SuiteCRM SQL injection vulnerability

SQL injection vulnerabilities exist in SuiteCRM versions prior to 7.15.2 and from 8.0.0 up to but including 8.10.2. These vulnerabilities stem from the REST API v4.1’s getentrylist method, which is susceptible to time-based blind SQL injection when an authenticated caller bypasses two separate...

iXsystems TrueNAS SCALE authorization issue vulnerability

Versions prior to iXsystems TrueNAS SCALE 25.10.8 contain an authorization issue vulnerability. This vulnerability stems from a middleware-based HA heartbeat source check that allows authentication bypass. Unauthenticated connections to TCP endpoints with a hardcoded HA heartbeat address...

SAMSUNG Exynos 1480 digital error vulnerability

The SAMSUNG Exynos 1480 has a digital error vulnerability. This vulnerability stems from improper input validation during buffer operations in the Samsung Exynos H-Arx DRM plugin, potentially leading to memory corruption and resulting in denial of service or privilege escalation...

European Space Agency ASN1SCC input validation error vulnerability

A security vulnerability exists in versions of ASN1SCC prior to 4.7.0.1 issued by the European Space Agency. This vulnerability arises because the BitStreamDecodeConstraintWholeNumber function fails to reject values exceeding the declared range when the encoding value is not a power of two...

101arrowz fflate buffer error vulnerability

Versions 0.8.3 and earlier of 101arrowz fflate contain a buffer error vulnerability. This vulnerability arises from improper handling of the unzipSync function in the esm/index.mjs file, leading to memory corruption. It may be exploited remotely to carry out attacks...

SuiteCRM path traversal vulnerability

Versions prior to SuiteCRM 7.15.2 and versions 8.0.0 through 8.10.2 contain a path traversal vulnerability. This vulnerability arises because the upgrade wizard trusts the hidden ziptodir parameter, and cleanpath fails to reject any path traversal sequences. As a result, authenticated...

OpenHands authorization issue vulnerability

OpenHands versions 1.24.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from the lack of authentication in the Landing Page component, potentially allowing local network attackers to gain unauthorized access...

AgentScope-AI agentscope authorization issue vulnerability

AgentScope-AI agentscope versions 2.0.8 and earlier contain an authorization issue vulnerability. This vulnerability stems from improper authorization in the checkpermissions function within the Bash Tool component, located at src/agentscope/tool/builtin/bash.py. It may allow remote attackers to...

SAMSUNG Exynos 2100 digital error vulnerability

The SAMSUNG Exynos 2100 has a digital error vulnerability stemming from an integer overflow in the NPU kernel driver; this may allow unprivileged applications to trigger memory corruption...

Ultraviolet Cocos AI race condition vulnerability

Versions of Ultraviolet Cocos AI prior to 0.9.0 contain a race condition vulnerability. This issue arises because authentication is performed only once when establishing a trusted TLS connection. An attacker can modify the workload code, memory state, configuration, or attached devices on the...

Ansible Core information disclosure vulnerability

Versions of ansible-core from 2.19.0 up to and including 2.23.0 contain an information disclosure vulnerability. This vulnerability arises because when a task marked as nolog: true fails, the exception field is retained due to its inclusion in the PRESERVE list of allowed values. By default, the...

eosphoros DB-GPT software supply chain issue vulnerability

Eosphoros DB-GPT versions 0.8.2 and earlier contain a software supply chain vulnerability. This vulnerability stems from improper handling of the trustremotecode parameter in the execmodule function within the hfadapter.py file in the HuggingFace Adapter component. As a result, functionality is...

Trellix DLP on-prem extensions SQL injection vulnerability

Trellix DLP on-prem extensions versions 11.13.1 and earlier contain an SQL injection vulnerability. This vulnerability arises from the lack of sanitization or improper use of parameterized queries, allowing remote authenticated attackers to inject SQL queries and potentially lead to SQL injection...

European Space Agency ASN1SCC buffer error vulnerability

A security vulnerability exists in European Space Agency ASN1SCC versions prior to 4.7.0.1. This vulnerability stems from the ACN runtime function AcnDecStringCharIndexprivate and the generated uPER decoder InternalItemstringwithalphadecode failing to validate the index of decoded characters prio...

Improper output handling vulnerability in Apache Sling Engine

Versions of Apache Sling Engine prior to 3.0.4 contain an improper output handling vulnerability stemming from improper logging output...

Tiny Humans OpenHuman information disclosure vulnerability

Versions of Tiny Humans OpenHuman prior to 0.56.0 contain a security vulnerability. This vulnerability arises because the local server’s /events endpoint lacks bearer authentication and permits cross-origin browser access. As a result, an unauthenticated local client or attacker can subscribe to...

Bet4 gdbserver buffer error vulnerability

Bet4 gdbserver contains a buffer error vulnerability. This vulnerability stems from a heap buffer overflow in the QTDPsrc packet processing routine of gdbserver. The declared source length of the packet does not match the actual data length, causing hex2bin to write beyond the allocated heap...

