Vulnerability related to improper handling of Apache Sling Engine processing logic

A security vulnerability exists in Apache Sling Engine versions prior to 3.0.4. This vulnerability arises because the query/form parser accepts non-standard percent escapes and error character sets; after encountering such errors, it continues processing requests, potentially leading to HTTP...

Apache OFBiz authorization issue vulnerability

Versions 24.09 prior to Apache OFBiz 24.09.08 contain an authorization issue vulnerability. This vulnerability stems from the lack of proper permission validation when making direct requests to financial account services forced browsing. As a result, authenticated users possessing any valid...

SAMSUNG Exynos 850 resource management error vulnerability

The SAMSUNG Exynos 850 has a resource management error vulnerability. This vulnerability stems from a lack of boundary checks during the decoding of NAS Authentication Request messages, resulting in an infinite loop and potentially leading to a denial of service...

HeyForm cross-site scripting vulnerability

Versions prior to HeyForm 3.0.1 contain a cross-site scripting vulnerability. This flaw arises because, during file uploads, files are accepted based on MIME types controlled by the client and retained with their original HTML filenames. The static file service returns these files as text/html...

wppconnect-team WPPConnect Server permission and access control issue vulnerability

wppconnect-team: Versions 2.10.76 and earlier of the WPPConnect Server contain a vulnerability related to permission escalation and access control. This issue stems from missing authentication; unauthenticated attackers can read decrypted sticker media by statically mounting files. Additionally,...

Symfony input validation error vulnerability

Symfony has a security vulnerability. This vulnerability arises because UrlSanitizer uses league/uri to parse URLs according to RFC 3986. However, browsers follow the WHATWG URL standard and treat URLs lacking a valid authority differently. As a result, allowLinkHosts and allowMediaHosts checks a...

Apache OFBiz authorization issue vulnerability

Versions 24.09 prior to Apache OFBiz 24.09.08 contain an authorization issue vulnerability. This vulnerability arises from authorization bypass in the content viewing component via user-controlled keys. Authenticated users with role-based content viewing permissions can, by sending a...

PyMoDAQ deserialization injection vulnerability

A security vulnerability exists in PyMoDAQ versions prior to 4.4.13, as well as in pymodaqdata, pymodaqgui, and pymodaqutils versions prior to 5.1.15, versions 5.2.14 through 5.2.x prior to 5.2, and versions 5.3.x prior to 5.3.10. This vulnerability stems from deserialization of untrusted data an...

Immich permission and access control issue vulnerability

A security vulnerability exists in Immich versions 3.0.0 through 3.2.0. This vulnerability stems from improper permission checks during calendar heatmap routing; it fails to compare the identity of authenticated users with that of the requesting user, and does not apply asset visibility filters. ...

mpv input validation error vulnerability

A vulnerability related to input validation exists in mpv versions from 0.29.0 up to but not including 0.42.0. This vulnerability stems from a playlist injection flaw in the bundled ytdl hook script. Remote attackers can exploit this by embedding line breaks within playlist URLs, thereby adding...

Apache OFBiz authorization issue vulnerability

Versions of Apache OFBiz prior to 24.09.08 contain an authorization issue vulnerability. This vulnerability stems from improper authorization in the RequestHandler. Unauthenticated remote attackers can bypass authentication requirements for protected views by appending a protected view path suffi...

SAMSUNG Exynos 1080 input validation error vulnerability

The SAMSUNG Exynos 1080 has an input validation error vulnerability. This vulnerability arises from an out-of-bounds access when processing malformed RRC reconfiguration messages, potentially leading to a denial of service...

Improper exception handling vulnerability in SAMSUNG Exynos 1280

The SAMSUNG Exynos 1280 has a vulnerability related to improper exception handling; it stems from inadequate message processing prior to AS security activation and may lead to unintended behavior...

Apache OFBiz authorization issue vulnerability

Versions of Apache OFBiz prior to 24.09.08 contain an authorization issue vulnerability. This vulnerability stems from ordermgr’s lack of checks for ORDERMGRUPDATE; only users with the ORDERMGRVIEW permission can update orders...

ThalesGroup Safenet Authentication Client Service buffer error vulnerability

ThalesGroup Safenet Authentication Client Service versions 10.9.7449 and earlier contain a security vulnerability. This vulnerability stems from a heap buffer overflow in the SACSrv service interface. It can be exploited by authenticated local users who are not administrators, potentially leading...

SAMSUNG Exynos Modem 5300 buffer error vulnerability

The SAMSUNG Exynos Modem 5300 versions prior to November 2026 and the Exynos Modem 5400 versions prior to November 2026 contain a buffer error vulnerability. This vulnerability stems from insufficient length validation in the GNSS firmware loader, potentially leading to kernel memory corruption...

