196038 matches found
ubports lomiri-download-manager: Permissions, licensing, and access control issues
The ubports lomiri-download-manager version from 0.1.0 to 0.3.3 had vulnerabilities related to permission management and access control. These vulnerabilities stemmed from incorrect DBus policies in the lomiri-upload-manager component, allowing any user to read arbitrary files with root privilege...
FasterXML Jackson-core resource management vulnerability
FasterXML Jackson-core versions prior to 2.16.0 through 2.18.10, 2.19.0 through 2.21.6, 2.22.0 through 2.22.2, 3.0.0 through 3.1.6, and 3.2.0 through 3.2.2 contain a resource management vulnerability. This vulnerability arises from the character input parser failing to apply the maxNameLength lim...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
Papermark authorization issue vulnerability
Papermark versions 0.22.0 and earlier have an authorization issue. This vulnerability stems from a lack of authorization verification in the data room viewer group API. It may allow authenticated users to send DELETE requests to delete viewership groups and share links for other teams, or to read...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
Microsoft Office Word resource management error vulnerability
Microsoft Office Word has a resource management vulnerability. This vulnerability stems from the reuse of resources after release, which may allow unauthorized attackers to execute code through the network...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a security vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
EasySoft Zentaopms Authorization Issue Vulnerability
EasySoft ZentaOPMS versions 22.6 and earlier have an authorization vulnerability. This vulnerability stems from an authorization bypass in the action::editComment function. Certified users can read and modify comments on products and projects that they do not have access to by providing any actio...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute arbitrary code through the network...
BMC Helix Network Management Authorization Issues Vulnerability
Versions of BMC Helix Network Management prior to 26.3.01 have an authorization issue vulnerability. This vulnerability stems from the bypass of authentication when configuring SAML single-sign-on. Unverified attackers can log in as a local administrator using any password. By submitting an...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
WordPress Sunshine Photo Cart authorization issue vulnerability
WordPress Sunshine Photo Cart versions 3.7.4 and earlier have a vulnerability related to authorization. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...
CRMEB authorization issue vulnerabilities
The CRMEB version 5.6.1 to 6.0.0 contains an authorization issue vulnerability. This vulnerability stems from insecure direct object references in the gift-order API. It allows authenticated store users to read and claim orders of other users. An attacker can enumerate consecutive order IDs in th...
Libraw buffer error vulnerability
Libraw versions 0.22.2 and earlier have a buffer error vulnerability. This vulnerability stems from a stack-based out-of-bounds read in LibRaw::parseNikonMakernote. An attacker could provide a custom Nikon NEF/TIFF file with a 5-byte ShotInfo tag labeled with version 243. By reading the...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer error vulnerability, which stems from a heap buffer overflow. This vulnerability could allow unauthorized attackers to execute code via the network...
Microsoft Office Outlook buffer error vulnerability
Microsoft Office Outlook has a buffer error vulnerability, which stems from a heap buffer overflow. This vulnerability could allow unauthorized attackers to execute code via the network...
BeyondTrust Remote Support Authorization Issues Vulnerability
BeyondTrust Remote Support versions 26.2.3 and earlier have an authorization issue vulnerability. This vulnerability stems from internal components failing to properly verify the origin of the received messages, allowing attackers to execute file operations on the device...
Konstanty Bialkowski libmodplug buffer error vulnerability
Konstanty Bialkowski’s libmodplug versions 0.8.9.1 and earlier have a buffer error vulnerability. This vulnerability stems from the fact that the nPat parameter in the CSoundFile::ReadDSM function is not validated against MAXPATTERNS. Attackers can exploit this vulnerability by providing a...
Apache Airflow Permission Authorization and Access Control Vulnerabilities
Versions of Apache Airflow prior to 0.11.1 have vulnerabilities related to permission granting and access control. This vulnerability stems from the attachteampermissions function in the multi-team configuration, which grants global read access to audit logs for each team role. This could allow...
WordPress YITH WooCommerce Compare: Cross-site Script Vulnerability
WordPress YITH WooCommerce Compare 3.15.0 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation, which may lead to storage-based cross-site scripting attacks...
