Cross-Site Request Forgery (CSRF)

firebase-tools is vulnerable to a Cross-Site Request Forgery CSRF. This vulnerability is due to the export endpoint in the Firebase emulator suite. If a user runs the emulator while visiting a malicious website, the browser can call out to localhost, which could result in the exfiltration of...

Authorization Bypass

Wagtail is vulnerable to Authorization Bypass. The vulnerability is due to inadequate checks in the ModelViewSet and wagtail.contrib.settings modules, allowing users with general edit permissions to update fields they are otherwise restricted from accessing via crafted HTTP POST requests...

Signature Verification Bypass

xml-crypto is vulnerable to Signature Verification Bypass. The vulnerability is due to inadequate authorization checks for signed certificates, which allows an attacker to manipulate XML documents with falsified signatures or certificates which can bypass the library's default validation mechanis...

Denial Of Service (DOS)

ibm.mq is vulnerable to a Denial of service. The vulnerability is due to insufficient handling of HTTP requests, which allows an attacker to craft requests that cause excessive resource consumption. This can potentially leads to Denial of service...

Out-of-Bounds Read

github.com/onosproject/onos-lib-go is vulnerable to Out-of-Bounds Read. The vulnerability is due to improper bounds checking within the parseAlignBits function, which could allow an attacker to trigger an index out-of-range condition resulting in Denial of Service...

Incorrect Access Control

github.com/spidernet-io/spiderpool is vulnerable to Incorrect access control. The vulnerability is due to improper clusterRole configurations, which allows a local attackers to execute arbitrary code by using crafted commands to access token components, potentially compromising the entire...

Denial Of Service (DoS)

github.com/onosproject/rimedo-ts is vulnerable to Denial Of Service DoS. The vulnerability is due to inadequate bounds checking within reader.go, when accessing elements out of the slice bounds...

Denial Of Service (DoS)

github.com/onosproject/onos-kpimon is vulnerable to Denial of Service DoS. The vulnerability is due to the blocking of the errCh channel within the Start function of the monitoring package, leading to resource exhaustion as the associated indication processing goroutine can't process further...

Denial Of Service (DoS)

github.com/onosproject/rimedo-ts is vulnerable to Denial Of Service DoS. The vulnerability is due to an out-of-range panic within reader.go, when accessing elements out of the slice bounds, which could result in Denial of Service...

Reflected Cross-Site Scripting (Reflected XSS)

nautobot is vulnerable to Reflected Cross-Site Scripting Reflected XSS. The vulnerability is due to improper handling and escaping of user-provided query parameters, allowing a maliciously crafted Nautobot URL to potentially execute malicious scripts against users...

Arbitrary Code Execution

org.xmlunit: xmlunit-core is vulnerable to Arbitrary Code Execution. The vulnerability is due to enabling XSLT extension transformation functions by default within TransformerFactoryConfigurer.java, which could allows attackers to execute arbitrary code during XSLT transformations if an applicati...

Cross Site Scripting (XSS)

yapi-vendor is vulnerable to Cross Site Scripting XSS. The vulnerability is due to insufficient input validation in its Advanced Expectation - Response module, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the body field...

Denial Of Service (DoS)

github.com/onosproject/onos-ric-sdk-go is vulnerable to Denial of Service DoS.The vulnerability is due to indefinite repetition of error processing within the Subscribe function when handling the subscribed indication stream. This issue may lead to resource exhaustion...

Out-of-bounds Read

github.com/onosproject/onos-kpimon is vulnerable to Out-of-bounds Read. The vulnerability is due to improper handling of array indices in the processIndicationFormat1 function. This allows an attacker to cause a crash or potentially execute arbitrary code by exploiting the out-of-bounds array...

Symlink Attack

Salt is vulnerable to Symlink attacks. The vulnerability is due to insecure creation of temporary files in seed.py ,salt-ssh, or salt-cloud, which allows a local attacker to exploit this by creating symbolic links to overwrite arbitrary files with elevated privileges...

