38550 matches found
Information Disclosure
github.com/dapr/dapr is vulnerable to Information Disclosure. The vulnerability is caused due to the gRPC proxy sending the invoker app's token instead of the invoked app's token. This allows an attacker to gain access to the invoker app's token, compromising security and authentication mechanism...
Authentication Bypass
silverstripe/framework is vulnerable Authentication Bypass. This vulnerability is due to a lack of permission check to the DatabaseAdmin of function init on the buildDefaults method of the DevelopmentAdmin class, allows unauthorized users to access sensitive functionality...
Cross-Site Request Forgery (CSRF)
silverstripe/framework is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to a lack of proper CSRF token verification in gridFieldAlterAction submissions, which allows attackers to trick users with CMS access into posting unspecified data from external websites...
Server-Side Request Forgery (SSRF)
vufind/vufind is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to the /Upgrade/FixConfig route, which allows remote attackers to overwrite local configuration files...
Cross-site Scripting (XSS)
ezsystems/ezfind-ls is vulnerable to Cross-site Scripting XSS. The vulnerability is caused due to the lack of proper sanitization of the $searchextras.spellcheckcollation variable in the "Did you mean...?" spell check/search suggestion feature. This may lead to unauthorized code execution,...
Directory Traversal
github.com/stakater/forecastle is vulnerable to Directory Traversal. The vulnerability is due to insufficient input validation, allowing attackers to traverse directories by including "../" sequences in requests...
Remote Code Execution (RCE)
shopware/shopware is vulnerable to Remote Code Execution RCE. The vulnerability is due to certain circumstances which allow the execution of authorized foreign code...
Brute Force Attack
ezsystems/ezplatform-admin-ui is vulnerable to a Brute Force Attack. The vulnerability is due to a weakness in the forgotten password reset functionality, which allows excessive attempts without sufficient lockout measures...
Cleartext Transmission Of Sensitive Information
NASA AIT-Core is vulnerable to Cleartext Transmission of Sensitive Information. The vulnerability is due to using unencrypted channels to exchange data over the network, which allows an attacker to conduct a Man-in-the-Middle attack...
Remote Code Execution
shopware/shopware vulnerable to Remote Code Execution. The vulnerability is due to improper handling of templates that do not derive from the Shopware standard, allowing execution of unauthorized foreign code...
SQL Injection
PyMySQL is vulnerable to SQL Injection. The vulnerability is due to improper JSON sanitization within the escapedict function, which allows an attacker execute arbitrary SQL if an application handles untrusted JSON user input...
CSV Injection
Ghost is vulnerable to CSV Injection. The vulnerability is due to inadequate input sanitization during member CSV export, allowing malicious content to be injected into CSV files, and executed when opened by a spreadsheet application...
Cross-site Request Forgery (CSRF)
Sensiolabs/connect is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to the absence of a state parameter in OAuth requests, which exposes applications to CSRF attacks during the OAuth authentication flow...
Cross Site Scripting (XSS)
silverstripe/cms is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper escaping of HTML input in the textfields of pages referred to by VirtualPage, which allows an attacker inject and execute arbitrary JavaScript in the browser...
Improper Authorization
silverstripe/cms is vulnerable to Improper Authorization. The vulnerability is due to insufficient permission checks during SiteTree object creation, allowing unauthorized users to create new SiteTree objects...
Missing Default Authentication
Argo CD is vulnerable to Missing Default Authentication. The vulnerability is due to the default lack of password protection in redis, allowing attackers with access to an unprivileged pod to connect to the Redis server to gain read/write access, modify the "mfst" manifest key to execute...
Cross-Site Request Forgery (CSRF)
ezsystems/ezplatform is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to the CSRF protection which is not enabled by default., which allows attackers to perform unauthorized actions by exploiting the inactive CSRF token...
Remote Code Execution
Shopware is vulnerable to Remote Code Execution. This vulnerability is due to insufficient validation, allowing attackers to inject foreign code...
Sensitive Information Disclosure
ezsystems/ezpublish-kernel is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the REST API potentially disclosing the names of all available site accesses...
Remote Code Execution (RCE)
ezsystems/ezpublish-kernel is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling of file uploads, which can lead to remote code execution...
Cross-Site Scripting
shopware/shopware is vulnerable to Cross-Site Scripting. The vulnerability is due to inadequate input sanitization in the frontend, which allows an attacker to inject and execute malicious scripts in the context of a victim’s web browser...
Access Bypass
ezsystems/ezplatform is vulnerable to Access Bypass. The vulnerability is due to inadequate rewrite rules for blocking access to executable files in the var directory when using eZ Platform Cloud on Platform.sh...
Cross-Site Scripting (XSS)
umbracocms is vulnerable to stored Cross-site Scripting XSS. The vulnerability is due to the lack of input sanitization, allowing attackers with access to the backoffice to inject malicious content into a website or application...
Insufficient Session Expiration
@fastify/session is vulnerable to Insufficient Session Expiration. The vulnerability is due to the expires field being overridden if the maxAge field is set, which prevents cookies from being correctly detected as expired, thus expired sessions are not destroyed. This allows attackers to maintain...
