SourceCodester Online Food Ordering System processing logic error vulnerability

The SourceCodester Online Food Ordering System version 1.0 contains a logic error vulnerability stemming from improper handling of the price and title parameters in the order.php file. This flaw may allow clients to enforce server-side security policies remotely, enabling attackers to exploit it...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple tvOS versions prior to 27.2, Apple visionOS versions prior to 27.2, and Apple watchOS versions prior to 27.2. This vulnerability stems fr...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2. This vulnerability stems from improper handling of sensitive data movement, potentially allowing applications to access sensitive user data...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe...

vLLM improper exception handling vulnerability

Versions vLLM from 0.11.1 up to but not including 0.32.0 contain an improper exception handling vulnerability. This vulnerability arises because DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR fail to properly handle normalized pixels and zero-valued images within their image paths. When such...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from parsing issues in directory path handling, potentially allowing malicious applications to...

zip-rs zip path traversal vulnerability

A security vulnerability exists in zip-rs versions from 7.2.0 up to and including 9.0.0. This vulnerability stems from the use of lexical prefix comparison when validating symbolic link targets in ZipArchive::extract and ZipArchive::extractunwrappedrootdir; no intermediate links are parsed...

Crocoblock JetElements For Elementor cross-site scripting vulnerability

Crocoblock JetElements for Elementor versions 2.9.2.5 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation, potentially leading to stored cross-site scripting attacks...

Apple visionOS security vulnerabilities

A security vulnerability exists in Apple visionOS versions prior to 27.2. This vulnerability stems from improper input validation leading to an integer overflow, which may result in memory corruption when processing specially crafted 3D models...

Linux kernel security vulnerabilities

Security vulnerabilities exist in Linux kernel versions from 6.18.53 up to 6.18.57 and from 7.2.7 up to 7.2.11. These vulnerabilities arise when kernel page tables are delayed during bootup; the work queue is not yet initialized, potentially leading to null pointer dereferencing and kernel crashe...

Apache Camel information disclosure vulnerability

A information disclosure vulnerability exists in Apache Camel versions from 4.19.0 up to and including 4.22.2. This vulnerability stems from OAuthClientCredentialsTokenResolver within the OAuth component, which utilizes a static cache containing only token endpoints and client IDs as keys. It fai...

Mattermost server request forgery vulnerability

Mattermost versions 11.7.10 and earlier in the 11.7.x series contain a server-side request forgery vulnerability. This vulnerability stems from the lack of outbound internal connection filtering applied to requests directed at the OpenID discovery endpoint. As a result, system administrators may ...

Sciener TTLock encryption issue vulnerability

Versions of Sciener TTLock prior to 9.8.260718 contain an encryption vulnerability stemming from a hard-coded static AES key. This may allow attackers within Bluetooth range to decrypt session keys transmitted during BLE pairing. By using the embedded defaultKey, they can recover persistent sessi...

WordPress Advanced Post Block cross-site scripting vulnerability

WordPress Advanced Post Block versions 2.5.1 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization during web page generation and may lead to stored cross-site scripting attacks...

RT-Labs AB SOEM buffer error vulnerability

RT-Labs AB’s SOEM 2.0.0 and earlier versions contain a buffer error vulnerability. This vulnerability arises because, during multi-segment data transmission, only the total size is checked at the beginning without tracking the cumulative size. Malicious devices can exploit this by declaring a...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS versions prior to Golden Gate 27.2, macOS Sequoia prior to 15.8.2, and macOS Tahoe prior to 26.7.2. This vulnerability stems from improper input sanitization, leading to validation issues that may allow malicious applications to bypass their sandboxe...

WordPress Geo Mashup cross-site scripting vulnerability

WordPress Geo Mashup versions 1.13.22 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple tvOS versions prior to 27.2. This vulnerability stems from inadequate authentication mechanisms and may allow physically proximate...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.0. It stems from the fact that iouring/register fails to apply task registration restrictions prior to ring activation; this may allow unrestricted task registration and ring activation, thereby bypassing restrictions on allowed operation...

Agent2Agent A2A Go SDK information disclosure vulnerability

Agent2Agent A2A Go SDK versions 2.4.0 and earlier contain an information disclosure vulnerability. This vulnerability stems from improper handling of error messages in the CreateExecutor function within the a2asrv/agentexec.go file in the Push Notification Handler component, potentially leading t...

Esri ArcGIS Server resource management error vulnerability

Esri ArcGIS Server versions 12.0 and earlier contain a resource management error vulnerability. This vulnerability allows remote unauthenticated attackers to send specially crafted requests that, under certain conditions, exhaust all available worker threads, resulting in a denial of service...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS versions prior to Golden Gate 27.2, Sequoia versions prior to 15.8.2, and Tahoe versions prior to 26.7.2. This vulnerability stems from a race condition that may allow applications to modify protected portions of the file system...

Havelsan Liman MYS authorization issue vulnerability

Versions of Havelsan Liman MYS prior to 2.3.4-1124 and 2.3.5-1131 contain an authorization issue vulnerability. This vulnerability stems from a weak password recovery mechanism due to forgotten passwords, which could potentially be exploited for password recovery...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2 and 27.2, Apple iPadOS versions prior to 26.7.2 and 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple visionOS versions prior to 27.2. This vulnerability stems from improper input validation, leading to memory...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Tahoe versions prior to 26.7.2, Apple tvOS versions prior to 27.2, Apple visionOS versions prior to 27.2, and Apple watchOS...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe...