Trellix DLP on-prem extensions encryption issue vulnerability

Trellix DLP on-prem extensions versions 11.13.1 and earlier contain an encryption vulnerability stemming from hard-coded encryption keys. This flaw may allow remote attackers to decrypt credentials and evidence files...

ThalesGroup Safenet Authentication Client Service race condition vulnerability

ThalesGroup Safenet Authentication Client Service versions 10.9.7449 and earlier contain a security vulnerability. This vulnerability stems from a TOCTOU condition in the SACSrv log cleanup function, which may allow authenticated non-administrator local users to redirect privilege-deletion...

OWASP ModSecurity Improper exception handling vulnerability

OWASP ModSecurity versions 3.0.5 through 3.0.17 contain a vulnerability related to improper exception handling. This issue arises because the PCRE2 implementation within src/utils/regex.cc, under the @rxGlobal attribute, incorrectly converts pcre2match matches into a generic “no match” result...

WordPress Motors path traversal vulnerability

WordPress Motors versions 1.4.128 and earlier contain a path traversal vulnerability. This vulnerability arises because the stmsaveuserextrafields function writes the attacker-controlled stmdealerlogopath parameter directly into user metadata. No ownership checks or permission restrictions are...

GNU debugger buffer error vulnerability

The GNU debugger contains a buffer error vulnerability. This vulnerability arises from a stack buffer overflow that occurs when GDB parses responses from remote debugging targets; it may lead to a GDB crash or allow malicious targets to execute arbitrary code with the privileges of GDB users...

SuiteCRM permission and access control vulnerability

Versions prior to SuiteCRM 7.15.2 and versions 8.0.0 through 8.10.2 contain a vulnerability related to permission escalation and access control. This issue arises because the V8 module API exposes CRUD operations restricted to administrative modules to any authenticated OAuth2 user. Low-privilege...

Mark III Labs MCP-Go input validation error vulnerability

Versions of Mark III Labs MCP-Go prior to v1.2.1 contain an input validation error vulnerability. This vulnerability stems from improper validation in OAuthHandler.fetchServerMetadata. A malicious MCP server can declare arbitrary resources using well-known metadata, and it can also declare...

Quarkus-VertX-HTTP authorization issue vulnerability

The quarkus-vertx-http vulnerability involves authorization issues. It arises because the management interface incorrectly combines the management root path with specific permission rules, causing security policies to be applied to the wrong internal path. This may allow attackers to bypass...

Chewy security vulnerability

Chewy version 26.23.0 contains a security vulnerability. This vulnerability arises because the host loads product detail deep links without sufficient validation; as a result, attackers can access the injected nmapetmdbridge JavaScript interface via pages containing the /dp/ path. They can then...

SAMSUNG Exynos 1080 encryption issue vulnerability

The SAMSUNG Exynos 1080 has an encryption vulnerability. This vulnerability allows attackers to send malicious IMS messages to target devices, potentially leading to information leakage via SIP message streams...

rpm-software-management DNF5 authorization issue vulnerability

The rpm-software-management DNF5 has an authorization issue vulnerability. This vulnerability arises because session methods on D-Bus session objects fail to verify whether the caller is the sole sender responsible for creating that session. As a result, local attackers may modify another user’s...

SysAdmins Media HomeBox cross-site scripting vulnerability

Versions of SysAdmins Media HomeBox prior to 0.27.0 contain a cross-site scripting vulnerability. This flaw arises because the maybeUrl function fails to restrict URL protocols, allowing authenticated users to store javascript: URIs within custom field values and render them as clickable links...

OWASP ModSecurity ModSecurity encryption issue vulnerability

OWASP ModSecurity versions prior to 2.9.15 and from 3.0.0 up to 3.0.17 contain an encryption-related vulnerability. This vulnerability arises because the HttpsClient::download function sets the libcurl CURLOPTSSLVERIFYHOST parameter to 1 instead of the strict value 2L. Under conditions involving...

Apache OFBiz code injection vulnerability

Versions of Apache OFBiz prior to 24.09.08 contain a code injection vulnerability. This vulnerability stems from improper handling of temporary files; unauthenticated attackers can access open file descriptors and inject “file:” URIs, resulting in OFBiz loading a Screen definition controlled by t...

Apache Juneau cross-site scripting vulnerability

Apache Juneau versions 9.2.0 and earlier contain a cross-site scripting vulnerability. This vulnerability arises because HTML document serialization fails to perform HTML encoding on variable substitutions within fields such as chrome header, nav, aside, footer, etc. on pages. When the applicatio...

Apache OFBiz input validation error vulnerability

Versions of Apache OFBiz prior to 24.09.08 contain an input validation error vulnerability stemming from improper control over resource identifiers resource injection. Authenticated users with access to the sfa component can override services used for vcard import and gain access to other service...

