39263 matches found
Session Fixation
silverstripe/framework is vulnerable to Session Fixation. The vulnerability is due to the failure to invalidate pre-existing cookies when the "remember me" function is disabled, allowing users to remain authenticated even after the function is disabled...
Lack Of Salt Update On Password Change
silverstripe/framework is vulnerable to Lack of Salt Update On Password Change. The vulnerability is due to the internal salt not being reset when a password is changed. An attacker can potentially exploit this to reduce the effectiveness of password hashing...
Information Disclosure
silverstripe/framework is vulnerable to Information Disclosure. The vulnerability is due to inconsistent handling of login attempts for non-existent users. This allows attackers to discern valid user accounts and enumerate valid user accounts by observing differences in error messages or behavior...
Command Injection
llamaindex is vulnerable to a Command Injection. The vulnerability is due to unsafe usage of the eval function, allowing a malicious or compromised LLM hosting provider to execute arbitrary commands on the client's machine...
Cross-site Scripting (XSS)
silverstripe/framework is vulnerable to Cross-site Scripting XSS. The vulnerability is caused due to improper handling of key/value pairs in OptionsetField or CheckboxSetField, where default casting is not assigned. This allows an attacker to inject malicious HTML code when either key or value...
Path Traversal
org.openapitools, openapi-generator-online is vulnerable to a Path Traversal. The vulnerability is due to unrestricted access to the outputFolder option, which allows attackers to manipulate file paths and potentially read or delete files and folders outside of the intended directory...
Binding To An Unrestricted IP Address
dbt-core is vulnerable to Binding to an Unrestricted IP Address. The vulnerability is due to the binding of INADDRANY or IN6ADDRANY to any network interface on the local system not just localhost, which exposes the application on all network interfaces. An attacker can gain unauthorized access by...
Buffer Overflow
rockhopper is vulnerable to Buffer Overflow. The vulnerability is due to the manipulation of the argument raw in the function countrows of the file rockhopper/src/raggedarray.c which is a part of the Binary Parser component. The vulnerability allows an attacker to manipulate the argument raw,...
Open Redirect
silverstripe/framework library is vulnerable to Open Redirect. The vulnerability is due to inadequate validation of URLs, which allows attackers to craft malicious URLs that bypass redirection protections...
Unrestricted Upload Of File With Dangerous Type
silverstripe/framework is vulnerable for Unrestricted Upload Of File With Dangerous Type. The vulnerability is due to the lack of proper validation and sanitization of uploaded file types, which allows an attacker to upload executable file formats...
Code Injection
silverstripe/framework is vulnerable to Code Injection. The vulnerability is due to the improper handling of associative arrays in the second argument of renderWith, where unsanitized user input can be passed directly as a value...
Information Disclosure
silverstripe/framework is vulnerable to Information Disclosure. The vulnerability is due to password fields reflecting submitted data, which inadvertently exposes users to potential security risks by displaying sensitive information...
NULL Pointer Dereference
PingCAP TiDB is vulnerable to NULL Pointer Dereference. The vulnerability is due to a NULL pointer dereference in the SortedRowContainer component, which allows an attacker to cause a denial of service...
Incorrect Default Permissions
kaminari is vulnerable to Incorrect Default Permissions. The vulnerability is due to improperly set file permissions that allow unauthorized write access to specific Ruby files managed by the library...
Denial Of Service (DoS)
rack-contrib is vulnerable to a Denial Of Service DoS. The vulnerability is due to the user-controlled profilerruns parameter not being constrained, which allows an attacker to allocate resources on the server side without limitation, resulting in Denial of Service...
Buffer Overflow
PingCAP TiDB is vulnerable to Buffer Overflow. The vulnerability is due to reading a string from a column while the offset field in the column is not initialized, which results in a buffer overflow that could lead to database crashes and denial of service attacks...
Cross-Site Scripting (XSS)
Silverstripe/framework is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper sanitization of the Page name. This allows an attacker to use the payload " to trigger an XSS alert and execute arbitrary scripts in the context of the user's browser...
Improper Access Control
Mattermost is vulnerable to Improper Access Control. The vulnerability is due to a failure to restrict the audience of the "customplaybooksplaybookrunupdated" webhook event, allowing a guest on a channel with a linked playbook run to see all details of the playbook run when it is marked as finish...
Improper Authentication
Silverstripe/framework is vulnerable to Improper Authentication. The vulnerability is caused by improper user permission checks to verify if a user can login via the Member::canLogIn method, allowing an attacker to gain access to unapproved or revoked users by resetting the password...
Denial Of Service (DoS)
github.com/stacklok/minder is vulnerable to a Denial Of Service DoS. The vulnerability is due to the sigstore verifier reading an untrusted response entirely into memory without enforcing a limit on the response body. The vulnerability allows an attacker to crash the Minder server and deny other...
Improper Access Control
Mattermost is vulnerable to Improper Access Control. The vulnerability is due to insufficient enforcement of access controls, allowing members to link playbook runs to private channels they are not members of...
Improper Access Control
Mattermost is vulnerable to Improper Access Control. The vulnerability is due to failing to enforce proper access control, allowing a user to run a slash command in a channel they are not a member of by linking a playbook run to that channel and executing a slash command as a playbook task comman...
Improper Authorization
mattermost is vulnerable to Improper Authorization. The vulnerability is due to a failure to perform proper authorization checks, allowing a member running a playbook in an existing channel to be promoted to a channel admin...
Improper Access Control
Mattermost is vulnerable to Improper Access Control. The vulnerability is due to a failure to verify if the email signup configuration option is enabled when a user requests to switch from SAML to email, allowing users to switch their authentication method and potentially edit personal details...
