Out-of-Bounds-Read

gtkwave is vulnerable to Out-of-bounds Write. The vulnerability is due to inadequate bounds checking within its VCD var definition section functionality via the GUI's legacy VCD parsing code. It allows a Crafting a specially designed .vcd file can result in arbitrary code execution...

Denial Of Service (DoS)

Traefik is vulnerable to a Denial Of Service DoS. The vulnerability is due improper input validation when managing requests with a Content-length and no body. An attacker can send a GET request to any Traefik endpoint with the Content-length request header which results in an indefinite hang due ...

Server-Side Request Forgery (SSRF)

mautic/core is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to a flaw in the Asset section, an authenticated user could read system files and access the internal addresses of the application...

Deserialization Of Untrusted Data

timber/timber is vulnerable to Deserialization of Untrusted Data. The vulnerability due to a lack of input validation before passing it into the fileexists function. An attacker can execute arbitrary code by uploading files of any type to the server which then gets passed in the phar:// protocol ...

Sensitive Information Disclosure

OpenTelemetry.Instrumentation.AspNetCore and OpenTelemetry.Instrumentation.Http are vulnerable to Sensitive Information Disclosure. The vulnerability is due to the url.full attribute/tag on spans Activity writing the raw query string to logs, which can potentially expose sensitive data such as En...

Sensitive Information Disclosure

Azure.Identity is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper validation of user-supplied input, allowing an attacker to access sensitive information...

Sensitive Information Disclosure

mautic/core is vulnerable to Sensitive Information Disclosure. The vulnerability is due to inadequate user permission settings. An attacker can access areas of the application that they should be prevented from accessing by exploiting these settings. This could potentially lead to the access of...

Denial Of Service (DoS)

eventlet and dnspython are vulnerable to Denial Of Service DoS. The vulnerability is due to a lack of enforcing the preferred behavior of waiting for a valid packet during DNS name resolution, allowing remote attackers to interfere with the resolution process by quickly sending an invalid packet...

Denial Of Service (DoS)

idna is vulnerable to Denial Of Service. The vulnerability is due to a specially crafted argument to the idna.encode function, which could consume significant resources...

Remote Code Execution (RCE)

magnum is vulnerable to Remote Code Execution RCE. The vulnerability is due to a race condition bug within certmanager.py, which allows a remote attacker to execute arbitrary code...

Local File Inclusion (LFI)

nicegui is vulnerable to Local File Inclusion. The vulnerability is due to improper handling of resource file requests under the /nicegui/version/resources/key/path:path route, allowing attackers with access to the NiceUI leaflet website to read any file on the backend filesystem accessible to th...

Insufficient Verification Of Data Authenticity

org.wildfly.security:wildfly-elytron-http-oidc is vulnerable to Insufficient Verification of Data Authenticity. The vulnerability is due to the session token caching logic when an OIDC app serving multiple tenants accesses a new tenant with a different OIDC configuration. This flaw occurs in...

Cross-Site Scripting (XSS)

mautic/core is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient sanitization of user inputs in the description fields. This can potentially lead an attacker getting elevated access to the system...

Code Injection

org.apache.zeppelin,zeppelin is vulnerable to Code Injection. The vulnerability is due to the use of the Shell interpreter as a code generation gateway, allowing attackers to execute generated code...

Denial Of Service (DOS)

github.com/sigstore/cosign is vulnerable to a Denial of Service DoS. The vulnerability is due to allocating excessive memory when creating slices based on the number of signatures, manifests, or attestations in untrusted artifacts. This flaw allows an attacker to trigger a Denial of Service via...

Denial Of Service (DoS)

github.com/sigstore/cosign is vulnerable to a Denial of Service DoS. The vulnerability is due to reading the attachment from a remote image entirely into memory without checking the size of the attachment first. This flaw allows an attacker to trigger a Denial of Service via a large crafted...

