Use After Free

Google Chrome is vulnerable to Use after free. The vulnerability is due to incorrect handling of memory allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Open Redirect

umbraco.cms is vulnerable to Open Redirect. The vulnerability is due to improper validation of redirect targets, which results in authenticated users being redirected to malicious websites after logging into the backoffice...

HTML Injection

passbolt/passboltapi is vulnerable to HTML injection. The vulnerability is due to improper input sanitization, allowing an attacker to inject HTML code in emails...

Cross Site Scripting (XSS)

wwbn/avideo is vulnerable to Cross Site Scripting XSS. The vulnerability is due to insufficient input validation, allowing attackers to inject malicious scripts into web pages viewed by other users...

UI Spoofing

Goggle chrome is vulnerable to UI Spoofing. The vulnerability is caused due to an Inappropriate implementation in Downloads which allows a remote attacker to convince a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page...

Open Redirect

Drupal's path module is vulnerable to a Open Redirect. The vulnerability is due to improper URL handling which allows users with 'administer paths' permissions to create URLs that redirect to malicious sites...

Remote Code Execution (RCE)

passbolt/passboltapi is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper input sanitization during the server's PGP key generation, allowing users to inject shell code during installation...

Denial Of Service (DoS)

gvisor.dev/gvisor is vulnerable to a Denial of Service DoS. The vulnerability is due to improper checks for mounts marked as unmounted before propagating, which could lead to a panic. This allows an attacker running as root and with permission to mount volumes to kill the sandbox...

Denial Of Service (DoS)

github.com/stacklok/minder is vulnerable to Denial Of Service DoS. The vulnerability is due to the engines lack of template size limits, which allows an attacker to execute a Denial of Service DoS attack by submitting maliciously crafted large templates...

Authentication Bypass

pusher/pusher-php-server is vulnerable to Authentication Bypass. The vulnerability is due to insufficient validation of the channel name and socket ID, which allows malicious end-users to forge access to unauthorized private channels...

Cross-site Scripting (XSS)

passbolt/passboltapi is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper sanitization of user input, allowing an attacker to inject malicious scripts into the user's first and last name fields, which execute when the setup link in the invitation email is accessed...

SQL Injection

propel/propel is vulnerable to SQL Injection. The vulnerability is due to a lack of implicit integer cast of the limit input, which allows an attacker to execute malicious SQL...

SQL Injection

propel/propel1 is vulnerable to SQL Injection. The vulnerability is due to a lack of implicit integer cast of the limit input, which allows an attacker to execute malicious SQL...

Huckleberry

ibc-go module is vulnerable to the "Huckleberry" vulnerability. The vulnerability is due to a flaw in the Inter-Blockchain Communication IBC protocol...

Prototype Pollution

@blackprint/engine is vulnerable to Prototype Pollution. The vulnerability is due to missing object type checks in the DeepProperty function in engine.min.js, which allows an attacker to execute arbitrary code...

XML External Entity (XXE) Injection

neos/flow is vulnerable to XML External Entity XXE. The vulnerability is due to the MediaTypeConverter improperly handling XML input, which could be exploited to conduct XXE attacks...

Container Registry Credential Leak

Trivy is vulnerable to Container Registry Credential Leak. The vulnerability is due to insufficient registry domain validation which results in container registry credential leakage. An attacker must convince a user intro scanning a malicious container, which then allows an attacker to push/pull...

Information Disclosure

neos/flow is vulnerable to Information Disclosure. The vulnerability is due to entity security not properly integrating with the doctrine query cache, allowing users to reuse cached SQL queries built for other users based on their roles rather than their specific properties, potentially revealing...

IV Collision

github.com/bincyber/go-sqlcrypter is vulnerable to IV Collision. The vulnerability is due to using a random IV, which can exceed the safe limit of encrypting plaintext above 2^32 in size under the same key as stated by NIST SP 800-38D, potentially allowing attackers to decrypt messages if IV...

Cross Site Scripting (XSS)

survey-core is vulnerable to Cross Site Scripting XSS. The vulnerability is due to insufficient sanitization of the imageLink property in questionimage.ts, which allows an attacker to execute malicious scripts via setting contentMode=youtube...

Prototype Pollution

@apidevtools/json-schema-ref-parser is vulnerable to Prototype Pollution. The vulnerability is due to inadequate input validation in the bundle, parse, resolve, and dereference functions, allowing a remote attacker to execute arbitrary code...

Prototype Pollution

@bit/loader is vulnerable to Prototype Pollution. The vulnerability is due to missing proto property restrictions within the M function's e argument in index.js, which allows an attacker to execute arbitrary code...

Remote Code Execution (RCE)

3f/pygmentize is vulnerable to Remote Code Execution. The vulnerability is due to improper shell argument sanitization when passing user input to the PIGMENTS binary, which allows an attacker to cause Remote Code Execution...

Use Of A Broken Or Risky Cryptographic Algorithm

asymmetricrypt/asymmetricrypt is vulnerable to Use Of A Broken Or Risky Cryptographic Algorithm. The vulnerability is due to insecure padding within PKCS v1.5, which allows an attacker to brute force the encrypted content...

Arbitrary Code Execution

contao/core is vulnerable to Arbitrary Code Execution. The vulnerability is due to untrusted POST data being passed to the deserialize function which could result in Arbitrary Code Execution...

Authentication Bypass

namshi/jose is vulnerable to Authentication Bypass. The vulnerability is due to improper signature validation which permits tokens signed with 'none' algorithms to be processed, effectively allowing authentication to bypass signature validation...

