Integer Underflow

GTKWave 3.3.115 is vulnerable to an Integer Underflow. The vulnerability is caused due to a defect in the LXT2 lxt2rditerradix shift operation functionality when performing the left shift operation. A specially crafted .lxt2 file can lead to memory corruption when the victim opens the file...

Out-of-bounds Write

gtkwave is vulnerable to Out-of-bounds Write. The vulnerability is due to out-of-bounds writes performed by the prefix copy loop in its LXT2 parsing functionality, allowing a specially-crafted .lxt2 file to trigger arbitrary code execution when opened by a victim...

Out-of-bounds Write

gtkwave is vulnerable to Out-of-bounds Write.The vulnerability is due to the out-of-bounds writes performed by the string copy loop in its LXT2 parsing functionality, allowing a specially-crafted .lxt2 file to trigger arbitrary code execution when opened by a victim...

Cleartext Transmission Of Sensitive Information

dectalk-tts is vulnerable to Cleartext Transmission of Sensitive Information 'Man-in-the-Middle'. The vulnerability is due to unencrypted HTTP traffic being sent to a third-party API. This could allows an attacker to intercept and modify traffic, leading to potential man-in-the-middle MITM attack...

Out-of-bounds Write

gtkwave is vulnerable to Out-of-bounds Write. A specially crafted .lxt2 file can exploit this vulnerability in its LXT2 numtimetableentries functionality, It allows a victim would need to open the malicious file, finally leading to arbitrary code execution...

Integer Overflow

gtkwave is vulnerable to integer overflow. The vulnerability due to a specially crafted .fst file within its FST fstReaderIterBlocks2 chaintable allocation functionality. It allows a victim must open the malicious file, with the vulnerability revolving around the allocation of the chaintable arra...

Integer Overflow

gtkwave is vulnerable to Integer Overflow. The vulnerability due to a specially crafted .fst file within the FST fstReaderIterBlocks2 chaintable allocation functionality. It allows victims would need to open the malicious file to trigger these vulnerabilities, resulting in arbitrary code executio...

Out-of-Bounds Memory Access

Google Chrome is vulnerable to an out-of-bounds memory access. The vulnerability allows a remote attacker to perform arbitrary read/write operations via a crafted HTML page...

Use-After-Free

Bookmarks in Google Chrome is vulnerable to a use-after-free vulnerability. The vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Out-of-Bounds Memory Access

Google Chrome is vulnerable to Out-of-Bounds Memory Access. The vulnerability allows a remote attacker to potentially perform out-of-bounds memory access via a crafted HTML page...

Integer Overflow

gtkwave is vulnerable to Integer Overflow. The vulnerability due to flaw with a specifically crafted .fst file in the tempsignalvaluebuf allocation functionality. It allows a victim must open the malicious file, can execute arbitrary code...

Out-of-bounds Write

gtkwave is vulnerable to Out-of-bounds Write. The vulnerability due to a specially crafted .vzt file in the LZMAreadvarint functionality. It allows Victims would need to open the malicious file to trigger the vulnerability, potentially leading to arbitrary code execution...

NULL Pointer Dereference

MiniZinc is vulnerable to a NULL pointer dereference via tiexpr in a crafted .mzn file. This vulnerability arises due to improper handling of tiexpr, allowing attackers to trigger a NULL pointer dereference by providing a specially crafted .mzn file...

Improper Array Index Validation

gtkwave is vulnerable to Improper Array Index Validation. The vulnerability due to a specially crafted .evcd file in the var len parsing functionality. It allows a victim must open the malicious file with may result in arbitrary code execution...

Heap-Based Buffer Overflow

gtkwave is vulnerable to Heap-Based Buffer Overflow. The vulnerability due to processing a specially crafted .fst file in the fstReaderIterBlocks2 fstWritex len functionality. It allows a victim must open the malicious file, can lead to memory corruption...

Heap Based Buffer Overflow

GTKWave is vulnerable to Heap Based Buffer Overflow. The vulnerability is due to improper handling of len in fstWritex when begtime does not match the start of the time table, It allows Victims are at risk of exploitation if they open a malicious file triggering these vulnerabilities, leading to...

