Unrestricted File Upload

drupal/core is vulnerable to Unrestricted File Upload. The vulnerability is caused by the failure to properly sanitize filenames within the filesaveupload function. This allows an attacker to potentially upload malicious system files, such as .htaccess...

Remote Code Execution (RCE)

drupal/core is vulnerable to Remote Code Execution. The vulnerability is due to the Contextual Links module not properly validating the contextual links requested by users, which may result in Remote Code Execution...

Information Exposure

Firefox is vulnerable to Information Exposure. The vulnerability is due to error messages generated during importing resources using Web Workers, distinguish the difference between application/javascript responses and non-script responses. This can be abused to learn information cross-origin...

Information Exposure

Firefox is vulnerable to Information Exposure. The vulnerability is caused due to IndexedDB files are not properly deleted when the window was closed when browser.privatebrowsing.autostart preference is enabled. This preference is disabled by default in Firefox...

Permission Issues

Firefox is vulnerable to Permission Issues. The vulnerability is caused due to a bug in the popup notification's interaction with WebAuthn which can make it easier for an attacker to trick a user into granting permissions...

Improper Initialization

Firefox is vulnerable to Improper Initialization. The vulnerability is due to a file dialog shown while in full-screen mode, which could result in the window remaining disabled, allowing attackers to potentially exploit this to create a denial-of-service condition...

Memory Corruption

Firefox thunderbird is vulnerable to Memory Corruption. The vulnerability is caused due to memory safety bugs which can be exploited to run arbitrary code...

Potentially Undefined Behavior

firefox is vulnerable to potentially undefined behavior. The vulnerability is due to bypassing move semantics, leading to undefined behavior, which attackers can exploit to cause unexpected crashes or execute arbitrary code...

Invalid Memory Access

Firefox is vulnerable to invalid memory access. The vulnerability is due to a missing iterator stop condition when handling WASM code in the built-in profiler, which can lead to invalid memory access and undefined behavior...

Use Of Insufficiently Random Values

Firefox is vulnerable to Use Of Insufficiently Random Values. The vulnerability is due to nonce values being generated using rand function, which can lead to predictable values. Attackers can exploit this by predicting the nonce values, potentially allowing them to bypass authentication mechanism...

Information Disclosure

Firefox is vulnerable to a Information Disclosure. The vulnerability is due to a network error during page load causing the prior content to remain in view with a blank URL bar, which attackers can use to obfuscate a spoofed website. This vulnerability affects Firefox versions below 126...

Use-after-free

Firefox is vulnerable to a potential use-after-free crash. The vulnerability is due to certain font styles when saving a page to PDF, which can cause a use-after-free condition. Attackers can exploit this vulnerability to execute arbitrary code or crash the application...

Use-after-free

Firefox is vulnerable to a use-after-free . The vulnerability is due to a missing memory allocation check, which could lead to a crash or potentially be leveraged by attackers to achieve code execution...

SQL Injection

doctrine/orm is vulnerable to SQL Injection. The vulnerability is due to statements in the Where-Clause not being wrapped in brackets due to improper handling of case-insensitive checks, which allows an attacker to execute arbitrary SQL statements...

Cross Site Scripting (XSS)

drupal/core is vulnerable to Cross Site Scripting XSS. The vulnerability is due to Drupal configurations using the WYSIWYG CKEditor, which can be exploited by an attacker with content creation or editing capabilities to target users with access to CKEditor, including site admins with privileged...

Sensitive Information Disclosure

github.com/goreleaser/goreleaser is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the change in log output level from DEBUG to INFO, which could allow an attacker with access to the build logs to view sensitive environment information when the go build output is...

Open Redirect

drupal/drupal is vulnerable to Open Redirect. The vulnerability is due to the insecure handling of the "destination" query string parameter in Drupal core and contributed modules. This allows malicious users to craft URLs that redirect unsuspecting users to third-party websites...

Deserialization Of Untrusted Data

illuminate/cookie is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to insecure cookie encryption and serialization logic, which allows attackers to potentially decrypt or manipulate cookie data, resulting in arbitrary code execution...

Cross-Site Scripting (XSS)

illuminate/view is vulnerable to a Cross-site Scripting XSS. The vulnerability is due to inadequate input sanitization within blade templating, allowing attackers to inject malicious scripts into rendered views...

Cookie Leakage

amphp/artax is vulnerable to Cookie Leakage. The vulnerability is due to cookies being leaked to unauthorized domains, which allows an attacker to manipulate cookies in such a way where cookies of foo.bar.example.com were leaked to foo.bar...

Security Bypass

datadog/dd-trace is vulnerable to Security Bypass. The vulnerability is due to insufficient constraint on the ddtrace.requestinithook by the openbasedir INI directive, which allows an attacker to bypass the openbasedir INI directive...

Remote Code Execution (RCE)

cart2quote/module-quotation-encoded is vulnerable to Remote Code Execution RCE. The vulnerability is due to the use of the unserialize function when processing data from a GET request, which can be exploited by attackers to execute arbitrary code remotely, particularly when custom file options ar...

Remote Code Execution (RCE)

drupal/drupal is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsanitized shell arguments in DefaultMailSystem::mail, which could be exploited to execute arbitrary code...

Host Header Injection

amphp/http is vulnerable to Host Header Injection. The vulnerability is caused by improper validation of newline characters in the Host header, allowing an attacker to inject arbitrary Hosts into the request header...

Remote Code Execution (RCE)

illuminate/cookie is vulnerable to Remote Code Execution RCE. The vulnerability is due to applications using the "cookie" session driver combined with exposure of an encryption oracle, which allows an attacker to craft valid Laravel session payloads...