Tiny Humans OpenHuman prompt injection vulnerability

Versions of Tiny Humans OpenHuman prior to 0.57.13 contain a prompt injection vulnerability. This vulnerability arises from a failure to sanitize or restrict the names, descriptions, titles, and parameter definitions returned by configured external MCP servers. A maliciously compromised MCP serve...

ImageMagick resource management error vulnerability

Versions prior to ImageMagick 7.1.2-35 and 6.9.13-60 contain a resource management error vulnerability. This vulnerability arises because QueueAuthenticPixelCacheNexus in the SVG decoder fails to validate the width and height of the request area. An attacker can supply specially crafted SVG image...

SAMSUNG Exynos 1480 resource management error vulnerability

The SAMSUNG Exynos 1480 has a resource management error vulnerability caused by improper pointer handling in the NPU driver, resulting in double-free conditions...

SuiteCRM SQL injection vulnerability

SQL injection vulnerabilities exist in SuiteCRM versions prior to 7.15.2 and from 8.0.0 up to 8.10.2. These vulnerabilities arise because the getenddate operation in the Projects Controller concatenates the taskid value of authenticated callers into SQL queries without proper parameterization...

GNU gdb buffer error vulnerability

GNU gdb contains a buffer error vulnerability. This vulnerability stems from a stack buffer overflow in GDB’s tracepoint upload handler. As a result, GDB reads from a shared packet buffer containing an outdated previous reply that lies beyond the boundaries of its current response. An...

NewsBreak security vulnerability

A security vulnerability exists in NewsBreak version 26.21.0 for Android. It stems from WebView’s JavaScript bridging mechanism, which treats data URLs containing “data:text/html” as trusted. Attackers can exploit this by providing such pages via deep links to newsbreak://openweb and invoking the...

SAMSUNG Exynos 1280 buffer error vulnerability

The SAMSUNG Exynos 1280 has a buffer error vulnerability. This vulnerability stems from memory corruption in the baseband when processing NAS packets, potentially leading to a denial of service...

Apache OFBiz authorization issue vulnerability

Versions of Apache OFBiz prior to 24.09.08 contain an authorization issue vulnerability. This vulnerability stems from improper binding of authenticated external identities to local user accounts via an optional Janrain Engage Social Login integration within the ecommerce component, potentially...

CampCodes Bitcoin Wallet System authorization issue vulnerability

Version 1.0 of the CampCodes Bitcoin Wallet System contains a security vulnerability. This vulnerability stems from improper limits on excessive authentication attempts imposed by the randomint function within the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. It may allow remo...

Kubernetes input validation error vulnerability

Kubernetes has an input validation error vulnerability. This vulnerability stems from a lack of checks; the mirror-target Ingress annotation allows unauthenticated access to the ingress-nginx controller’s configuration API and enables the submission of write commands. This can lead to corruption ...

Improper Kyverno exception handling vulnerability

Versions prior to Kyverno 1.19.2 contain an improper exception handling vulnerability. This flaw stems from a lack of type-checking in the variable substitution engine; users who submit resources can exploit it by replacing non-string fields referenced by - variable with a shallowly substituted...

Keycloak authorization issue vulnerability

Keycloak has an authorization issue vulnerability. This vulnerability arises from its organization identity-first login process: attackers from multiple organizations can log in, then switch to the registration or password reset path. When a user is removed from their session, the indicator of...

Apache OFBiz input validation error vulnerability

Versions of Apache OFBiz prior to 24.09.08 contain an input validation error vulnerability. This vulnerability stems from issues related to external control over filenames or paths in the Label Manager’s ViewFile component. As a result, authenticated users possessing only the LABELMANAGERVIEW...

Kyverno resource management error vulnerability

Versions of Kyverno prior to 1.11.0 and 1.19.2 contain a resource management error vulnerability. This vulnerability stems from an unrestricted decompression issue in the extractStatement function. Remote attackers can exploit this by providing a highly compressed proof layer that exhausts memory...

Apache Juneau input validation error vulnerability

Apache Juneau versions 9.2.0 and earlier contain an input validation error vulnerability. This vulnerability arises because the REST server fails to validate response header values and redirect targets; it may allow remote clients to inject HTTP header lines or redirect users to any external site...

SAMSUNG Exynos 1280 buffer error vulnerability

The SAMSUNG Exynos 1280 has a buffer error vulnerability. This vulnerability stems from improper validation of user input in the ioctl handling routine within the Samsung Exynos NPU driver, potentially leading to out-of-bounds writes and resulting in a denial of service...

ThalesGroup Safenet Authentication Client SIS token engine buffer error vulnerability

A security vulnerability exists in ThalesGroup Safenet Authentication Client SIS Token Engine versions 10.8 R7 through 10.9 R3 build 10.9.7449. This vulnerability stems from a stack buffer overflow occurring during processing by the SIS token engine. It can be triggered by maliciously simulated...