Certificate Validation

curl is vulnerable to Certificate Validation. The vulnerability is due to a flaw in libcurl when built with wolfSSL and the error path inadvertently bypassing certificate verification when encountering unknown or bad ciphers or curves, allows for certificate verification to be skipped for QUIC...

Memory Leakage

libcurl is vulnerable to a Memory Leakage. The vulnerability is due to the improper handling of HTTP/2 server push requests, allows server push and the number of received headers exceeds the maximum limit...

Arbitrary Code Execution

emacs is vulnerable to Arbitrary Code Execution. The vulnerability is due to a lack of proper validation of user input during the activation process of Org mode in Emacs, allowing the execution of arbitrary Lisp code during the activation process...

Trust Boundary Violation

emacs is vulnerable to Trust Boundary Violation. The vulnerability is due to a flaw in the processing logic of Emacs Gnus, allows attackers to potentially exploit trust assumptions in Emacs Gnus, as it incorrectly treats inline MIME contents as trusted without appropriate validation...

Privacy Leakage

emacs is vulnerable to a Privacy Leakage. The vulnerability is due to LaTeX preview being enabled by default for email attachments, allows attackers can automatically generating LaTeX previews for email attachments, potentially disclosing sensitive information to unintended recipients...

Improper Input Validation

emacs is vulnerable to Improper Input Validation. The vulnerability is due to a flaw in the processing logic of Emacs Org mode, allows attackers to potentially exploit trust assumptions in Emacs Org mode, as it incorrectly treats the contents of remote files as trusted without appropriate...

Logic Error

curl is vulnerable to Logic Error. The vulnerability is due to an error in the logic for removing protocols when a protocol selection parameter option disables all protocols without adding any, allows attackers to potentially bypass protocol restrictions and perform requests with disabled protoco...

Improper Certificate Validation

github.com/hashicorp/vault vulnerable to Improper Certificate Validation. The vulnerability exists due to inadequate validation during the TLS certificate authentication process, specifically in handling OCSP responses when one or more OCSP sources are configured...

Header Injection

undici is vulnerable to Header Injection. The vulnerability is due to inconsistent header handling, where headers were cleared for fetch but not for undici.request, which could result in unauthorized access to sensitive information...

Server Side Request Forgery

mobsf is vulnerable to Server Side Request Forgery. The vulnerability is due to a flaw in the firebase database check logic, allowing attackers to manipulate the server to make connections to internal-only services within the organization's infrastructure when a malicious app is uploaded to the...

Denial Of Service (DoS)

github.com/nghttp2/nghttp2/ is vulnerable to Denial of Service DoS. The vulnerability is due a lack of frame count restrictions, which can result in nghttp2 reading an unbounded number of HTTP/2 CONTINUATION frames even after the stream is reset to keep HPACK context in sync. An attacker can...

Denial Of Service (DoS)

github.com/envoyproxy/envoy is vulnerable to Denial Of Service. This vulnerability is due to not resetting a request when header map limits are exceeded, allowing attackers to send a sequence of CONTINUATION frames without the ENDHEADERS bit set, leading to unlimited memory consumption and denial...

Improper Access Control

undici is vulnerable to Improper Access Control. This vulnerability is due to insufficient validation of the integrity option passed to the fetch function. If an attacker can manipulate the integrity option passed to the fetch method, the request will be accepted even if the request was tampered...

Sql Injection

centreon/centreon is vulnerable to Sql Injection.The vulnerability is due to inadequate validation of user-supplied input in the updateContactHostCommands function, enabling attackers to execute arbitrary code with the privileges of the service account...

Denial Of Service (DOS)

golang.org/x/net is vulnerable to Denial Of Service DoS. The vulnerability is due to a lack of header frame limits, allowing an attacker to send excessive CONTINUATION frames which causes the endpoint to read arbitrary amounts of header data without proper memory allocation limits...

Information Exposure

Quarkus-core is vulnerable to Information Exposure. The vulnerability is due to the capture of local environment variables from the Quarkus namespace during the build process, leading to applications inheriting potentially sensitive or test-specific settings at runtime...