Improper handling of SAMSUNG Exynos 850 vulnerabilities

The SAMSUNG Exynos 850 has a vulnerability related to improper exception handling; it stems from insufficient validation of length fields in the GNSS firmware loader, potentially leading to kernel memory corruption...

Kyverno permission and access control issues vulnerability

Versions 1.19.1 through 1.19.2 of Kyverno contain a permission and access control vulnerability. This issue arises because in the APICall Fetch function, the path.Clean method within pkg/engine/apicall/apiCall.go treats “?” as a path character. As a result, the namespace regular expression matche...

Skywork FreeReels security vulnerability

Version 2.3.11 of Skywork FreeReels contains a security vulnerability stemming from issues in the com.dramawave.feature.web.WebPageActivity component, which may allow remote attackers to obtain sensitive information...

Apache OFBiz code injection vulnerability

Versions of Apache OFBiz prior to 24.09.08 contain a security vulnerability stemming from improper neutralization of special elements within the template engine server-side template injection. Remote authenticated attackers using ordinary non-administrative accounts can exploit this flaw by...

NEURON Simulator NEURON buffer error vulnerability

NEURON Simulator versions NEURON 9.0.2 and earlier contain a buffer error vulnerability stemming from a stack buffer overflow. Attackers can exploit this by providing excessively long tokens for version or mechanism names in bbcoremech.dat, globals.dat, or files.dat loaded into nrniv-core, thereb...

Vulnerability related to Apache OFBiz permission, authorization, and access control issues

Versions 24.09 prior to Apache OFBiz 24.09.08 contain a permission and access control vulnerability. This issue stems from improper permission allocation within Order Manager; only authenticated users possessing the ORDERMGRVIEW permission can modify approved orders via the updateShipGroupShipInf...

Apache OFBiz SQL injection vulnerability

Versions 24.09 prior to Apache OFBiz 24.09.08 contain an SQL injection vulnerability. This vulnerability stems from an SQL injection flaw in the generic performFind service of the entity engine. When submitting a case-insensitive search request with a specially crafted value ic=Y,...

Kyverno authorization issue vulnerability

Versions 1.17.0 through 1.19.2 of Kyverno contain an authorization issue vulnerability. This vulnerability arises from authorization bypass via NamespacedMutatingPolicy’s mutate-existing targetMatchConstraints.expression, enabling namespace tenants to override resources within other namespaces...

Java Open Source Libraries Vault Java Driver encryption issues vulnerability

A security vulnerability exists in Java Open Source Libraries Vault Java Driver versions 5.2.0 through 6.2.3. This vulnerability arises when, under conditions such as when a caller requires verification but fails to invoke the build method for SslConfig, SslConfig recovered via Java...

Apache Juneau information disclosure vulnerability

Apache Juneau versions 9.2.0 and earlier contain an information disclosure vulnerability. This vulnerability arises because the REST server leaks internal exception classes and messages in the “Thrown” response header and error body of malformed responses, potentially allowing remote clients to...

SuiteCRM input validation error vulnerability

Versions prior to SuiteCRM 7.15.2 and versions 8.0.0 through 8.10.2 contain an input validation error vulnerability. This vulnerability arises because V8 write paths fail to enforce api-visible or sensitive metadata restrictions. By using PATCH /Api/V8/module to set values for fields such as...

SuiteCRM SQL injection vulnerability

SQL injection vulnerabilities exist in SuiteCRM versions prior to 7.15.2 and from 8.0.0 up to 8.10.2. These vulnerabilities arise because the REST v4 JSON processor reads pre-filtered RAWREQUEST values. The related write helper function inserts field values provided by those values into INSERT an...

LangGenius dify trust management issue vulnerability

LangGenius Dify versions 1.18.0 and earlier, as well as 2.0.0-beta.2 and earlier, contain a trust management vulnerability. This vulnerability stems from hard-coded credentials in the file api/configs/feature/init.py within the Sandbox Run Handler component, which could be exploited by remote...

Francesco Pace ESPectre deserialization injection vulnerability

Francesco Pace ESPectre versions prior to 3.0.0-rc1 contain a deserialization injection vulnerability. This vulnerability arises because the analysis tool loads NPZ datasets enabled for NumPy pickle via micro-ESPectre/tools/csiutils.py. A malicious dataset contributor can place an array of object...

SAMSUNG Exynos 1080 input validation error vulnerability

The SAMSUNG Exynos 1080 has an input validation error vulnerability. This vulnerability stems from improper validation in the IMS stack of the Exynos modem, resulting in an out-of-bounds access issue...

Improper handling of SAMSUNG Exynos 850 vulnerabilities

The SAMSUNG Exynos 850 has a vulnerability related to improper exception handling; it arises from continuous transmission of control plane messages, leading to baseband crashes...

VRPN input validation error vulnerability

Versions 7.36 and earlier of the Virtual Reality Peripheral Network VRPN contain an input validation error vulnerability. This vulnerability arises because vrpnEndpoint::handlesendermessage and handletypemessage fail to validate length indices, allowing unauthenticated remote peers to write data...