203515 matches found
Tanium Comply authorization issue vulnerability
Versions prior to Tanium Comply 2.32.263, versions prior to 2.35.323, and versions prior to 2.37.326 contain an authorization issue vulnerability stemming from improper access control, which may lead to unauthorized access...
ggml llama.cpp buffer error vulnerability
Versions of ggml llama.cpp from b1046 through b2731 contain a buffer error vulnerability. This vulnerability arises because llamamodelloader fails to properly handle arbitrary 64-bit tensor offsets within specially crafted or truncated GUF model files, leading to an out-of-bounds read. This may...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Mozilla Firefox ESR versions prior to 115.44, Mozilla Firefox ESR versions prior to 153.6, Mozilla Thunderbird versions prior to 159, and Mozilla Thunderbird versions prior to 153.6. This vulnerability stems from a...
Hitachi JP1/Integrated Management 3 - Manager buffer error vulnerability
Hitachi JP1/Integrated Management 3 – Manager versions prior to 13-00 through 13-50-31; JP1/Automatic Job Management System 3 versions prior to 13-00 through 13-50-31; JP1/Automatic Job Management System 3 – Agent versions prior to 13-00 through 13-50-31; JP1/Automatic Job Management System 3 –...
Mozilla Firefox security vulnerabilities
Mozilla Firefox has a security vulnerability stemming from a use-after-free issue in the Networking: WebSockets component...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159 and Thunderbird versions prior to 159. This vulnerability stems from a use-after-free issue in the Graphics: Text component...
Sisense Cloud BI Platform cross-site scripting vulnerability
The Sisense Cloud BI Platform contains a cross-site scripting vulnerability. This vulnerability arises when processing SVG images formatted as data:image/svg+xml;base64 via the /api/v2/ai/sessions endpoint; the embedded script tags are rendered in the assistant window and can be exploited to...
ggml llama.cpp buffer error vulnerability
Versions of ggml llama.cpp prior to b5649 contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in llamavocab::impl::printinfo. An attacker can supply a specially crafted GGUF model containing a shortened tokenizer.ggml.tokens array, causing llama-cli or...
Google Go resource management error vulnerability
Versions of Google Go prior to 0.62.0 contain a resource management error vulnerability. This vulnerability arises when addText and fosterParent merge adjacent text nodes by appending text via string concatenation; as a result, each token is reassigned and its accumulated string is copied...
ggml llama.cpp numerical error vulnerability
Versions prior to ggml llama.cpp b11301 and versions prior to 0.6.0 contain a numerical error vulnerability. This vulnerability stems from an integer overflow in the ggufinitfromreader function. Attackers can exploit this by providing input whose product results in zero, thereby bypassing...
Asterisk path traversal vulnerability
Versions prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1, and Certified Asterisk 22.8-cert3 contain a security vulnerability stemming from authorization bypass in the Asterisk REST Interface ARI. When the Asterisk HTTP web server is enabled and accessible, authenticated attackers with read-on...
Saruf Ratul HR-Payroll-Management-System cross-site scripting vulnerability
The Saruf Ratul HR-Payroll-Management-System has a security vulnerability stemming from improper handling of the ID parameter in the chat.php file, which may lead to cross-site scripting attacks...
Nextcloud Server permission and access control issue vulnerability
Versions 32.0.0 through 33.0.0 of Nextcloud Server contain a vulnerability related to permission and access control. This issue arises because the resources API endpoint fails to properly restrict access for non-members; as a result, authenticated non-members can directly invoke this endpoint to...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159 and Thunderbird versions prior to 159. This vulnerability stems from use-after-free issues in the Disability Access APIs component, potentially leading to sandbox escape...
Atlantis command injection vulnerability
Versions 0.4.0 through 0.47.1 of Atlantis contain a command injection vulnerability. This vulnerability arises when values controlled by fetch requests in atlantis.yaml are concatenated into Terraform command parameters and executed via sh -c. Authenticated contributors can inject shell...
Hitachi HiRDB buffer error vulnerability
Hitachi HiRDB versions from 10-00 up to 10-12-01, HiRDB Server Version 9 from 09-00 up to 09-66-22, HiRDB Server with Additional Function Version 9 from 09-00 up to 09-66/V, HiRDB Server Version 932 from 09-02 up to 09-66-22, and HiRDB Server with Additional Function Version 932 from 09-00 up to...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159 and Thunderbird versions prior to 159. This vulnerability stems from use-after-free issues in the XPCOM component, potentially leading to sandbox escape...