Path Traversal

mautic/core is vulnerable to Path Traversal. The vulnerability is due to inadequate input validation in the GrapesJS builder implementation within FileManagerController.php, allowing logged-in users to delete critical files outside media folders...

Cross Site Scripting (XSS)

Summernote is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper sanitization of the codeview parameter, which can result in the the execution of arbitrary JavaScript code via a crafted payload...

Improper Handling Of Exceptional Conditions

github.com/authzed/spicedb is vulnerable Improper Handling Of Exceptional Conditions. The vulnerability causes incorrect results when using a specific schema involving the same subject type multiple times in a relation. This issue leads to incorrect access control decisions when relying on...

Incorrect Access Control

Apache Kafka is vulnerable to Incorrect Access Control. The vulnerability is due to an error in ACL management during ZK to KRaft mode migration, specifically when an ACL is removed while two or more other ACLs remain associated with the same resource. This condition results in Kafka treating the...

State Manipulation Attack

github.com/evmos/evmos is vulnerable to state manipulation attacks. The vulnerability is due to an inconsistency between the originStorage and dirtyStorage states during transaction execution, which allows for the potential minting of arbitrary tokens...

Improper Privilege Management

winter/wn-dusk-plugin is vulnerable to Improper Privilege Management. The vulnerability is due to the exposure of a route URL/dusk/login/USER ID/MANAGER that allows unauthenticated access to user accounts in Winter CMS instances with the Dusk plugin installed and configured improperly...

Sensitive Data Exposure

Phin is vulnerable to Sensitive Data Exposure. The vulnerability is due to improper handling of requests, which allows an attacker to expose sensitive information in specific headers during the redirection process if followredirects is enabled...

Information Disclosure

reportico-web/reportico is vulnerable to Information Disclosure. The vulnerability is due to improper handling of user input within the executemode parameter of the URL, which allows attackers obtain sensitive information...

SQL Injection

mautic/core is vulnerable to SQL Injection. The vulnerability is due to improper sanitization of user-supplied input within the Reports bundle. An attacker can retrieve and alter sensitive data, including login credentials, and depending on database permissions, manipulate file systems by injecti...

Cross-site Scripting (XSS)

github.com/tiagorlampert/chaos is vulnerable to Cross-site Scripting XSS. The vulnerability is due to the sendCommandHandler function accepting unsanitized input via the output parameter and passing it along to the DOM, which results in a payload being executed by a user sending a request to the...

Code Injection

tiagorlampert CHAOS is vulnerable to a Code Injection. The vulnerability is due to the BuildClient function within clientservice.go, which allows a remote attacker to execute arbitrary code...

Insufficient Session Expiration

@digitalbazaar/zcap is vulnerable to Insufficient Session Expiration. This vulnerability is due to improper validation of the expires property when invoking a capability with a chain depth of 2, allowing invocations outside the intended period...

Remote Code Execution (RCE)

org.xwiki.commons:xwiki-commons-velocity is vulnerable Remote Code Execution RCE. The vulnerability is due to improper HTML escape functionality, where the escaping tool used in XWiki fails to properly escape the character. This allows an attacker to inject malicious XWiki syntax, potentially...

Information Leakage

matrix-appservice-irc is vulnerable to Information Leakage. The vulnerability is due to insufficient access checks when constructing a reply in MatrixHandler.ts, allowing malicious users to reply to events they shouldn't have access to...

Use After Free

GRUB2 is vulnerable to Use After Free. The vulnerability is caused due to GRUB2 not calling the module fini functions on exit, resulting in hooks remaining in the UEFI system table after exit. This leads to a use-after-free condition and could lead to a secure boot bypass...

Remote Code Execution (RCE)

mysql2 is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper validation of supportBigNumbers and bigNumberStrings values within the readCodeFor function, which allows an attacker to execute arbitrary code...

Cross Site Scripting (XSS)

mautic/core is vulnerable to Cross Site Scripting XSS. The vulnerability is due to to insufficient input validation within the notification feature when saving Dashboards, allowing users to inject and execute JavaScript code...

