Command Injection

github.com/1panel-dev/1panel is vulnerable to Command injection. The vulnerability arises from insufficient input sanitization, that allowing attackers to write arbitrary files by exploiting the log retrieval API. This can lead to unauthorized command execution or arbitrary file write...

Information Disclosure

github.com/projectcalico/calico is vulnerable to Information Disclosure. The vulnerability is due to a compromised pod with sufficient privilege being able to reconfigure the node’s IPv6 interface, as the node accepts route advertisement by default, allowing the attacker to redirect full or parti...

HTTP Request Smuggling

Next is vulnerable to HTTP Request Smuggling. The vulnerability is due to inconsistent interpretation of a HTTP request, resulting in treating it as both a single request and two separate requests, leading to desynchronized responses. This allows attackers to craft HTTP request to manipulate or...

Server-Side Request Forgery

next is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper handling of the Host header within Server Actions. This allows an attacker to make unauthorized requests that appear to originate from the Next.js application server, allowing access to internal network...

Cross-site Scripting (XSS)

Buildbot is vulnerable to a cross-site scripting XSS. The vulnerability is due to improper santization within the waterfall web status view status/web/waterfall.py, enabling remote attackers to inject arbitrary web script or HTML...

Cross-site Scripting (XSS)

Buildbot is vulnerable to Cross-Site Scripting XSS vulnerabilities. The vulnerability is due to improper sanitization, allowing remote attackers to inject arbitrary web script or HTML...

Remote Code Execution (RCE)

zodb3 is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling of certain Zope Enterprise Objects ZEO database sharing, allowing remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol...

Authentication Bypass

Zope Object Database ZODB Authentication Bypass. The vulnerability is due to certain configurations of Zope Enterprise Objects ZEO database sharing, which can be exploited by remote attackers via vectors involving the ZEO network protocol...

Directory Traversal

cherryPy is vulnerable to Directory Traversal. The vulnerability is due to insufficient input validation by utilizing .. sequences within the staticfilter component, which allows remote attackers to read arbitrary files...

XML External Entity (XXE) Injection

@cyclonedx/cyclonedx-library is vulnerable to XML External Entity XXE Injection. The vulnerability is due to improper XML parsing configuration within xmlValidator.node.ts, allowing an attacker to potentially access sensitive files or execute malicious code through crafted XML entities...

Arbitrary Code Execution

ipython is vulnerable to Arbitrary Code Execution. The vulnerability is due to improper origin validation of websocket requests, allowing remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page...

Denial Of Service (DoS)

github.com/vitessio/vitess is vulnerable to Denial Of Service DoS. The vulnerability is caused by an endless loop triggered by a specific query in the vtgate component. This loop leads to continuous memory consumption, eventually resulting in Denial of Service DoS...

Denial Of Service (DoS)

github.com/golang/go is vulnerable to Denial Of Service DoS. The vulnerability is due to improper corruption checks which causes the lookup function to get stuck in an infinite loop, which allows an attacker to cause Denial of Service DoS by submitting a malformed DNS message...

Arbitrary Code Execution

github.com/golang/go is vulnerable to Arbitrary Code Execution. The vulnerability is caused by building a GO module which contains Cgo code due to usage of the -ltolibrary flag in a cgo LDFLAGS directive. Note that this vulnerability is only exploitable on Darwin systems...

Deserialization Of Untrusted Data

org.apache.inlong: manager-pojo is vulnerable to Deserialization of Untrusted Data. The vulnerability is caused by improper query parameters sanitization within the filterSensitive method, which allows an attackers to bypass JDBC security checks...

Use After Free

libvirt is vulnerable to Use After Free. The vulnerability is due to a race condition in the virNetClientIOEventLoop method, where the data pointer to a stack-allocated structure is used after the stack frame is freed. If libvirt is configured with fine-grained access control, an attacker could...

