EagleCloud Aquila code injection vulnerability

EagleCloud Aquila versions 2.6.7.2 and earlier contain a code injection vulnerability. This vulnerability stems from improper control over code generation in the Pigeon MFA service, potentially allowing authenticated remote attackers to execute arbitrary code via code injection...

Acronis Cyber Protect 17 processing logic error vulnerability

Versions of Acronis Cyber Protect 17 Linux prior to build 42587 contain a logic error vulnerability. This vulnerability arises because Linux binaries enable the executable stack attribute, which may increase the risk of arbitrary code execution...

Grafana Enterprise authorization issue vulnerability

A authorization issue vulnerability exists in Grafana Enterprise and Grafana OSS versions 12.4.0 through 12.4.13, 13.0.0 through 13.0.11, 13.1.0 through 13.1.8, and 13.2.0 through 13.2.4. This vulnerability stems from improper authorization; users who have edit access to contact points but no...

Futurum Software User Authentication Module SQL injection vulnerability

Versions of the Futurum Software User Authentication Module prior to May 2026 contain an SQL injection vulnerability. This vulnerability stems from insufficient validation and sanitization of user-supplied input, as well as improper WAF configuration. It may allow unauthenticated attackers to...

Juniper Networks Session Smart Router buffer error vulnerability

Versions prior to Juniper Networks Session Smart Router 7.0.5, versions 7.1.0 through 7.1.7, and versions 7.2.0 through 7.2.3 contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in the VRRP implementation, potentially allowing L2 adjacent attackers to read...

DALIBO PostgreSQL Anonymizer authorization issue vulnerability

DALIBO PostgreSQL Anonymizer versions 1 through 3.3.0 contain an authorization issue vulnerability. This vulnerability arises because data is masked when accessing partitions or inherited tables directly; however, the same masking rule is not applied when accessing via parent tables. As a result,...

Go Chi Chi authorization issue vulnerability

Versions prior to go-chi chi 5.5.0 contain an authorization issue vulnerability. This vulnerability stems from authentication bypass in middleware.SupressNotFound; it involves calling Match using a real-time routing context while retaining parameters and sub-tags associated with the mounted route...

King-Themed Product Designer for WooCommerce WordPress | Lumise path traversal vulnerability

King-Themed Product Designer for WooCommerce WordPress | Lumise versions 2.1.2 and earlier contain a path traversal vulnerability. This vulnerability stems from directory traversal in the processcheckout function. Unauthenticated attackers can exploit this flaw by using the /?lumise=ajax...

Linksys WAG200G authorization issue vulnerability

The Linksys WAG200G versions 1.01.06 and earlier contain an authorization issue vulnerability. This vulnerability stems from a weak password change mechanism, allowing attackers to change administrator passwords without providing the current password. As a result, authenticated administrators may...

Grafana Enterprise authorization issue vulnerability

Versions 13.2.0 through 13.2.4 of Grafana Enterprise and Grafana OSS contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks; authenticated users can read SSO client keys and modify instance-level SSO settings without having the required...

DALIBO PostgreSQL Anonymizer authorization issue vulnerability

DALIBO PostgreSQL Anonymizer versions 1 through 3.3.0 contain an authorization issue vulnerability. This vulnerability arises because data-modifying CTEs can bypass read-only restrictions imposed by mask roles, potentially leading to privilege escalation...

Klei Entertainment Don’t Starve Together buffer error vulnerability

Klei Entertainment’s Don’t Starve Together versions 747465 and earlier contain a buffer error vulnerability. This vulnerability stems from the native persistent string decoder failing to properly validate specially crafted worldgendata entries with an invalid length for Klei’s persistent blob...

WordPress Post Snippets cross-site scripting vulnerability

WordPress Post Snippets versions 4.2.4 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and output escaping. Authenticated attackers with contributor or higher privileges can exploit this by injecting arbitrary web scripts via shortcod...

Dell PowerProtect Data Domain buffer error vulnerability

Buffer error vulnerabilities exist in Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8, 7.13.1.0 through 7.13.1.80, 8.3.1.0 through 8.3.1.40, and 8.6.1.0 through 8.6.1.20. These vulnerabilities stem from stack buffer overflows and may allow unauthenticated remote attackers to execute...

Dell PowerProtect Data Domain Management Center authorization issue vulnerability

Versions 7.7.1.0 through 8.8, 7.13.1.0 through 7.13.1.80, 8.3.1.0 through 8.3.1.40, and 8.6.1.0 through 8.6.1.20 of Dell PowerProtect Data Domain Management Center contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, potentially allowi...

FasterXML Jackson-DataFormat-Smile resource management error vulnerability

A resource management error vulnerability exists in FasterXML Jackson-DataFormat-Smile versions from 2.9.0 up to 2.18.12, from 2.19.0 up to 2.21.8, from 2.22.0 up to 2.22.4, from 3.0.0 up to 3.1.8, and from 3.2.0 up to 3.2.4. This vulnerability stems from the NonBlockingByteArrayParser asynchrono...

