Incorrect Permission Assignment for Critical Resource

Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to insecure file permissions set on mysql.conf. An attacker can gain unauthorized access to sensitive database credentials by...

Missing Authorization

Overview org.apache.syncope.core.idrepo:syncope-core-idrepo-logic is an Apache Syncope Core IdRepo Logic Affected versions of this package are vulnerable to Missing Authorization due to incomplete authorization checks in the deprovisioning process for group members. An attacker can perform...

SQL Injection

Overview org.apache.syncope.core:syncope-core-persistence-jpa is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology and released under Apache 2.0 license. Affected versions of this package are vulnerable to SQL Injection via the...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the REST API. An attacker can access confidential configuration values from other realms by leveraging administrative entitlements in one realm to read connector configurations scoped to another realm...

Insufficiently Protected Credentials

Overview org.apache.syncope.core:syncope-core-provisioning-java is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology and released under Apache 2.0 license. Affected versions of this package are vulnerable to Insufficiently Protecte...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the transformation of search requests into backend queries, where the Realms filter may be rendered empty for non-recursive searches. An attacker can access unauthorized data by crafting specific non-recursive...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection in the CommandArgs static implementation. An attacker can execute arbitrary code by crafting a malicious Groovy Command class that bypasses the Groovy security sandbox. Remediation Upgrade...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of entitlements in the ClientApp update process. An attacker can gain unauthorized access to update operations by possessing only the create entitlement, which is incorrectly checked f...

CRLF Injection

Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to CRLF Injection via improper validation of newline characters in subdomain redirect URLs. An attacker can inject arbitrary web server configuration directives by supplying specially...

Improper Privilege Management

Overview org.apache.syncope.core:syncope-core-provisioning-java is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology and released under Apache 2.0 license. Affected versions of this package are vulnerable to Improper Privilege...

Information Exposure

Overview org.apache.syncope.core:syncope-core-provisioning-java is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology and released under Apache 2.0 license. Affected versions of this package are vulnerable to Information Exposure vi...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect in the calculation of the target Apereo CAS instance's URL by unconditionally trusting client-supplied forwarded HTTP headers. An attacker can redirect users to arbitrary external sites by manipulating these headers...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to incomplete security checks in the reconciliation service's pull and push processes. An attacker can gain unauthorized access to restricted resources by making calls as an administrator without the necessar...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper handling of Realm hierarchy checks in delegated administration. An attacker can gain unauthorized access to resources in sibling Realms by exploiting prefix-based matching in the authorization...

Improper Encoding or Escaping of Output

Overview org.apache.syncope.core:syncope-core-provisioning-java is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology and released under Apache 2.0 license. Affected versions of this package are vulnerable to Improper Encoding or...

Improper Resource Shutdown or Release

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Resource Shutdown or Release via the TiktokenTokenizer::new function in the tiktoken vocab File Handler. An attacker can cause the...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the Neo4j persistence layer when processing FIQL search conditions. An attacker can execute arbitrary Cypher queries by crafting malicious FIQL search inputs. Remediation Upgrade...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the process of configuring an AES key of non-standard length, where the provided value is padded with random characters and the resulting key is output to log files. An attacker can...

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation in the JWT authentication process when the JWKS settings, including at least the protocol and key, are disclosed. An attacker can gain unauthorized access to another user's privileges by spoofing the JWT subject after...

SQL Injection

Overview org.apache.syncope.core:syncope-core-persistence-jpa is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology and released under Apache 2.0 license. Affected versions of this package are vulnerable to SQL Injection via the sor...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the parameter processing of message-based management requests sent by an authenticated client with MANAGE permission. An attacker can cause excessive computation and pin the processing thread by...

Deserialization of Untrusted Data

Overview org.apache.activemq:artemis-core-client is a High-performance, non-blocking architecture for the next generation of event-driven messaging applications. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the parameter processing of message-based...

Missing Authentication for Critical Function

Overview org.apache.activemq:artemis-server is a server package for the ActiveMQ-Artemis project. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the SESSIONREATTACH. An attacker can gain unauthorized access to an existing session and assume th...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the SESSIONREATTACH. An attacker can gain unauthorized access to an existing session and assume the privileges of a previously authenticated user by sending a specially crafted CORE...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the JWT signature verification process when SRA is configured for OAuth 2.0 without a JWKS set URI assigned. An attacker can gain unauthorized access and impersonate any user identity...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via incomplete cleanup of uploaded files when a request is aborted before the storage engine assigns a file path. When an upload is aborted mid-flight, the finishAbort function in make-middleware.js snapshots only...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via incomplete cleanup of uploaded files when a request is aborted before the storage engine assigns a file path. When an upload is aborted mid-flight, the finishAbort function in make-middleware.js snapshots only...