Moxa Remote Connect Suite encryption issue vulnerability
Versions 1.0.0 through 4.2.0 of the Moxa Remote Connect Suite contain an encryption vulnerability stemming from improper certificate validation. This vulnerability may allow unauthenticated attackers with access to the communication path between the MRC Client and the server to impersonate a...
SuperMicro MBD-X12SPI command injection vulnerability
The SuperMicro MBD-X12SPI version 01.07.20 contains a command injection vulnerability. This vulnerability arises because IPMI authentication administrators can execute commands on the BMC using the operating system root user...
Sebastian Hildebrandt systeminformation input validation error vulnerability
Versions of Sebastian Hildebrandt System Information prior to 5.33.13 contain an input validation error vulnerability. This vulnerability arises because the networkStats function in lib/network.js uses a caller-controlled interface name index to access the network cache on FreeBSD, OpenBSD, and...
Asterisk permission and access control issue vulnerability
Versions prior to Asterisk 20.20.1, 21.12.3, 22.10.1, and 23.4.1, as well as Certified Asterisk versions prior to 20.7-cert11 and 22.8-cert3, are affected by a permission and access control vulnerability. This vulnerability arises because astloggrabber executes Python scripts from the globally...
SMCI MBD-X12STW-F command injection vulnerability
The SMCI MBD-X12STW-F version 01.02.08 contains a command injection vulnerability. This vulnerability stems from insufficient input filtering; attackers can inject command payloads into BMC functionality. When relevant services restart, these payloads may be executed, resulting in OS command...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159 and Mozilla Thunderbird versions prior to 159. This vulnerability stems from a race condition and use-after-free issue in the DOM: File component...
NVIDIA NeMo Agent ToolKit SQL injection vulnerability
Versions 1.4 through 1.6 of the NVIDIA NeMo Agent ToolKit contain an SQL injection vulnerability. This vulnerability may lead to data tampering, denial of service, and information leakage...
Cure53 DOMPurify cross-site scripting vulnerability
Versions 3.4.4 through 3.4.17 of Cure53 DOMPurify contain a cross-site scripting vulnerability. This vulnerability stems from a SAFEFORTEMPLATES bypass; when using RETURNDOM, RETURNDOMFRAGMENT, or INPLACE modes, attackers can split template expressions into text nodes separated by disallowed...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from a mitigation bypass in the DOM: Push Subscriptions component, which may allow...
Hitachi Energy CoreTec 5 command injection vulnerability
Versions 5.3.0 through 5.0.0 of Hitachi Energy CoreTec and versions 3.0.0 through 3.4.0 of CoreTec contain a command injection vulnerability. This vulnerability arises because the configuration daemon’s time synchronization handler, when processing updates to timezone configurations, concatenates...
Language Technology Lab at Alibaba DAMO Academy VideoLLaMA2 input validation error vulnerability
A security vulnerability exists in VideoLLaMA2 versions 1.0 and 1.1 within the Alibaba DAMO Academy Language Technology Lab. This vulnerability stems from improper handling of the parameter nameorpath in the loadpretrainedmodel function within the Model Loading component, located at...
Tanium Enforce authorization issue vulnerability
Versions prior to Tanium Enforce 2.9.736, versions prior to 2.10.778 for 2.10, and versions prior to 3.0 for 3.0 contain an authorization issue vulnerability. This vulnerability stems from improper access control and may lead to unauthorized access...
Diasurgical DevilutionX buffer error vulnerability
Versions 1.4.0 through 1.5.5 of diasurgical DevilutionX contain a buffer error vulnerability. This flaw arises because the libmpq library bundled with the software fails to validate the blocktableindex value in the libmpqfilenumberfromhash function; as a result, heap memory is read beyond its...
TP-Link RE305 encryption issue vulnerability
Versions prior to TP-Link RE305 V3 1.1.8 Build 20260921 Rel. 42853 and Archer C7 V5 1.3.1 Build 20260821 Rel. 41256 contain an encryption vulnerability. This vulnerability arises from the hard-coded encryption key within the user configuration backup mechanism; the firmware configuration manageme...