DataElem BISHENG Authorization Issue Vulnerability
DataElem BISHENG 3.0.0-beta4 and earlier versions have an authorization issue vulnerability. This vulnerability stems from insecure direct object references, which may allow authenticated low-privilege users to read other users’ parsed documents by providing arbitrary fileid values. It also allow...
zhontai Admin.Core Authorization Vulnerability
The zhontai Admin Core versions 10.1.0 and earlier have an authorization issue vulnerability. This vulnerability stems from an authorization bypass mechanism. Attackers can provide record IDs that exceed the allowed range, bypassing DataScope’s restrictions. Attackers who possess user or...
SELMF Unarr Buffer Error Vulnerability
SELMF versions 1.1.1 and earlier have a buffer error vulnerability. This vulnerability stems from an improper check of the length of ZIP64 extended fields in the zipparseextrafields function found in the zip/parse-zip.c file. It involves heap-based out-of-bounds read attacks, allowing attackers t...
Dave Nardella Snap7 OFFICIAL Buffer Error Vulnerability
Dave Nardella Snap7 OFFICIAL versions 1.4.3 and earlier contain a buffer error vulnerability. This vulnerability stems from the lack of checking of the DataLength field in TSnap7 OFFICIAL MicroClient::opReadArea. This allows out-of-buffer writing, enabling malicious S7 peers to overflow the clien...
APITable Authorization Issue Vulnerability
APITable 1.14.0-beta and earlier versions have an authorization issue. This vulnerability stems from an authorization bypass, allowing authenticated users to read node descriptions of other spaces by providing a user-controllable nodeId. When a GET request is made to /node/nodeId/description, the...
Eclipse Jetty information leakage vulnerability
Eclipse Jetty 12.1.12 and earlier versions of 12.1.x, 12.0.38 and earlier versions of 12.0.x, 11.0.32 and earlier versions of 11.0.x, 10.0.32 and earlier versions of 10.0.x, and 9.4.64 and earlier versions of 9.4.x have a vulnerability involving information leakage. This vulnerability arises from...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in the Microsoft Office Word component, which could allow unauthorized attackers to leak information through the network...
Ivanti Connect Secure software supply chain issue vulnerabilities
The Ivanti Connect Secure version 22.8R2.4 has a software supply chain vulnerability. This vulnerability stems from the improper handling of trust in DSCache configuration data by the dsinvoked broker, which may lead to permission escalation to root access...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
JetBrains DataloR path traversal vulnerability
Versions of JetBrains DataLore prior to 2026.2.1 have a path traversal vulnerability. This vulnerability stems from unauthenticated path traversal through the report blob endpoint, which may lead to the reading of arbitrary files...
JetBrains Junie CLI software supply chain issue vulnerabilities
Versions of JetBrains Junie CLI prior to version 26.8.3 have vulnerabilities related to the software supply chain. These vulnerabilities stem from misconfigured MCP servers in untrusted projects, which may lead to code execution...
jxxghp MoviePilot prompt injection vulnerability
Jxxghp MoviePilot versions 3.1.5 and earlier have a vulnerability related to prompt injection. This vulnerability arises when tools such as browsewebpage, searchweb, and torrent metadata parser process unreliable content, embedding malicious instructions. These contents are transmitted through...
ZoneMinder authorization issue vulnerability
The ZoneMinder versions 1.34.0 to 1.36.63 contain security vulnerabilities. These vulnerabilities stem from improper handling of token authentication in the web/includes/auth.php file. The validateToken function returns false for or invalid tokens. However, the calling party assigns this value to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.27 contains a security vulnerability. This vulnerability arises from the ipv4 stack failing to verify the checksum before doing so. Packets with incorrect checksum metadata can cause skbchecksumhelp to corrupt network headers, potentially leading to privilege...
AtalayaLabs OxiCloud Authorization Issue Vulnerability
The AtalayaLabs OxiCloud versions 0.9.1 to 0.9.3 have an authorization issue vulnerability. This vulnerability stems from improper authorization handling. Attackers can access shared files or folder contents by making a GET /api/files/id request, even after password protection has been applied...