Object Injection

ezsystems/ezpublish-legacy is vulnerable to Object Injection. The vulnerability due to in the Legacy Shop module which allows an attacker with backend editor privileges to manipulate the discount rule settings...

Session Hijacking

friendsofsymfony/user-bundle is vulnerable to session hijacking. The vulnerability is due to inadequate session management, which could allow an attacker to take over a users session...

Denial Of Service (DoS)

drupal/core is vulnerable to Denial Of Service. The vulnerability is caused by visiting install.php, which can cause cached data to become corrupted until caches are rebuilt...

Local File Inclusion (LFI)

gregwar/rst is vulnerable to Local File Inclusion LFI. The vulnerability is due to inadequate input validation, allowing an attacker to manipulate file paths to read arbitrary files...

Insufficient Randomness

ezsystems/ezpublish-legacy is vulnerable to Insufficient Randomness. The vulnerability is due to inadequate entropy in the pseudo-random bytes used for hash generation, making it easier for attackers to predict the hash in the "forgot password" feature...

Remote Code Execution (RCE)

ezsystems/ezpublish-legacy vulnerable to Remote Code Execution RCE. The vulnerability is caused by uploading a file, which could potentially allow execution of arbitrary PHP files under certain configurations...

SQL Injection

adodb/adodb-php is vulnerable to SQL injection. The vulnerability is due to inadequate input validation in multiple drivers, which allows an attacker to execute malicious SQL queries...

Mass Assignment

Laravel is vulnerable to Mass Assignment. The vulnerability is due to improper column quoting for database drivers, which can be exploited when not using the fillable property on models, particularly when using the guarded property and passing a user-controlled array into an "update" or "save"...

SQL Injection

codeigniter/framework is vulnerable to SQL injection. The vulnerability is inadequate input validation within CodeIgniter ODBC database driver, which allows attackers to inject and execute malicious SQL queries...

Unauthorized Password Reset

cartalyst/sentry is vulnerable to Unauthorized Password Reset. The vulnerability is due to improper handling of password reset checks in the Sentry authentication framework, which allows attackers to reset passwords for users who have NULL in their resetpasswordcode column...

Sensitive Information Disclosure

ezsystems/repository-forms is vulnerable to Sensitive Information Disclosure. The vulnerability is caused due to missing permission checks before allowing access to user data. Specifically, the system did not properly verify if the user had the 'content' edit permissions, which allowed...

Information Disclosure

ezsystems/ezpublish-legacy is vulnerable to Information Disclosure. The vulnerability is caused due to the module not properly checking access permissions when rendering the content tree menu. This allows the tree menu to display hidden items to unauthorized users if they access the backend URL...

Identity Spoofing

doctrine/doctrine-module is vulnerable to Identity Spoofing. The vulnerability is due to improper handling of numerically valued credentials in DoctrineModule\Authentication\Adapter\ObjectRepository, which allows attackers to obtain valid authentication identities without knowing the user's actua...

Cross-site Scripting (XSS)

drupal/core is vulnerable to Cross Site Scripting XSS. The vulnerability is due to Drupal configurations using the WYSIWYG CKEditor, which can be exploited by an attacker with content creation or editing capabilities to target users with access to CKEditor, including site admins with privileged...

Authorization Bypass

Drupal is vulnerable to an Authorization Bypass. The vulnerability is due to the content moderation module failing to check a user's access to use certain transitions, potentially allowing unauthorized access to restricted translations...

SQL Injection

cacti is vulnerable to SQL injection. The vulnerability is due to insufficient validation of data in the formsave function within graphtemplateinputs.php, which is used to concatenate SQL statements in the drawnontemplatedfieldsgraphitem function fromhtmlformtemplates.php. Attackers can exploit...

Cross-Site Scripting

Cacti is vulnerable to Cross-site scripting. The vulnerability is due to insufficient data validation in the formsave function in dataqueries.php, which is used to concatenate the HTML statement in the growrightpanetree function from html.php...

Remote Code Execution

Ghostscript, the GPL PostScript/PDF interpreter is vulnerable to Remote Code Execution. The vulnerability is due to multiple security issues which can result in denial of service and potentially the execution of arbitrary code if malformed document files are processed...

Weak Entropy In Token Generation

friendsofsymfony/user-bundle is vulnerable to Weak Entropy in Token Generation. The vulnerability is due to the imprecise nature of the baseconvert function used in FOSUserBundle, which allows attackers to exploit the weakened randomness of tokens generated for email confirmation and password...

Weak Encryption

fuel/core is vulnerable to Weak Encryption. The vulnerability is due to the usage of the Crypt encryption algorithm, which potentially allows an attacker with sufficient knowledge, code, and GPU calculation power to break and potentially compromise the security of encrypted data...

Authentication Bypass

friendsofsymfony/user-bundle is vulnerable to Authentication Bypass. The vulnerability is due to an insecure user refresh implementation due to using the primary key instead of the username, which can result in authentication bypass if users are allowed to change usernames...

Improper Access Control

mlflow is vulnerable to Improper Access Control. The vulnerability is due to improper validation of DELETE requests by users with EDIT permissions, allowing unauthorized deletions of artifacts...

Path Traversal

mlflow is vulnerable to Path Traversal. The vulnerability is due to improper validation of artifact URLs, particularly in handling the fragment part of the URL. Attackers can exploit this by inserting a 'character, allowing the artifact to bypass validation, resulting an arbitrary file access on...

Cross-Site Scripting (XSS)

apache airflow is vulnerable to Cross-site Scripting XSS. The vulnerability is caused by improper handling of user input, which allows an authenticated attacker to inject malicious JavaScript into the task instance logs...

Remote Code Execution

drupal/drupal is vulnerable to Remote Code Execution. The vulnerability is due to the Contextual Links module not properly validating the contextual links requested by users, which may result in Remote Code Execution...