Daniel García Vaultwarden server request forgery vulnerability
Versions prior to 1.37.0 of Daniel García Vaultwarden contain a server-side request forgery vulnerability. This vulnerability arises because the icon downloader fails to apply the shouldblockhost check to the host associated with the second-stage favicon URL derived from HTML that is controlled b...
Spesmilo Electrum race condition vulnerability
Versions prior to spesmilo electrum 4.7.2 contain a race condition vulnerability. This flaw stems from an out-of-bounds check for spending limits in the Nostr Wallet Connect plugin. Malicious NWC clients can exploit non-atomic budget checks and millisatoshi truncations. By sending concurrent...
Mazin Al Saadi 3D Viewer for Nextcloud authorization issue vulnerability
The Mazin Al Saadi 3D Viewer for Nextcloud versions 1.7.9 through 3.3.2 contain an authorization issue vulnerability. This vulnerability arises because the public file endpoint fails to perform proper sharing authorization checks. Additionally, PublicFileController does not inherit from...
WatchGuard Fireware OS buffer error vulnerability
Security vulnerabilities exist in WatchGuard Fireware OS versions from 2026.2 up to and including 2026.4, as well as versions 12.12 through 12.12.4. These vulnerabilities stem from a stack-based buffer overflow in WireGuard configuration processing. Remote attackers possessing TLS decryption...
Alishahid74 Kali GPT command injection vulnerability
Alishahid74: Kali GPT versions a608c74 and earlier contain a command injection vulnerability. This flaw arises because the executetool function in kaligpt/tools/mcpserver.py fails to sanitize the scanner parameter, potentially allowing OS command injection. Attackers can embed shell metacharacter...
Eclipse KeyPont input validation error vulnerability
Versions 2.0.0-rc3 through 2.0.0-rc8 of Eclipse KeyPont contain an input validation error vulnerability. This vulnerability arises because the ML-KEM key pair lookup function locates public keys via CKAID and CKALABEL only; it fails to validate private keys. When a private key lacks a CKAID, the...
JeromeB GRR code injection vulnerability
JeromeB GRR versions prior to 4.5.0 contain a code injection vulnerability. This vulnerability arises because administrators can use the LDAP connector to set the ldapfilter parameter, thereby injecting malicious PHP into /personnalisation/configldap.inc.php. This may lead to remote code executio...
Graham Steffaniak filebrowser path traversal vulnerability
A security vulnerability exists in Graham Steffaniak FileBrowser versions prior to 1.5.2-stable and from 2.0.0-beta up to 2.0.1-beta. This vulnerability arises because file reading processes fail to verify that the resolved target of symbolic links lies within the source root directory and is...
Hitachi JP1/Automatic Job Management System 3 buffer error vulnerability
The Hitachi JP1/Automatic Job Management System versions 3 10-00 through 13-50-31 contain a buffer error vulnerability stemming from a heap buffer overflow...
Ubiquiti airMAX M buffer error vulnerability
Buffer error vulnerabilities exist in Ubiquiti airMAX M versions prior to 6.3.26, LTU PTMP versions prior to 2.4.2, LTU PTP versions prior to 1.5.7, and SolarPoint/SolarSwitch versions prior to 2.0.3. These vulnerabilities stem from heap buffer overflows and may allow malicious actors with adjace...
JetBrains Junie CLI input validation error vulnerability
Versions of JetBrains Junie CLI prior to 26.8.17 contain an input validation error vulnerability. This vulnerability stems from incomplete validation of whitelist commands and may lead to command execution...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Mozilla Firefox ESR versions prior to 153.6, Mozilla Thunderbird versions prior to 159, and Mozilla Thunderbird versions prior to 153.6. This vulnerability stems from use-after-free issues in the Graphics component, which m...
Mozilla Firefox security vulnerabilities
Mozilla Firefox has a security vulnerability stemming from use-after-free issues in its DOM: Core & HTML components, which may lead to memory corruption...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from incorrect boundary conditions in SVG...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from a use-after-free issue in the JavaScript: GC component, which may lead to memory...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from use-after-free issues in the Layout: Scrolling and Overflow component...
Mozilla Thunderbird security vulnerabilities
Versions prior to 159 and 153.6 of Mozilla Thunderbird contain a security vulnerability. This vulnerability arises because a remote RSS feed can permanently change the stored subscription URL to a file: URL via the itunes:new-feed-url or newLocation elements. As a result, Thunderbird reads this...