GROWI Labs GROWI authorization issue vulnerability

Growi Labs versions from GROWI v3.2.10 through v8.0.6 contain an authorization issue vulnerability. This vulnerability arises from improper usage of user-controlled keys in page viewing and commenting functionalities, resulting in authorization bypass. As a result, authenticated attackers can...

MongoDB Java Driver input validation error vulnerability

A vulnerability related to input validation exists in MongoDB Java Driver versions 5.8.0 through 5.14.0. This vulnerability stems from the BSON encoding component failing to verify whether the declared length of externally supplied raw documents matches their byte range. As a result, when the...

WordPress S2Member cross-site scripting vulnerability

WordPress S2Member versions 261011 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and inadequate output escaping for the dateformat parameter, potentially enabling stored cross-site scripting attacks. Authenticated attackers with...

WordPress Ninja Forms input validation error vulnerability

Versions of WordPress Ninja Forms prior to 3.15.4 contain an input validation error vulnerability. This flaw stems from incomplete server-side validation; unauthenticated attackers can submit arbitrary values via the nfajaxsubmit endpoint to Checkbox List, Multi-Select List, Image List, Country,...

Juniper Networks Session Smart Router command injection vulnerability

A command injection vulnerability exists in Juniper Networks Session Smart Router and Juniper Networks Session Smart Conductor versions prior to 7.0.5, versions 7.1.x prior to 7.1.7, and versions 7.2.x prior to 7.2.3. This vulnerability stems from improper handling of special elements within OS...

DALIBO PostgreSQL Anonymizer processing logic error vulnerability

Versions 1 through 3.3.0 of the DALIBO PostgreSQL Anonymizer contain a logic error vulnerability. This vulnerability arises because the anon.partial and anon.partialemail functions may leak full data when the input size is too small...

Dmitro Baryshev Squirrel Abstract Imaging Library Digital error vulnerability

Versions prior to 1.0.2 of Dmitro Baryshev’s Squirrel Abstract Imaging Library contain a numeric error vulnerability. This vulnerability arises when the built-in WebP decoder processes malformed WebP files containing inconsistent container or ANMF frame metadata; in such cases, WebPDemuxGetI...

Roman Bataev Joker software supply chain issue vulnerability

Versions of Roman Bataev Joker prior to 1.8.2 contain a software supply chain vulnerability. This vulnerability arises when executing the joker --lint command; it searches upward through the .jokerd/ directory for matching linter. files. As a result, code provided by the repository may be execute...

n8n authorization issue vulnerability

Versions prior to n8n 1.123.85, 2.43.5, and 2.44.1 contain an authorization issue vulnerability stemming from a bypass of credential protection. This allows shared workflow editors to use restricted credentials by loading sub-workflows via URLs or local files. Attackers can configure the source u...

WordPress Event Booking Manager for WooCommerce permission and access control issue vulnerability

WordPress Event Booking Manager for WooCommerce versions 5.7.8 and earlier contain a vulnerability related to permission escalation and access control. This issue arises because the userhascap hook in the mepgrantshopmanageraccess function grants manageoptions privileges unconditionally whenever...

Ultralytics deserialization injection vulnerability

Version 8.4.65 of Ultralytics contains a deserialization injection vulnerability. This flaw arises because the loaddatasetcachefile function fails to validate user-supplied data, allowing untrusted data to be deserialized. As a result, remote attackers may execute arbitrary code within the contex...

WordPress Hustle cross-site scripting vulnerability

WordPress Hustle versions 7.8.14.3 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and inadequate output escaping for the contenttitle parameter. As a result, attackers who have been authenticated and possess custom-level or higher...

Alpine iLX-F511 buffer error vulnerability

The Alpine iLX-F511 version 7.0.000 contains a buffer error vulnerability. This vulnerability arises because the framework service fails to properly validate the length of user-provided data before copying it into a fixed-size stack buffer. As a result, attackers who can physically access the...

FasterXML jackson-dataformat-protobuf numeric error vulnerability

A numerical error vulnerability exists in FasterXML Jackson-DataFormat-ProtocolBuffer versions from 2.6.0 up to and including 2.18.12, from 2.19.0 up to and including 2.21.8, from 2.22.0 up to and including 2.22.4, from 3.0.0 up to and including 3.1.8, and from 3.2.0 up to and including 3.2.4. Th...

DALIBO PostgreSQL Anonymizer processing logic error vulnerability

Versions prior to DALIBO PostgreSQL Anonymizer 3.3.0 contain a logic error vulnerability. This vulnerability arises because the Anonymizer only checks for anonymization functions defined using SQL standard function bodies during execution; PostgreSQL performs such checks at declaration time. As a...

Ultralytics code injection vulnerability

Version 8.4.65 of Ultralytics contains a code injection vulnerability. This flaw arises because the checkdetdataset function fails to perform adequate validation on user-supplied strings prior to executing Python code; as a result, remote attackers may execute arbitrary code within the context of...