Out-Of-Bounds

chromium is vulnerable to out-of-bounds. The vulnerability is due to out-of-bounds memory access in the Compositing the GPU process feature, allowing a remote attacker can potentially perform a sandbox escape via specific UI gestures...

Use-After-Free

chromium is vulnerable to Use-after-free. The vulnerability is due to improper handling of memory within the web GPU API implementation, the web GPU API implementation, allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Heap Buffer Overflow

chromium vulnerable to Heap Buffer Overflow. The vulnerability is due to improper handling of data by the a graphics engine used for rendering in Chrome in ANGLE Almost Native Graphics Layer Engine, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Improper Input Validation

Apache Zeppelin is vulnerable to Improper Input Validation. The vulnerability is due to the cron API with invalid or improper privileges, allowing the notebook to run with elevated privileges. This vulnerability can be exploited by attackers to escalate their privileges and potentially gain...

Cross-site Scripting (XSS)

Apache Zeppelin is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper encoding or escaping of output in the helium module. An attacker can modify helium.json and perform attacks on normal users by injecting malicious scripts...

Improper Input Validation

Apache Zeppelin is vulnerable to Improper Input Validation. The vulnerability is due to improper sanitization of LDAP search property configuration, which allows an attacker to execute malicious queries...

Code Injection

org.apache.zeppelin/zeppelin is vulnerable to Code Injection. The vulnerability is due to improper handling of configuration overrides such as ZEPPELININTPCLASSPATHOVERRIDES, allowing attackers to execute shell scripts or inject malicious code though environment variables...

Command Injection

github.com/go-skynet/localai is vulnerable to command injection. The vulnerability is due to the lack of sanitization of user-supplied filenames before passing them to ffmpeg via a shell command in the audioToWav function, allowing attackers to execute arbitrary commands on the host system...

Prototype Pollution

mysql2 is vulnerable to Prototype Pollution. The vulnerability is due to insecure object creation and improper user input sanitization which is passed through the parserFn method in both textparser.js and binaryparser.js...

Cache Poisoning

mysql2 is vulnerable to cache poisoning. The vulnerability is due to insufficient validation of user-supplied input within the keyFromFields function, allowing an attacker to inject a colon : character within a value of the attacker-crafted key, which results in cache poisoning...

Session Fixation

@festify/secure-session is vulnerable to a Session Fixation. This vulnerability is due to the session removal process where even after marking the session for deletion, an attacker could continue using it...

Code Injection

Apache Zeppelin is vulnerable to a Code Injection. The vulnerability is due to improper verification of the JDBC driver configuration which allows an attacker to inject malicious code when connecting MySQL database...

Sensitive Data Exposure

github.com/kopia/kopiais vulnerable to Sensitive Data Exposure. This vulnerability is due to the "repository status" CLI command with JSON output containing sensitive storage connection credentials which are inadvertently exposed to the console...

OS Command Injection

yt-dlp is vulnerable to OS Command Injection. This vulnerability is due to insufficient escaping of special characters, specifically in the expansion of output templates within the --exec option...

Server Side Request Forgery

org.wildfly.security:wildfly-elytron-realm-token is vulnerable to Server Side Request Forgery. The vulnerability is due to JwtValidator.resolvePublicKey not performing any whitelisting or filtering on the destination URL address during the process of checking jku and sending an HTTP request...

Local File Inclusion (LFI)

gradio is vulnerable to a Local File Inclusion. This vulnerability is due to improper validation of user-supplied input in the UploadButton component, specifically in the handling of file paths during file uploads to the /queue/join endpoint, which allows attackers to read arbitrary files on the...

Arbitrary Code Execution

transformers is vulnerable to Arbitrary Code Execution. This vulnerability is due to the deserialization of untrusted data within the loadrepocheckpoint function in the TFPreTrainedModel class, where attackers can exploit the use of pickle.load on data from potentially untrusted sources to execut...