Use After Free

Chrome is vulnerable to a use-after-free vulnerability. The vulnerability is due to improper handling of memory after it has been freed, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Use After Free

Chrome is vulnerable to a use-after-free vulnerability. The vulnerability is due to improper handling of memory after it has been freed, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Credential Exposure

gradio is vulnerable to Credential Exposure. The vulnerability is caused by a lack of strict pattern validation in determining network or file paths in the startswithprotocol function, which can lead to the exposure of sensitive information through incorrect interpretation of network or file path...

Unauthorized Access

org.neo4j:neo4j-cypher is vulnerable to Unauthorized Access. The vulnerability is due to the improper handling of IMMUTABLE privileges within the Cypher component, potentially leading to unauthorized access or manipulation of sensitive data by an admin authenticated attacker...

Cross-site Scripting (XSS)

Jinja2 is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper handling of keys with non-attribute characters within the xmlattr filter. This leads to potential XSS attacks when an application accepts user input for keys and rendering it on a webpage...

Information Disclosure

lief is vulnerable to Information Disclosure. The vulnerability is due to improper handling of the name parameter in the machdreader.c component, allowing a local attacker to obtain sensitive information...

Sensitive Information Disclosure

Kimai is Sensitive Information Disclosure. The vulnerability is caused by manipulating of the PHPSESSIONID argument in the Session Handler component, which results in the sensitive information...

Remote Code Execution (RCE)

github.com/tiagorlampert/chaos is vulnerable to Remote Code Execution. The vulnerability is due to unsafe concatenation of the filename argument into the buildStr without any sanitization or filtering, which allows a remote attacker to execute arbitrary code...

Cross-site Scripting (XSS)

MS Basic vulnerable to a cross-site scripting XSS vulnerability. The vulnerability is due to insufficient input sanitization in the search function, allowing attackers to inject malicious scripts into the search input, potentially leading to the execution of arbitrary code in the context of other...

Sensitive Information Disclosure

org.eclipse.edc: data-plane-http-oauth2-core is vulnerable to Sensitive Information Disclosure. The vulnerability arises from a misconfiguration in the OAuth2-protected data sink feature, where the consumer-provided clientSecretKey is resolved in the context of the provider's vault instead of the...

Improper Authorization

org.jenkins-ci.plugins: git-server is vulnerable to Improper Authorization. The vulnerability is due to improper permission checks for read access to a Git repository over SSH. This allows attackers with a previously configured SSH public key but lacking Overall/Read permission to access Git...

Cross-Site Scripting (XSS)

trix is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization of pasted content, which allows attackers to embed malicious scripts, resulting in Cross-Site Scripting XSS within the application's context...

Arbitrary Code Execution

org.jenkins-ci.plugins:script-security is vulnerable to Arbitrary Code Execution. The vulnerability is due to crafted constructor bodies that invoke other constructors which can then be used to construct any subclassable type via implicit casts, which bypasses the sandbox protection, resulting in...

Improper Access Control

org.jenkins-ci.plugins: script-security is vulnerable to Improper Access Control. The vulnerability is due to improper permission checks during read access to a Git repository over SSH. This allows attackers with a previously configured SSH public key but lacking Overall/Read permission to access...

Incorrect Authorization

apachesuperset is vulnerable to Incorrect Authorization. The vulnerability is due to improper validation on user permissions when accessing datasource metadata through REST API's. This allows attackers to access sensitive information without the necessary authorization...

Use After Free

protobuf is vulnerable to a Use After Free. The vulnerability is due to improper handling of chunked JSON input, which causes the parser to attempt to read bytes from a chunk that has already been freed...

Improper Access Control

gradio is vulnerable to Improper Access Control . The vulnerability is due to improper validation of the isserverfn attribute for functions. This allows attackers to execute functions that should be restricted, potentially leading to unauthorized actions or access to sensitive data...

Cross-Site Scripting (XSS)

yab/quarx is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient input validation and sanitization in several components including Blog Title, FAQ Question, Pages Title, Widgets Name, and Menus Name...