Kitae Park Mang Board Cross-site Scripting Vulnerability
Kitae Park Mang Board 2.4.0 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient cleaning of the 'datatype' parameter input and inadequate escaping of output, allowing for storage-type cross-site scripting attacks. Unauthenticated attackers ca...
Google Chrome buffer error vulnerability
Versions of Google Chrome prior to 155.0.8059.84 contain a buffer overflow vulnerability caused by core memory corruption. This vulnerability could allow remote attackers to read memory through specially crafted HTML pages...
Google Chrome Resource Management Error Vulnerability
Versions of Google Chrome prior to 155.0.8059.84 have a resource management vulnerability. This vulnerability stems from a problem in the V8 engine where objects are reclaimed and then reused. This could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted...
Google Chrome Resource Management Error Vulnerability
Versions of Google Chrome prior to 155.0.8059.84 contain a resource management vulnerability. This vulnerability stems from the use of reusing Prerender objects after they are released, which may allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML pa...
Google Chrome: Input validation error vulnerability
Versions of Google Chrome prior to 155.0.8059.84 contain a vulnerability related to input validation. This vulnerability arises from improper input validation, and it could allow remote attackers to execute arbitrary code outside of the sandbox through a specially crafted HTML page...
Google Chrome buffer error vulnerability
Versions of Google Chrome prior to 155.0.8059.84 have a buffer overflow vulnerability, which stems from SVG memory corruption. This vulnerability could allow remote attackers to read memory through specially crafted HTML pages...
Google Chrome buffer error vulnerability
Versions of Google Chrome prior to 155.0.8059.84 have a buffer overflow vulnerability. This vulnerability stems from memory corruption in Workers, which could allow remote attackers to execute arbitrary code within the sandbox through a specially crafted HTML page...
Google Chrome Resource Management Error Vulnerability
Versions of Google Chrome prior to 155.0.8059.84 have a resource management vulnerability. This vulnerability stems from the use of reusing V8 objects after they are released, which may allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...
Jordan Harband: Improper exception handling leads to vulnerabilities
Jordan Harband versions from 6.7.0 to 6.16.1 have security vulnerabilities. This vulnerability arises from improper string coercion of array elements when using arrayFormat with a comma. When elements cannot be converted to strings, a type error will occur, potentially allowing unverified attacke...
LatePoint – Calendar Booking Plugin for Appointments and Events: Authorization Issues Vulnerability
LatePoint – Calendar Booking Plugin for Appointments and Events. Versions 5.7.3 and earlier have an authorization issue vulnerability. This vulnerability stems from a lack of ownership checks on the bookingid and cartid parameters. Unauthorized attackers can enumerate booking or cart identifiers...
WordPress Post Export Import with Media: Deserialization Injection Vulnerability
WordPress Post Export Import with Media has a deserialization injection vulnerability in versions 1.17.1 and earlier. This vulnerability stems from the deserialization processing of untrusted inputs, leading to PHP object injection. Certified attackers with administrator or higher privileges may ...
Hippoo Mobile App for WooCommerce: Cross-site Scripting Vulnerability
The Hippoo Mobile App for WooCommerce version 1.12.0 and earlier has a cross-site scripting vulnerability. This vulnerability stems from improper input during web page generation, making it susceptible to reflection-based cross-site scripting attacks...
Ravi Teja Online-Examination-System Processing Logic Vulnerability
Ravi Teja Online-Examination-System has a processing logic vulnerability. This vulnerability stems from the Session::checkLogin function in the include/session.php file within the Session Handler component. The function manipulates the parameters cookname/cookid, leading to incorrect comparisons...
WordPress FluentBoards authorization issue vulnerability
WordPress FluentBoards versions 2.1.0 and earlier have a licensing issue vulnerability. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...
Siemens RUGGEDCOM CROSSBOW authorization issue vulnerability
Siemens RUGGEDCOM CROSSBOW versions prior to V6.0 have an authorization issue vulnerability. This vulnerability stems from the failure to properly restrict access to sensitive configuration items through specific database queries. As a result, authenticated attackers may obtain administrative...