Keycloak resource management error vulnerability

Keycloak has a resource management error vulnerability. This vulnerability arises because the SAML 1.1 assertion parser enters an infinite loop when processing the AuthorityBinding element within authentication statements; due to incomplete fixes on prior issues, it consumes all available memory,...

Purocean Yank Note information disclosure vulnerability

A security vulnerability exists in Purocean Yank Note version 3.93.0. This vulnerability stems from improper handling of the config.getAll function in the file src/main/server/index.ts within the Settings Endpoint component, potentially leading to information disclosure...

Kyverno path traversal vulnerability

Versions 1.16.0 through 1.19.2 of Kyverno contain a path traversal vulnerability. This vulnerability arises from the lack of validation on path segments within the resource parameters passed to resource.get and resource.post. The CEL namespace policy can bypass this restriction; tenants can creat...

Ultraviolet Cocos AI input validation error vulnerability

Ultraviolet Cocos AI versions 0.8.2 and earlier contain an input validation error vulnerability. This vulnerability arises because when accepting proof of a trusted execution environment, it fails to bind the allowed platform owner or unique machine identity, and no revocation is performed. As a...

Apache OFBiz resource management error vulnerability

Versions of Apache OFBiz prior to 24.09.08 contain a resource management error vulnerability. This vulnerability arises in multi-tenant deployments where, before confirming the existence of a tenant, ContextFilter and LoginWorker construct and request the delegator for each tenant based on the...

Kyverno authorization issue vulnerability

Versions 1.17.0 through 1.19.2 of Kyverno contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks in the mutate-existing backend handler, allowing namespace tenants to modify resources outside their namespaces. Attackers can use CEL expressions t...

SourceCodester Online Food Ordering System cross-site scripting vulnerability

The SourceCodester Online Food Ordering System version 1.0 contains a security vulnerability stemming from improper handling of the categorytitle parameter in the admin/addcategory.php file, which may lead to cross-site scripting attacks...

Vulnerability related to Apache OFBiz trust management issues

Versions of Apache OFBiz prior to 24.09.08 contain a trust management vulnerability. This vulnerability arises because the AdminServer component uses hard-coded passwords. Attackers can exploit this by accessing the AdminServer control port and querying the server’s operational status using a fix...

Symfony race condition vulnerability

Symfony has a security vulnerability stemming from NoPrivateNetworkHttpClient failing to cache IP addresses that have been verified via host checks. This may allow attackers to bypass private network restrictions by using DNS rebinding, thereby enumerating internal hosts and ports...

Edilson Freitas ChatCLI input validation error vulnerability

Edilson Freitas: A vulnerability related to input validation exists in ChatCLI versions prior to 1.215.2. This vulnerability stems from improper validation in the MCP OAuth login process; the server-provided Protected Resource Metadata is used as a resource identifier without verifying whether it...

Rapid7 Metasploit Framework authorization issue vulnerability

Versions of the Rapid7 Metasploit Framework prior to 6.5.9 contain an authorization issue vulnerability. This vulnerability arises because the REST API grants unauthenticated “bootstrap” privileges to POST /api/v1/users requests when the user table is empty. As a result, unauthorized attackers ma...

WordPress LiteSpeed Cache information disclosure vulnerability

WordPress LiteSpeed Cache versions 7.9.1 and earlier contain an information disclosure vulnerability. This vulnerability arises when, during cache REST activation, GET responses from the WooCommerce Store API are stored as publicly cached objects without distinguishing between Cart-Token-based...

musl-libc musl numeric error vulnerability

Musl-libc versions prior to 1.2.7 contain a numeric error vulnerability. This vulnerability arises from multiple integer overflows occurring when using an untrusted regular expression to call regcomp; it may lead to incorrect size allocation and heap-based out-of-bounds writes...

Kyverno authorization issue vulnerability

Versions prior to Kyverno 1.19.2 contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, allowing authors with namespace Policy privileges to read resources in other namespaces by using template-based values for generate.clone or cloneList...

Apache Juneau cross-site request forgery vulnerability

Apache Juneau versions 9.2.0 and earlier contain a cross-site request forgery vulnerability. This vulnerability arises because the REST server accepts “content” query parameters to replace the request body; this functionality is enabled by default for all HTTP methods including GET. Without prope...

NTT DATA Hinemos permission and access control issue vulnerability

Versions 7.2.0, 7.1.0 through 7.1.2, 7.0.0 through 7.0.4, 6.2.0 through 6.2.2, 6.1.0 through 6.1.2, and 6.0.0 through 6.0.3 of NTT DATA’s Hinemos contain a privilege escalation and access control vulnerability. This vulnerability stems from improper permission allocation; attackers possessing...

Apache OFBiz configuration error vulnerability

Apache OFBiz versions 24.09.07 and earlier contain a security vulnerability. This vulnerability stems from incorrect default values in the REST API framework’s .rest.xml definition parser ModelApiReader. When the auth attribute is omitted, it is erroneously parsed as false instead of the true...