perform case-sensitive string comparisons on event tags, attribute categories, and shared group UUIDs. Attackers can exploit this ...

Zephyr Project Zephyr improper exception handling vulnerability

In Zephyr Project versions 4.4.0 through 4.5.0, there is an improper exception handling vulnerability. This vulnerability arises because SDP discovery requests cannot be canceled within the audio gateway role of classic Bluetooth headsets. After btrfcommdlcconnect fails, bthfpagconnect retains th...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2 and 27.2, Apple iPadOS versions prior to 26.7.2 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe versions prior to 26.7.2, Apple tvOS versions prior to...

boneIO Black authorization issue vulnerability

In boneIO Black versions from 1.0.0 up to but including 1.6.0, there is an authorization issue vulnerability. This vulnerability stems from the default disabling of authentication; the management web API listens on all network interfaces without requiring any credentials, thereby exposing all...

Apple macOS buffer error vulnerability

Apple macOS Golden Gate versions prior to 27.2 contain a buffer error vulnerability stemming from an out-of-bounds write issue. This may lead to unintended system termination when a malicious disk image is mounted...

Wolfvision Cynap input validation error vulnerability

The Wolfvision Cynap contains an input validation error vulnerability stemming from issues with the shared encryption trust configuration for its file sharing functionality. This vulnerability may allow attackers who have obtained matching private keys to log in to affected devices via SSH using...

Libimobiledevice buffer error vulnerability

Versions 1.4.0 and earlier of libimobiledevice contain a buffer error vulnerability. This vulnerability stems from improper handling of the Value parameter in the afcgetdeviceinfokey function within the src/afc.c file in the Device Info Handler component; it may allow local attackers to cause...

Apple Safari security vulnerabilities

A security vulnerability exists in Apple Safari versions prior to 27.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple visionOS versions prior to 27.2. This vulnerability stems from a use-after-free issue; processin...

Yoosee gm8135s camera resource management error vulnerability

The Yoosee gm8135s camera running version 21.00.01.36 contains a resource management error vulnerability. This vulnerability stems from improper initialization of an unknown function within the file wpasupplicantX.conf in the WiFi Configuration component, potentially allowing local network...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple visionOS versions prior to 27.2, and Apple watchOS versions prior to 27.2. This vulnerability stems from an out-of-bounds write issue;...

Frappe CRM authorization issue vulnerability

Versions of Frappe CRM prior to 1.89.1 contain an authorization issue vulnerability. This flaw stems from a lack of proper authorization checks; authenticated users with low privileges can retrieve unreadable CRM Lead records by querying the getcontactbyphonenumber API. Since this API performs ra...

TOTOLINK A950RG buffer error vulnerability

The TOTOLINK A950RG running version 4.1.2cu.5268B20221104 contains a buffer error vulnerability. This vulnerability stems from improper handling of the CONTENTLENGTH parameter by the sub402340 function within the file infostat.cgi in the Device-Information CGI component. As a result, a stack buff...

Esri ArcGIS Server cross-site scripting vulnerability

Esri ArcGIS Server versions 11.1 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from a stored XSS issue and may allow remote unauthenticated attackers to store files containing malicious code, which can then be executed within the victim’s browser environment...

2K Games Civilization V buffer error vulnerability

Version 1.0.3.144 of Civilization V by 2K Games contains a buffer error vulnerability. This vulnerability stems from a type confusion in the loadstring function within the Lua Sandbox component, potentially allowing remote attackers to perform malicious actions...

Wolfvision Cynap command injection vulnerability

Wolfvision Cynap has a command injection vulnerability stemming from improper handling of user-controlled input in its WolfProt interface implementation. This flaw may allow unauthenticated attackers with network access to execute operating system commands under the privileges of the affected...

Bukwild Decoy permission and access control issue vulnerability

Bukwild Decoy versions 5.11.1 and earlier contain a vulnerability related to permission escalation and access control. This issue stems from improper handling of the ‘role’ parameter in the Policy.php file, resulting in inadequate permission management and potential remote exploitation...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from issues in path processing logic, potentially allowing malicious Screen Sharing peers to...

WordPress Amelia cross-site scripting vulnerability

WordPress Amelia versions 2.4.12 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

XPDF input validation error vulnerability

Security vulnerabilities exist in xpdf versions 4.06 and earlier. These vulnerabilities stem from improper validation of the progression order field in JPEG 2000 images, potentially leading to infinite loops...

Agent2Agent A2A Go SDK information disclosure vulnerability

Agent2Agent A2A Go SDK versions 2.4.0 and earlier contain an information disclosure vulnerability. This vulnerability stems from improper handling of error messages in the CreateExecutor function within the a2asrv/agentexec.go file in the Push Notification Handler component, potentially leading t...

Libimobiledevice buffer error vulnerability

Versions 1.4.0 and earlier of libimobiledevice contain a buffer error vulnerability. This vulnerability stems from a heap buffer overflow in the webinspectorreceivewithtimeout function within the src/webinspector.c file of the Web Inspector component; it may be exploited by remote attackers...

Argilla cross-site scripting vulnerability

Versions 2.8.0 and earlier of Argilla contain a security vulnerability stemming from improper handling of the “template” parameter in the file Argilla-frontend/components/features/annotation/container/fields/sandbox/Sandbox.vue. This may lead to cross-site scripting...