HTTP Parameter Tampering

github.com/navidrome/navidrome is vulnerable to HTTP Parameter Tampering. The vulnerability is due to improper parameter validation within HTTP requests. An attacker can impersonate other users and perform unauthorized actions such as creating playlists, adding songs, posting comments, and changi...

Cross Site Scripting (XSS)

phlex is vulnerable to Cross Site Scripting XSS. The vulnerability is due to insufficient sanitization of user-provided data in HTML attributes. If an application renders an tag within a href attribute thats set to a user provided link, arbitrary JavaScript execution may occur due to overly...

Out-of-bounds Write

github.com/onosproject/onos-lib-go is vulnerable to Out-of-bounds Write. The vulnerability is due to an incorrect boundary check within the putBitString method, which could lead to a Denial of Service DoS attack...

Cross-site Scripting(XSS)

lavalite/cms is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper input validation, allowing attackers to execute arbitrary code and obtain sensitive information via a crafted payload in the URL...

Authorization Bypass

roundup is vulnerable to Authorization Bypass. The vulnerability is due to improper property permissions checks, allowing unauthorized manipulation or access to restricted properties through certain methods...

Sensitive Information Exposure

RhodeCode and Kallithea is vulnerable to Sensitive Information Exposure. The vulnerability is due to a lack of admin authentication which allows remote users to obtain API keys and other sensitive information via the getrepo API method...

Cross Site Scripting(XSS)

roundup is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper escape mechanisms within templating.py, which allows an attacker to preform cross site scripting...

Directory Traversal

cherryPy is vulnerable to Directory Traversal. The vulnerability is due to improper input validation in the getfilepath function, allowing remote attackers to manipulate session IDs in cookies to create, delete, or possibly read and write arbitrary files...

Insertion Of Sensitive Information Into Log File

freeipa is vulnerable to Insertion Of Sensitive Information Into Log File. The vulnerability is due to a flaw in FreeIPA's batch processing API resulting in improper masking of sensitive information in logs, such as clear text user passwords...

Improper Certificate Validation

Salt is vulnerable to improper SSL certificate validation. The vulnerability is due to the absence of proper default verification for SSL certificates when authenticating to services using certain modules. This flaw allows attackers to perform man-in-the-middle attacks...

Authentication Bypass By Capture-replay

LinOTP is vulnerable to Authentication Bypass By Capture-replay. The vulnerability is due to the activation of automatic resynchronization, allowing an attacker to successfully log in with OTP values recorded at a previous point in time...

Sensitive Information Disclosure

Home Assistant is vulnerable to Sensitive Information Disclosure. The vulnerability is due to an unauthenticated attacker being able to read the application's error log via components/api.py...

Buffer Overflow

tftpy is vulnerable to a Buffer Overflow. The vulnerability is due to inadequate input validation in the parse function within the TftpPacketFactory class, allowing a remote attacker to cause a denial of service...

Privilege Escalation

couchbase is vulnerable to Privilege Escalation. The vulnerability is due to improper verification of admin credentials when Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, which could result in privilege escalation for unauthenticated users...

Improper Access Control

Postorius is vulnerable to Improper Access Control. The vulnerability is due to insufficient validation which allows any logged-in user to send a crafted POST request to unsubscribe any user from a mailing list as well as verify if the address was subscribed in the first place...

Credential Exposure

cloudtoken is vulnerable to Credential Exposure. The vulnerability is due to improper authentication when accessing the cloudtoken daemon via a HTTP endpoint on the same subnet, which allows an attackers to gain temporary AWS credentials for user roles...

HTML Injection

contao is vulnerable to HTML injection. The vulnerability is due to improper fieldname form sanitization, which allows an attacker to insert tags in form fields which are then rendered on the page...

Improper Certificate Validation

scalyr-agent-2 is vulnerable to Improper Certificate Validation. The vulnerability is due to calling the openssl binary without the -verifyhostname option in some circumstances, which can result in Man-in-the-Middle attacks...