Remote Code Execution (RCE)

pgAdmin is vulnerable to Remote Code Execution RCE. The vulnerability is due improper validation within the binary path API, which allows attackers to execute arbitrary code on the server...

Cross-Site Scripting (XSS)

github.com/alexxit/go2rtc is vulnerable for Cross-Site Scripting XSS. The vulnerability due to the links.html page appending the src GET parameter in all of its links for 1-click previews, where the context of appending is innerHTML, leading to the insertion of the text as HTML which results in X...

Integer Overflow

GTKWave 3.3.115 is vulnerable to an Integer Overflow. The vulnerability is caused due to a defect in the FSTBLGEOM parsing maxhandle functionality when compiled as a 32-bit binary. A specially crafted .fst file can lead to memory corruption when the user opens a malicious file to trigger this...

TLS Certificate Check Bypass

libcurl is vulnerable to TLS Certificate Check Bypass. The vulnerability is caused due to libcurl not checking the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the...

Type Confusion

Chrome is vulnerable to Type Confusion. The vulnerability is due to a Type Confusion weakness in WebAssembly Wasm Open Standard in Google Chrome. An attacker can exploit this vulnerability using a crafted HTML page leading to Remote code execution RCE...

Use-After-Free

chromium is vulnerable to a Use-After-Free. The vulnerability due to improper handling of memory in the WebCodecs component. It allows a remote attacker to execute arbitrary read/write operations via a crafted HTML page...

Use-After-Free

chromium is vulnerable to Use-After-Free . The vulnerability is due to memory corruption caused by accessing previously freed memory. It allows a remote attacker to potentially exploit heap corruption by leveraging a crafted HTML page...

Use-After-Free

chromium is vulnerable to Use-After-Free. The vulnerability is due to memory corruption caused by accessing previously freed memory. It allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Cross-Site Scripting (XSS)

github.com/ossrs/srs is vulnerable to Cross-Site Scripting. The vulnerability is due to insufficient input validation on the /api/v1/vhosts/vid-?callback= endpoint. This allowing the injection of malicious JavaScript payloads through the callback function name...

Command Injection

Cockpit is vulnerable to Command Injection. The vulnerability is due to a flaw in handling the deletion of sosreports with crafted names via the Cockpit web interface, potentially leading to privilege escalation...

XML Injection

verapdf is vulnerable to Remote Code Execution RCE. The vulnerability is caused by executing policy checks using custom schematron files, which invokes an XSL transformation that could lead to code execution...

Denial Of Service (DoS)

Temporal Server is vulnerable to Denial of Service DoS. The vulnerability is caused by an authenticated user with permissions to interact with workflows submitting an invalid UTF-8 string which causes an application crash. This can lead to stuck tasks in the queue, increased queue lag, resource...

Path Traversal

vite is vulnerable to Path Traversal. The vulnerability is due to mishandling patterns containing directories caused by the server.fs.deny option. This allows an attacker to gain unauthorized access to certain files...

Cross-site Scripting (XSS)

Concrete CMS is vulnerable to Stored Cross-Site Scripting XSS. The vulnerability is due to insufficient validation of administrator-provided data, allowing a rogue administrator to insert malicious code into the custom class field...

Cross-site Scripting (XSS)

Concrete CMS is vulnerable to Cross-site Scripting XSS. The vulnerability is due to the lack of proper input validation, allowing an administrator to execute stored XSS by changing a filter that a rogue administrator had previously tampered with, thereby injecting malicious code...

Cross-site Scripting (XSS)

Concrete CMS is vulnerable to Cross-site Scripting XSS. The vulnerability is due to user input not being properly escaped, allowing a rogue administrator to inject malicious JavaScript into the Calendar Color Settings screen, which may then be executed when users visit the affected page...

Local File Inclusion

voila is vulnerable to Local File Inclusion. The vulnerability is due to improper handling of file paths within app.py which allows an attacker to access readable files on the server's filesystem...

Arbitrary Code Execution

dolibarr/dolibarr is vulnerable to Arbitrary Code Execution. The vulnerability is due to insufficient sanitization during the installation process, enabling an attacker with adjacent network access to execute arbitrary code by providing specially crafted input...