OpenBB permission and access control issue vulnerability

OpenBB versions 4.7.2 and earlier, as well as 5.0.0 and earlier, contain a permission and access control vulnerability. This vulnerability stems from improper access control in the file openbbplatform/core/openbbcore/app/model/apisettings.py within the Local API Server component, potentially...

Apple Safari security vulnerabilities

A security vulnerability exists in Apple Safari versions prior to 27.2, Apple iOS versions prior to 26.7.2 and 27.2, Apple iPadOS versions prior to 26.7.2 and 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple visionOS versions prior to 27.2. This vulnerability stems from a type...

Agent2Agent A2A Java SDK information disclosure vulnerability

Agent2Agent A2A Java SDK versions 1.2.0.Final and earlier contain an information disclosure vulnerability. This vulnerability stems from improper handling of the getMessage function within the JSON-RPC Error Handler component; it may lead to information leakage via error messages, allowing...

Go JOSE input validation error vulnerability

Versions of Go JOSE prior to 4.1.5 contain an input validation error vulnerability. This vulnerability arises when, during decryption of untrusted JWE ciphertexts using algorithms such as A128CBC-HS256, A192CBC-HS384, or A256CBC-HS512, an empty ciphertext buffer is passed to the CBC-HMAC componen...

Datadog ddtrace resource management error vulnerability

Datadog DDTrace versions from 1.5.0 up to 3.19.9 and from 4.0.0 up to 4.15.6 contain a resource management error vulnerability. This vulnerability arises from an excessive backtracking when the default query string is processed by regular expressions; it can allow remote attackers to cause...

TornadoWeb Tornado input validation error vulnerability

Versions of TornadoWeb prior to 6.6 contain an input validation error vulnerability. This vulnerability stems from a regular expression capture replacement issue in the URL template within tornado.web.RedirectHandler. Specialized request paths can alter the redirect protocol or network location,...

Agent2Agent A2A .NET SDK information disclosure vulnerability

Agent2Agent A2A .NET SDK versions 1.0.0-preview2 and earlier contain an information disclosure vulnerability. This vulnerability stems from improper handling in the A2AJsonRpcProcessor.ProcessRequestAsync function within the src/A2A.AspNetCore/A2AJsonRpcProcessor.cs file in the Parser component. ...

Geesondog Rhaphp server-side request forgery vulnerability

Geesondog Rhaphp has a server-side request forgery vulnerability. This vulnerability stems from improper handling of the ‘url’ parameter in the image function within the file application/mp/controller/Show.php in the Mp Module Media Proxy component, potentially leading to server-side request...

Zephyr Project Zephyr resource management error vulnerability

In Zephyr Project, versions 4.4.0 through 4.5.0 contain a resource management error vulnerability. This vulnerability arises because, when SDP discovery is incomplete, bthfphfconnect fails to properly initialize the HFP Hands-Free object by using memset. As a result, nodes in the SDP client reque...

Apple Safari resource management error vulnerability

A resource management error vulnerability exists in Apple Safari versions prior to 27.2, Apple iOS versions prior to 26.7.2 and 27.2, Apple iPadOS versions prior to 26.7.2 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple tvOS versions prior to 27.2, Apple visionOS versions prior to...

Sony neural network library input validation error vulnerability

Versions 1.39.0 and earlier of Sony’s neural network libraries contain a security vulnerability. This vulnerability stems from a code injection issue in the loadparamintxt function within the python/src/nnabla/utils/cli/encodedecodeparam.py file in the Encode Param Command Handler component,...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from an out-of-bounds write issue, which may allow attackers controlling network file servers t...

NXP MCUXpresso MCUXpresso SDK buffer error vulnerability

Versions of the NXP MCUXpresso SDK prior to 2.13.0 contain a buffer error vulnerability. This vulnerability arises because USBDeviceCdcRndisSetCommand trusts informationBufferOffset provided by the host. A malicious USB host can send RNDIS SET messages containing OIDGENCURRENTPACKETFILTER or...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from a memory management issue involving use-after-free behavior, which may cause applications ...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple tvOS versions prior to 27.2, and Apple visionOS versions prior to 27.2. This vulnerability stems from improper input validation and may...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from improper boundary checks, leading to out-of-bounds writes; processing specially crafted...

Yoosee gm8135s camera input validation error vulnerability

The Yoosee gm8135s camera running version 21.00.01.36 contains a security vulnerability. This vulnerability stems from improper encryption signature validation by the Secure Boot component, potentially allowing local attackers to bypass signature verification...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from improper access restrictions and may allow applications to bypass sandbox limitations...

NLnet Labs Routinator improper exception handling vulnerability

The NLnet Labs Routinator has a vulnerability related to improper exception handling. This occurs because the maximum value during AS range parsing is less than the minimum value, resulting in an inability to reach the maximum value and memory exhaustion...

Gouguoa permission and access control issue vulnerability

Versions 6.1.2 and earlier of gouguoa contain a security vulnerability. This vulnerability arises from the file upload functionality in the chunkUpload function within app/disk/controller/Api.php; it allows unrestricted file uploads and may be exploited remotely...

Apple iOS security vulnerabilities

Security vulnerabilities exist in Apple iOS versions prior to 26.7.2 and 27.2, Apple iPadOS versions prior to 26.7.2 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe versions prior to 26.7.2, Apple tvOS versions prior to 27....