Gouguoa permission and access control issue vulnerability

Versions 6.1.2 and earlier of gouguoa contain a security vulnerability. This vulnerability arises from the file upload functionality in the chunkUpload function within app/disk/controller/Api.php; it allows unrestricted file uploads and may be exploited remotely...

Zephyr Project Zephyr resource management error vulnerability

In Zephyr Project, versions 4.4.0 through 4.5.0 contain a resource management error vulnerability. This vulnerability arises because, when SDP discovery is incomplete, bthfphfconnect fails to properly initialize the HFP Hands-Free object by using memset. As a result, nodes in the SDP client reque...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe...

OpenBB permission and access control issue vulnerability

OpenBB versions 4.7.2 and earlier, as well as 5.0.0 and earlier, contain a permission and access control vulnerability. This vulnerability stems from improper access control in the file openbbplatform/core/openbbcore/app/model/apisettings.py within the Local API Server component, potentially...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from improper access restrictions and may allow applications to bypass sandbox limitations...

TOTOLINK A950RG buffer error vulnerability

The TOTOLINK A950RG running version 4.1.2cu.5268B20221104 contains a buffer error vulnerability. This vulnerability stems from improper handling of the CONTENTLENGTH parameter by the sub402340 function within the file infostat.cgi in the Device-Information CGI component. As a result, a stack buff...

BenoitC Hackney encryption issue vulnerability

Versions 1.24.0 through 4.9.0 of benoitc hackney contain an encryption vulnerability stemming from improper certificate validation. hackneyssl adds a partialchain callback to each verifypeer configuration; it uses the public key matching the bundled certifi store root certificate as a trust ancho...

Esri ArcGIS Server cross-site scripting vulnerability

Esri ArcGIS Server versions 11.1 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from a stored XSS issue and may allow remote unauthenticated attackers to store files containing malicious code, which can then be executed within the victim’s browser environment...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from an out-of-bounds write issue, which may allow attackers controlling network file servers t...

Maltego Windows Installer security vulnerability

A security vulnerability exists in Maltego Windows Installer version 4.13.0. This vulnerability stems from issues in the executable file parsing logic and may allow local attackers to execute arbitrary code...

Libimobiledevice buffer error vulnerability

Versions 1.4.0 and earlier of libimobiledevice contain a buffer error vulnerability. This vulnerability stems from improper handling of the Value parameter in the afcgetdeviceinfokey function within the src/afc.c file in the Device Info Handler component; it may allow local attackers to cause...

boneIO Black encryption issue vulnerability

Versions 1.2.0 through 1.6.0 of boneIO Black contain an encryption vulnerability. This vulnerability arises because MQTT broker and web panel passwords are stored in plain text, and the GET /api/config endpoint returns a full configuration containing the subservice password. As a result,...

Yoosee gm8135s camera input validation error vulnerability

The Yoosee gm8135s camera running version 21.00.01.36 contains a security vulnerability. This vulnerability stems from improper encryption signature validation by the Secure Boot component, potentially allowing local attackers to bypass signature verification...

2K Games Civilization V buffer error vulnerability

Version 1.0.3.144 of Civilization V by 2K Games contains a buffer error vulnerability. This vulnerability stems from a type confusion in the loadstring function within the Lua Sandbox component, potentially allowing remote attackers to perform malicious actions...

WordPress Amelia cross-site scripting vulnerability

WordPress Amelia versions 2.4.12 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

RT-Labs AB SOEM buffer error vulnerability

RT-Labs AB’s SOEM 2.0.0 and earlier versions contain a security vulnerability. This vulnerability arises from failing to verify whether the length value in a device response exceeds the actual buffer size, potentially leading to an out-of-bounds read. Attackers can extract up to 64 KB of data fro...

NXP MCUXpresso MCUXpresso SDK buffer error vulnerability

Versions of the NXP MCUXpresso SDK prior to 2.13.0 contain a buffer error vulnerability. This vulnerability arises because USBDeviceCdcRndisSetCommand trusts informationBufferOffset provided by the host. A malicious USB host can send RNDIS SET messages containing OIDGENCURRENTPACKETFILTER or...

Apple macOS buffer error vulnerability

Apple macOS Golden Gate versions prior to 27.2 contain a buffer error vulnerability stemming from an out-of-bounds write issue. This may lead to unintended system termination when a malicious disk image is mounted...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2 and 27.2, Apple iPadOS versions prior to 26.7.2 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe versions prior to 26.7.2, Apple tvOS versions prior to...

Apple iOS buffer error vulnerability

Buffer error vulnerabilities exist in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS versions prior to Golden Gate 27.2, Apple macOS versions prior to Sequoia 15.8.2, Apple macOS version...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.8. It arises because updateipv6checksum unconditionally reads an uninitialized transmission header offset when processing non-first IPv6 fragments; this may trigger warnings when CONFIGDEBUGNET is enabled...

Apple macOS race condition vulnerability

A race condition vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from a race condition issue that may allow attackers to modify code-signed applications,...

TornadoWeb Tornado input validation error vulnerability

Versions of TornadoWeb prior to 6.6 contain an input validation error vulnerability. This vulnerability stems from a regular expression capture replacement issue in the URL template within tornado.web.RedirectHandler. Specialized request paths can alter the redirect protocol or network location,...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple visionOS versions prior to 27.2, and Apple watchOS versions prior to 27.2. This vulnerability stems from an out-of-bounds write issue;...