Improper Protection of Alternate Path

Overview crewai-tools is a Set of tools for the crewAI framework Affected versions of this package are vulnerable to Improper Protection of Alternate Path due to the blocklist mechanism operating at the import system level rather than accounting for the complete Python runtime. An attacker can...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to improper handling of padding in the extradata allocation process within WMA encoding. An attacker can cause a denial of service by triggering an out-of-bounds read through specially crafted input data...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the MOV parsing in movreadiacb due to insufficient padding of extradata. An attacker can cause a denial of service by triggering an out-of-bounds read when processing specially crafted MOV files. Remediation Upgrad...

Allocation of Resources Without Limits or Throttling

Overview org.java-websocket:Java-WebSocket is a barebones WebSocket server and client implementation written in 100% Java. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the processFrameContinuousAndNonFin function in Draft6455.java of...

Cross-site Scripting (XSS)

Overview @strapi/content-manager is an A powerful UI to easily manage your data. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to insufficient sanitization of rendered rich text. An Author-role user can plant malicious tags in a rich text field, and when an Edit...

Prototype Pollution

Overview Affected versions of this package are vulnerable to Prototype Pollution via the compile and merge functions in lib/messages.js, where passing proto as a top-level error-code key or as a language-scoped sub-key to the .messages API triggers the legacy proto accessor on plain-object...

Prototype Pollution

Overview Affected versions of this package are vulnerable to Prototype Pollution via the compile and merge functions in lib/messages.js, where passing proto as a top-level error-code key or as a language-scoped sub-key to the .messages API triggers the legacy proto accessor on plain-object...

Inefficient Algorithmic Complexity

Overview nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in its address parser src/addressparser/index.ts, whose join condition evaluates partsparts.length - 1.slice-1 before the...

Off-by-one Error

Overview Affected versions of this package are vulnerable to Off-by-one Error via the sndctlasciielemidparse function. An attacker can overwrite adjacent stack memory and potentially crash the calling process or alter its execution by supplying a crafted control-element identifier string with 64 ...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the Snappy.uncompressByteBuffer, ByteBuffer method in org/xerial/snappy/Snappy.java. An attacker can trigger JVM termination by supplying valid compressed input that expands beyond the destination ByteBuffer...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the ZstdDictDecompressbyte dict, int offset, int length constructor in src/main/java/com/github/luben/zstd/ZstdDictDecompress.java. An attacker can read past the end of the supplied dictionary array by providi...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification in the transcription due to improper validation of audio sample rate headers. An...

Allocation of Resources Without Limits or Throttling

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the loadaudiopyav. An attacker can exhaust system memory by submitting a small, highly...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion due to recursive deserialization in MessageUnpacker.unpackValue in msgpack-core/src/main/java/org/msgpack/core/MessageUnpacker.java. An attacker can trigger StackOverflowError by supplying MessagePack payloads wit...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via MessageUnpacker.skipValue in msgpack-core/src/main/java/org/msgpack/core/MessageUnpacker.java. An attacker can desynchronize the parser and cause attacker-controlled data to be returned in place of lat...

Arbitrary Code Injection

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Arbitrary Code Injection in the LlavaOnevision2 loader due to improper handling of the trustremotecode parameter. An attacker can execute arbitrary...

Arbitrary Argument Injection

Overview aiosmtplib is an aiosmtplib is an asynchronous SMTP client for use with asyncio. Affected versions of this package are vulnerable to Arbitrary Argument Injection in the parseaddress function of src/aiosmtplib/email.py, which returns parsedaddress or address.strip, so a malformed mailbox...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through the CollectionProducts component, where insufficient authorization checks on product removal actions allow users with limited privileges to detach products from any collection. An attacker can remove produc...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through the store function. An attacker can modify product thumbnail and gallery images without proper authorization by invoking the store method on the media component during an authenticated admin-panel session...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through the stockAction process in the VariantStock component when the variant property is not locked, allowing client-side manipulation of the variant ID. An attacker can modify inventory levels for any product...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the authorization process for Livewire admin components. An attacker can gain elevated privileges, create new admin users, or delete roles and permissions by exploiting insufficient permission checks in the...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the deleteAction process of several Livewire components in the Settings area, where server-side authorization checks are missing. An attacker can remove critical configuration records such as tax zones, tax rate...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via the discount process. An attacker can manipulate financial calculations and produce unintended order totals by submitting negative values through the administrative interface, which are then persisted and...