Man-in-the-Middle (MITM)

aiosmtpd is vulnerable to Man-in-the-Middle MitM . The vulnerability is due to accepting unencrypted commands after the STARTTLS protocol command, which allows unencrypted commands to be accepted and treated as if they were encrypted. An attacker can exploit this flaw to perform a Man-in-the-Midd...

Out-of-bounds Read

nvidia-cuda-toolkit is vulnerable to an out-of-bounds read. The vulnerability is due to an issue in cuobjdump, where an attacker can exploit this by tricking a user into running cuobjdump on a malformed input file, potentially leading to limited denial of service...

NULL Pointer Dereference

nvidia-cuda-toolkit is vulnerable to a NULL pointer dereference. The vulnerability is due to improper handling of malformed binaries, allowing a local user running the tool to cause a limited denial of service...

Division-by-Zero

nvidia-cuda-toolkit is vulnerable to a Division-by-Zero. The vulnerability is due to an improper mathematical operation, which may enable a user to cause a crash, leading to a Denial of service...

Deserialization Of Untrusted Data

joblib is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to unsafe handling of pickle files in the readarray function within numpypickle.py where pickle.load is enabled by default. This allows an attacker to execute arbitrary code by loading a maliciously crafted pickle...

Information Disclosure

neos/neos is vulnerable to Information Disclosure. The vulnerability is due to improper access controls allowing the viewing of internal workspaces without authentication. This allows attackers to read sensitive content from internal workspaces without permission...

Observable Discrepancy

neos/flow is vulnerable to Observable Discrepancy . The vulnerability is due to observable timing differences within the PersistedUsernamePasswordProvider. An attacker can determine whether an account exists based on the timing of the response, because the hash is only generated if an account was...

Authentication Bypass

namshi/jose is vulnerable to Authentication Bypass. The vulnerability is due to an implementation error in the validation process for digital signatures using asymmetric algorithms. which allows attackers to forge tokens by exploiting the signature verification flaw...

Privilege Escalation

github.com/submariner-io/submariner-operator is vulnerable to Privilege Escalation. The vulnerability is due to unnecessary role-based access control permissions, which allows a privileged attacker to run a malicious container on a node, potentially stealing service account tokens and compromisin...

Insufficient Entropy In Random Number Generation

paragonie/randomcompat is vulnerable to insufficient entropy in random number generation. The vulnerability is due to the insecure usage of Cryptographically Secure Pseudo-Random Number Generators CSPRNG involving opensslrandompseudobytes, which may compromise the security of generated random...

Privilege Escalation

alterphp/easyadmin-extension-bundle is vulnerable to Privilege Escalation. The vulnerability is due to role-based access rules not handling action name case sensitivity, which could allow a user to gain access to actions they are not authorized to perform...

Open Redirection

OroPlatform is vulnerable to Open Redirection. The vulnerability is due to improper validation of URLs, allowing attackers to redirect users to external websites...

Open Redirect

OroCRM is vulnerable to Open Redirect. The vulnerability is due to improper validation of URLs, allowing attackers to redirect users to external websites...

GitHub Token Leakage

github.com/wolfi-dev/wolfictl is vulnerable to GitHub Token Leakage. The vulnerability is due to a local user's GitHub token being sent to remote servers other than github.com if a user ran wolfictl update with a non github domain...

Arbitrary Code Execution

contao/core is vulnerable to Arbitrary Code Execution. The vulnerability is due to insufficient input validation, allowing attackers to remove or change pathconfig.php by entering a URL, making the entire Contao installation inaccessible or enabling the execution of malicious code...

Signature Verification Bypass

onelogin/php-saml is vulnerable to Signature Verification Bypass. The vulnerability is due to implicit boolean conversion of numerical values returned by opensslverify in PHP, where an error state -1 can be interpreted as a successful signature verification, which results in misinterpretation of...

Authentication Bypass Via Signature Wrapping

onelogin/php-saml is vulnerable to Authentication Bypass. The vulnerability is due to improper signature validation, which allows a malicious user to bypass authentication through signature wrapping...

Remote Code Execution (RCE).

drupal/core is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsanitized shell arguments in DefaultMailSystem::mail, which could be exploited to execute arbitrary code...

Insecure Direct Object Reference (IDOR) / Weak Encryption

nzo/url-encryptor-bundle is vulnerable to a Insecure Direct Object Reference IDOR. This vulnerability is due to a lack of mandatory key and initialization vector IV requirements, which makes the aes-256-ctr algorithm susceptible to malleability attacks. It allows attackers to decrypt and modify...

Denial Of Service (DoS)

github.com/stacklok/minder is vulnerable to a Denial of Service DoS. The vulnerability is due to missing request size limits by the REST ingester when processing responses from remote REST endpoints, which allows an attacker to execute a Denial of Service attack by controlling a remote REST...

Cross-Site Scripting

Cacti is vulnerable to Cross-site Scripting. The vulnerability is due to malicious scripts being permanently stored on a target server and served to users who access a particular page, which attackers can use to execute scripts in the context of the user's browser, potentially leading to...

Denial Of Service (DoS)

rexml is vulnerable to Denial Of Service DoS. The vulnerability is due to improper parsing of XML with many characters in an attribute value, which allows an attacker to cause Denial of Service...

Open Redirect

drupal/core is vulnerable to Open Redirect. The vulnerability is due to allowing users with the 'administer paths' permission to create pretty URLs, which can be exploited to redirect to a malicious URL...

Command Injection

consoleme is vulnerable to Command Injection. The vulnerability is due to improper neutralization of special elements used in a command, potentially allowing an attacker to inject and execute arbitrary commands via an argument flag...