DALIBO PostgreSQL Anonymizer information disclosure vulnerability

Versions of DALIBO PostgreSQL Anonymizer prior to 3.3.0 contain an information disclosure vulnerability. This vulnerability stems from static masking and statistical persistence issues; original statistical data remains visible in pgstats until manually or via autovacuum, ANALYZE operations on th...

Juniper Networks Session Smart Router digital error vulnerability

Versions prior to Juniper Networks Session Smart Router 7.0.5, versions 7.1.0 through 7.1.7, and versions 7.2.0 through 7.2.3 contain a numerical error vulnerability. This vulnerability stems from an integer underflow in DhcpMessageDecoder. Attackers can exploit malicious DHCP responses to gain...

ggml llama.cpp buffer error vulnerability

Versions of ggml llama.cpp from b1046 through b2731 contain a buffer error vulnerability. This vulnerability arises because llamamodelloader fails to properly handle arbitrary 64-bit tensor offsets within specially crafted or truncated GUF model files, leading to an out-of-bounds read. This may...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Mozilla Firefox ESR versions prior to 115.44, Mozilla Firefox ESR versions prior to 153.6, Mozilla Thunderbird versions prior to 159, and Mozilla Thunderbird versions prior to 153.6. This vulnerability stems from a...

Hitachi JP1/Integrated Management 3 - Manager buffer error vulnerability

Hitachi JP1/Integrated Management 3 – Manager versions prior to 13-00 through 13-50-31; JP1/Automatic Job Management System 3 versions prior to 13-00 through 13-50-31; JP1/Automatic Job Management System 3 – Agent versions prior to 13-00 through 13-50-31; JP1/Automatic Job Management System 3 –...

Mozilla Firefox security vulnerabilities

Mozilla Firefox has a security vulnerability stemming from a use-after-free issue in the Networking: WebSockets component...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159 and Thunderbird versions prior to 159. This vulnerability stems from a use-after-free issue in the Graphics: Text component...

Sisense Cloud BI Platform cross-site scripting vulnerability

The Sisense Cloud BI Platform contains a cross-site scripting vulnerability. This vulnerability arises when processing SVG images formatted as data:image/svg+xml;base64 via the /api/v2/ai/sessions endpoint; the embedded script tags are rendered in the assistant window and can be exploited to...

ggml llama.cpp buffer error vulnerability

Versions of ggml llama.cpp prior to b5649 contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in llamavocab::impl::printinfo. An attacker can supply a specially crafted GGUF model containing a shortened tokenizer.ggml.tokens array, causing llama-cli or...

Google Go resource management error vulnerability

Versions of Google Go prior to 0.62.0 contain a resource management error vulnerability. This vulnerability arises when addText and fosterParent merge adjacent text nodes by appending text via string concatenation; as a result, each token is reassigned and its accumulated string is copied...

Asterisk path traversal vulnerability

Versions prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1, and Certified Asterisk 22.8-cert3 contain a security vulnerability stemming from authorization bypass in the Asterisk REST Interface ARI. When the Asterisk HTTP web server is enabled and accessible, authenticated attackers with read-on...

Saruf Ratul HR-Payroll-Management-System cross-site scripting vulnerability

The Saruf Ratul HR-Payroll-Management-System has a security vulnerability stemming from improper handling of the ID parameter in the chat.php file, which may lead to cross-site scripting attacks...

Nextcloud Server permission and access control issue vulnerability

Versions 32.0.0 through 33.0.0 of Nextcloud Server contain a vulnerability related to permission and access control. This issue arises because the resources API endpoint fails to properly restrict access for non-members; as a result, authenticated non-members can directly invoke this endpoint to...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159 and Thunderbird versions prior to 159. This vulnerability stems from use-after-free issues in the Disability Access APIs component, potentially leading to sandbox escape...

Atlantis command injection vulnerability

Versions 0.4.0 through 0.47.1 of Atlantis contain a command injection vulnerability. This vulnerability arises when values controlled by fetch requests in atlantis.yaml are concatenated into Terraform command parameters and executed via sh -c. Authenticated contributors can inject shell...

Hitachi HiRDB buffer error vulnerability

Hitachi HiRDB versions from 10-00 up to 10-12-01, HiRDB Server Version 9 from 09-00 up to 09-66-22, HiRDB Server with Additional Function Version 9 from 09-00 up to 09-66/V, HiRDB Server Version 932 from 09-02 up to 09-66-22, and HiRDB Server with Additional Function Version 932 from 09-00 up to...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159 and Thunderbird versions prior to 159. This vulnerability stems from use-after-free issues in the XPCOM component, potentially leading to sandbox escape...

SuperMicro MBD-X12SPI command injection vulnerability

The SuperMicro MBD-X12SPI version 01.07.20 contains a command injection vulnerability. This vulnerability arises because IPMI authentication administrators can execute commands on the BMC using the operating system root user...