Cross-site Request Forgery (CSRF)
Mattermost is vulnerable to Cross-site Request Forgery CSRF. The vulnerability is due to a failure to validate post actions properly, allowing an attacker to run a playbook checklist task command as another user by creating and sharing a deceptive post action that unexpectedly runs a slash comman...
Improper Access Control
Mattermost is vulnerable to Improper Access Control. The vulnerability is due to a failure to enforce proper access controls, allowing users to view arbitrary post contents via the /playbook slash command...
Improper Access Control
Mattermost is vulnerable to Improper Access Control. The vulnerability is due to a failure to perform proper access control, allowing a guest to retrieve metadata of a public playbook run linked to a channel they have guest access to via the RHSRuns GraphQL query...
Exposure Of Sensitive Information To An Unauthorized Actor
Mattermost is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor. The vulnerability is due to a lack of proper authorization checks in the /api/v4/groups//channels//link endpoint, allowing users to learn members of an AD/LDAP group linked to a team by adding the group to a...
SQL Injection
mocodo is vulnerable to SQL Injection. The vulnerability is due to improper sanitization of the sqlcase input field in /web/generate.php, allowing remote attackers to execute arbitrary SQL commands and potentially command injection, leading to remote code execution RCE under certain conditions...
Cross Site Scripting(XSS)
vxe-table is vulnerable to Cross Site Scripting XSS. The vulnerability is due to inadequate sanitization of user-supplied input within the inputValue argument of the export function in the vxe-textarea component. It allows malicious actors to execute arbitrary JavaScript code within the context o...
Remote Code Execution (RCE)
mocodo is vulnerable to Remote Code Execution. The vulnerability is due to improper input validation at /web/rewrite.php, which allows an attacker to inject and execute arbitrary code...
SQL Injection
dolibarr/dolibarr is vulnerable to SQL Injection. The vulnerability is due to improper handling of parameters 'sortorder' and 'sortfield' in '/dolibarr/admin/dict.php', allowing remote attackers to retrieve database information by sending specially crafted SQL queries...
Information Disclosure
github.com/huandu/facebook is vulnerable to an Information Disclosure vulnerability. The vulnerability is due to the accesstoken being exposed in error messages upon failing HTTP requests, which could allow an attacker with log access to obtain sensitive access tokens by exploiting error messages...
SQL Injection
dolibarr/dolibarr is vulnerable to SQL Injection. The vulnerability is caused by improper parameter sanitization within /dolibarr/commande/list.php, which enables a remote attacker to send a specially crafted SQL query resulting in database exfiltration...
URL Injection
silverstripe/framework is vulnerable to a URL Injection vulnerability. The vulnerability is due to improper encoding of entities in the URL string, specifically in requests coming from Internet Explorer, which allows malicious JavaScript code to be directly inserted into the output content by...
Missing Authentication
jupyter-scheduler is vulnerable to Missing Authentication. The vulnerability is due to a missing authentication check on the /scheduler/runtimeenvironments API endpoint, allowing unauthenticated users to obtain the list of Conda environment names on the server...
Denial Of Service (DoS)
silverstripe/framework is vulnerable to Denial Of Service DoS. The vulnerability is due to missing XML size checks, which allows an attacker to significantly degrade the performance of the site through a Quadratic Blowup Attack...
Cross Site Scripting (XSS)
silverstripe/framework is vulnerable to Cross Site Scripting XSS. The vulnerability is due to inadequate sanitisation of the rewriteHashlinks option in SSViewer, allowing an attacker to inject HTML through the querystring...
Cross-Site Request Forgery (CSRF)
Silverstripe/forum is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to form actions being directly accessible, allowing an attacker to use GET requests to create members and post to forums, and tricking moderators into clicking crafted URLs to move topics...
Code Injection
pug is vulnerable to Code execution. The vulnerability is due to the lack of proper input validation for the name option in the compileClient, compileFileClient, or compileClientWithDependenciesTracked functions, which allows attackers to execute arbitrary JavaScript code in the context of the...
Cross-Site Scripting
phpservermon/phpservermon is vulnerable to Cross-Site Scripting. The vulnerability is due to the lack of proper validation of input parameters in index.php, which allows an attacker to create a specially crafted URL and send it to a victim, to retrieve their session details...
Infinite Loop
org.soot-oss: soot is vulnerable to Infinite Loop. The vulnerability is due to the retrieveActiveBody function, which allows an attacker to maliciously craft a method to cause excessive resource consumption that can leads to Denial of Service...
Cross-site Scripting (XSS)
silverstripe/framework is vulnerable to Cross-site Scripting XSS. The vulnerability is due to an unvalidated returnURL parameter in the dev/build endpoint, which can cause users to be redirected to unverified third-party URLs...
Authentication Bypass
SilverStripe is vulnerable to Authentication Bypass. The vulnerability is caused by providing an empty token parameter with secure token parameters like isDev or flush, allowing bypass of normal authentication mechanisms...
Improper URL Sanitization
silverstripe/framework is vulnerable to Improper URL Sanitization. The vulnerability is due to a lack of server-side URL sanitization in the "Add from URL" function, allowing potentially dangerous URLs to be processed...
Cross Site Scripting (XSS)
silverstripe/framework is vulnerable to Cross Site Scripting XSS. The vulnerability is due to unescaped HTML posted by a CMS user into any GridField object field, which results in XSS when a user utilizes the print feature...
Open Redirect
silverstripe/framework is vulnerable to Open Redirect. The vulnerability is due to using the X-Forwarded-Host HTTP header in place of the actual HTTP hostname, potentially allowing attackers to alter URL resolution resulting in arbitrary redirections...
Cross Site Scripting (XSS)
silverstripe/framework is vulnerable to Cross Site Scripting. The vulnerability is due to improper HTML sanitisation in the Director::forceredirect method, leading to potential XSS risks during HTTP redirection...