Buffer Overflow

pypxe is vulnerable to Buffer Overflow. The vulnerability is due to insufficient input validation in the handle function within the tftp module, which allows a remote attacker to cause a Denial of Service...

Deserialization Of Untrusted Data

ops-cli is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to improper handling of user-supplied data in the checkoutrepo function, which allows an attacker to execute arbitrary code on the victim's machine...

Denial Of Service (DoS)

nfstream is vulnerable to Denial of Service DoS. The vulnerability is due to unfreed allocated modules when the nfstream object is destroyed without being used, potentially causing a local Denial of Service DoS...

Denial Of Service (DoS)

github.com/osrg/gobgp/ is vulnerable to Denial Of Service DoS. The vulnerability is due to improper memory management which results in an application crash due to the handlingError function in pkg/server/fsm.go...

Arbitrary Code Execution

snapcraft is vulnerable to Arbitrary Code Execution. The vulnerability is due to including the current directory in LDLIBRARYPATH under certain conditions, allowing a malicious snap to execute code within the context of another snap if both have access to the home interface or similar...

Improper Certificate Validation

osxcollector is vulnerable to Improper Certificate Validation. The vulnerability is due to incomplete inspection of Universal/fat binaries, which allows malicious code to appear as if it is signed by Apple, leading to the execution of unsigned code...

Cross-site Scripting (XSS)

ajenti is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper filename sanitization within the File Manager, which allows an attacker to inject malicious JavaScript...

Email Enumeration Attack

org.keycloak, keycloak-parent is vulnerable to Email Enumeration Attack. The vulnerability allows a logged-in user to enumerate valid account emails...

Privilege Escalation

github.com/projectcalico/calico/ is vulnerable to Privilege Escalation. The vulnerability is due to an incorrect SUID bit configuration in the Calico CNI install binary, combined with the ability to control the input binary, allows an attacker to execute an arbitrary binary with elevated privileg...

Cross-site Scripting (XSS)

knowledge-repo is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper user input validation in the post comments functionality. This allows an attacker to inject arbitrary web scripts or HTML content into the application, potentially leading to cross-site scripting XSS...

Denial Of Service (DoS)

github.com/mattermost/mattermost-server is vulnerable to Denial Of Service. The vulnerability is due to a lack of session limit enforcement, enabling an authenticated attacker to crash the server by flooding the sessions table through repeated requests to the getSessions API...

Sensitive Information Disclosure

github.com/mattermost/mattermost-server is vulnerable to Sensitive Information Disclosure. The vulnerability is due to a failure to remove detailed error messages in API requests, even when developer mode is off, allowing attackers to obtain sensitive server information such as file paths...

Denial Of Service (DoS)

github.com/mattermost/mattermost-server is vulnerable to Denial Of Service. The vulnerability is due to insufficient limitation of the size of request paths that contain user inputs, allowing attackers to send large request paths, causing excessive resource usage...

Denial Of Service (DoS)

python-jose is vulnerable to Denial of Service DoS. The vulnerability is due to missing token size limits during the decoding process of a JSON Web Encryption JWE token. An attacker can submit a token with a high compression ratio, depleting system resources which can result in Denial of Service...

Information Disclosure Through Timing Attack

mdanter/ecc is vulnerable to Sensitive Information Disclosure. The vulnerability is due to computing point addition in a non constant time, which allows an attacker to deduce the private key by comparing the time it takes to compute each point addition...

Open Redirect

github.com/portainer/portainer is vulnerable to Open Redirect. The vulnerability is due to improper validation of user-supplied URLs which allow redirects to arbitrary web pages not limited to index.yaml...

Server Side Template Injection

changedetection.io is vulnerable to Remote Command Execution. The vulnerability is due to improper sanitization of user summited input, which allows an attacker to execute arbitrary code on the host...