Cross-Site Scripting

libSOGo.so is vulnerable to Cross-Site Scripting. The vulnerability is due to inadequate sanitization during attachment preview. This allows an attacker to execute arbitrary JavaScript code within the context of the user's browser session...

Arbitrary JavaScript Execution

react-pdf is vulnerable to Arbitrary JavaScript Execution. This vulnerability is due to isEvalSupported set to true by default, allowing for the execution of arbitrary JavaScript code embedded within the PDF...

Denial Of Service (DoS)

github.com/stacklok/minder is vulnerable to Denial Of Service DoS. The vulnerability is due to improper validation of HTTP requests before processing them in server.go, allowing untrusted requests to crash the Minder control plane, denying service to other users...

Remote Code Execution (RCE)

pdfjs-dist is vulnerable to Remote Code Execution RCE. The vulnerability is due to the default setting isEvalSupported set to true, which allows unrestricted execution of attacker-controlled JavaScript within the hosting domain context...

Heap-Based Buffer Overflow

radare2 is vulnerable to heap-based buffer overflow. The vulnerability is due to insufficient input validation, allowing attackers to overwrite data in the heap memory...

Resource Exhaustion

go-ethereum geth is vulnerable to a Resource Exhaustion. The vulnerability is due to a lack of proper handling of specially crafted p2p messages sent from an attacker node, causing vulnerable nodes to consume excessive amounts of memory...

Cross-site Scripting (XSS)

tribalsystems/zenario is vulnerable to Cross-site Scripting XSS via the Tree Explorer tool. An attacker can inject malicious scripts that can be executed in the context of the user's browser by crafting malicious input...

Local File Inclusion (LFI)

Litestar and Starlite are vulnerable to a Local File Inclusion LFI. The vulnerability is due to path traversal flaws within staticfiles/base.py, allowing attackers to access sensitive files outside designated directories, potentially leading to information disclosure or server compromise...

Denial Of Service (DoS)

ryu is vulnerable to Denial Of Service DoS. The vulnerability is due to inadequate input validation when the OFPQueueProp length is 0 within the OFPPacketQueue function in parser.py, which allows an attacker to trigger an infinite loop by setting the length parameter to 0...

Denial Of Service (DoS)

ryu is vulnerable to Denial Of Service DoS. The vulnerability is due to inadequate input validation within the OFPFlowStats function in parser.py, which allows an attackers to trigger an infinite loop by setting the length of the inst parameter to 0...

Denial Of Service (DoS)

ryu is vulnerable to Denial Of Service DoS. The vulnerability is due to inadequate input validation within the OFPMultipartReply function in parser.py, allowing an attacker to trigger an infinite loop by setting the length parameter to 0...

Denial Of Service (DoS)

ryu is vulnerable to Denial of service. The vulnerability is due to inadequate input validation when the length=0 within the OFPHello function in parser.py, which results in an infinite loop...

Denial Of Service (DoS)

ryu is vulnerable to Denial of Service DoS. The vulnerability is due to the OFPBucket function in parser.py when processing an OpenFlow action with a length of zero, which results an infinite loop...

Sensitive Information Disclosure

nebari is vulnerable to Privilege Escalation. This vulnerability due to printing the temporary Keycloak root password to console during project initialization, which results in sensitive information disclosure...

Arbitrary Code Execution

Zenario is vulnerable to Arbitrary Code Execution. The vulnerability is due to insecure usage of Twig filters in the Twig Snippet plugin and in the site-wide HEAD and BODY elements, allowing designers or administrators to execute arbitrary code...

Remote Code Execution (RCE)

werkzeug is vulnerable to Remote Code Execution. The vulnerability is due to the debugger accepting requests from non localhost locations, which allows an attacker to execute arbitrary code under specific situations. The prerequisites to this attack are the attacker must convince a developer into...