Tabnabbing
passbolt/passboltapi is vulnerable to Tapnabbing. The vulnerability is due to a flaw where a user can create and share a resource with a malicious URI that, when opened by the victim using the "Open URI in a new tab" function, grants the malicious page access to the window.opener object...
Template Injection
verbb/formie is vulnerable to Template Injection. An attacker can execute arbitrary code by including malicious Twig code into fields that support Twig, such as the Submission Title or the Success Message...
Use After Free
Wireshark is vulnerable to Use After Free. The vulnerability is caused due to an incorrect use of dynamic memory during program operation which can cause a Denial Of Service DOS via crafted capture file...
Denial Of Service (DOS)
Wireshark is vulnerable to Denial Of Service DOS. The vulnerability is caused due to memory handling issue which can be exploited to mount Denial Of Service DOS via crafted capture file...
Denial Of Service (DOS)
Wireshark is vulnerable to Denial Of Service DOS. The vulnerability is due to MONGO and ZigBee TLV dissector infinite loops resulting in Unreachable Exit Condition via packet injection or crafted capture file...
Cross Site Scripting (XSS)
phpxmlrpc/extras is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to inadequate input validation within the documentingxmlrpcserver class when processing the GET methodName parameter, which allows attackers to execute malicious scripts in the context of the user's browser,...
XPath Injection
robrichards/xmlseclibs is vulnerable to XPath Injection. The vulnerability is due to inadequate filtering of user input before it is incorporated into an XPath expression, which allows attackers to manipulate the XPath by injecting malicious input, potentially leading to unauthorized data access...
Information Disclosure
passbolt/passboltapi is vulnerable to Information Disclosure. The vulnerability is due to the exposure of session cookies through the /auth/verify.json endpoint, which returns cookies in the response similar to the TRACE HTTP method, potentially allowing an attacker to hijack a user session if th...
Improper Callback Validation
omero-web is vulnerable to Improper Callback Validation. The vulnerability is due to a lack of sanitization or validation of callback parameters in JSONP-enabled endpoints, which allows an attacker to execute arbitrary JavaScript code in the browser...
Code Injection
litellm is vulnerable to Code Injection. The vulnerability is due to unsafe usage of the eval function in the litellm.getsecret method, where untrusted data is passed to eval without sanitization...
Improper Certificate Validation
Requests is vulnerable to Improper Certificate Validation. The vulnerability is due to a flaw where disabling certificate verification verify=False in the first request of a Session causes all subsequent requests to the same origin to ignore certificate verification, regardless of changes to the...
Use After Free
Chrome is vulnerable to Use After Free. The vulnerability is caused due to a defect in memory handling allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Type Confusion
Chrome is vulnerable to Type Confusion. This allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
Use After Free
Google Chrome is vulnerable to Use after free. The vulnerability is due to incorrect handling of memory allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Open Redirect
umbraco.cms is vulnerable to Open Redirect. The vulnerability is due to improper validation of redirect targets, which results in authenticated users being redirected to malicious websites after logging into the backoffice...
HTML Injection
passbolt/passboltapi is vulnerable to HTML injection. The vulnerability is due to improper input sanitization, allowing an attacker to inject HTML code in emails...
Cross Site Scripting (XSS)
wwbn/avideo is vulnerable to Cross Site Scripting XSS. The vulnerability is due to insufficient input validation, allowing attackers to inject malicious scripts into web pages viewed by other users...
UI Spoofing
Goggle chrome is vulnerable to UI Spoofing. The vulnerability is caused due to an Inappropriate implementation in Downloads which allows a remote attacker to convince a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page...
Open Redirect
Drupal's path module is vulnerable to a Open Redirect. The vulnerability is due to improper URL handling which allows users with 'administer paths' permissions to create URLs that redirect to malicious sites...
Remote Code Execution (RCE)
passbolt/passboltapi is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper input sanitization during the server's PGP key generation, allowing users to inject shell code during installation...
Denial Of Service (DoS)
gvisor.dev/gvisor is vulnerable to a Denial of Service DoS. The vulnerability is due to improper checks for mounts marked as unmounted before propagating, which could lead to a panic. This allows an attacker running as root and with permission to mount volumes to kill the sandbox...
Denial Of Service (DoS)
github.com/stacklok/minder is vulnerable to Denial Of Service DoS. The vulnerability is due to the engines lack of template size limits, which allows an attacker to execute a Denial of Service DoS attack by submitting maliciously crafted large templates...
Authentication Bypass
pusher/pusher-php-server is vulnerable to Authentication Bypass. The vulnerability is due to insufficient validation of the channel name and socket ID, which allows malicious end-users to forge access to unauthorized private channels...
Cross-site Scripting (XSS)
passbolt/passboltapi is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper sanitization of user input, allowing an attacker to inject malicious scripts into the user's first and last name fields, which execute when the setup link in the invitation email is accessed...