Insecure Direct Object Reference (IDOR)

bagisto/bagisto is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is due to insufficient validation of the invoice ID parameter in the print function within OrderController.php. This flaw allows an attacker to retrieve sensitive information, resulting in Information...

Improper Input Validation

Apache Axis is vulnerable to Improper Input Validation. The vulnerability is caused due to improper input validation in the getService method within ServiceFactory.java. This can potentially lead to Denial of Service, Server Side request forgery, or Remote Code Execution attacks...

Information Disclosure

yaql is vulnerable to Information Disclosure. The vulnerability is due to improper handling of attribute access in the YAQL library's 'format' function, allowing unauthorized users to access sensitive information, including service account credentials...

Server Side Request Forgery

gleez/cms is vulnerable to a Server Side Request Forgery SSRF. The vulnerability is due to improper input validation within request.php, allowing remote attackers to execute arbitrary code or obtain sensitive information...

Cross Site Request Forgery

Prefect is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to insufficient CSRF protection mechanisms, allowing an attacker to steal secrets or potentially gain remote code execution by submitting a crafted request...

Buffer Overflow

pillow is vulnerable to Buffer Overflow. The vulnerability is due improper use of strcpy when copying a buffer in imagingcms.c, which allows an attacker to submit a crafted image resulting in a buffer overflow...

Cross Site Scripting

concrete5/concrete5 is vulnerable to Cross Site Scripting. The vulnerability is due to insufficient validation of administrator provided data in the Advanced File Search Filter, allowing rogue administrators to add malicious code in the file manager...

Cross Site Scripting

concrete5/concrete5 is vulnerable to Cross Site Scripting XSS. This vulnerability is due to a lack of input sanitization, allowing a rogue administrator to insert malicious code into the link-text field when creating a file block...

Denial Of Service (DoS)

amphp/http-client is vulnerable to Denial Of Service. The vulnerability is due to unbounded buffering of HTTP/2 CONTINUATION frames until the ENDHEADERS flag is received, which results in a memory exhaustion crash...

Null Dereference

github.com/kubevirt/kubevirt is vulnerable to Null Dereference. The vulnerability is due to improper handling of calls to vm-dump-metrics --virtio, allowing an attacker to cause a denial of service by issuing a high number of such calls and subsequently deleting the virtual machine...

Missing Certificate Validation

localstack is vulnerable to Missing Certificate Validation. An attacker can eavesdrop on communications between the host and server by performing a man-in-the-middle attack...

Improper Input Validation

moodle/moodle is vulnerable to Improper Input Validation. The vulnerability is due to the handling of URL parameters in the forum search functionality. An attacker can manipulate the search feature by injecting unexpected parameters, potentially leading to information disclosure or other unintend...

Cross-Site Request Forgery (CSRF)

moodle/moodle is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to the link to update all installed language packs not including a necessary CSRF token. An attacker can exploit this vulnerability by tricking a user into clicking on a crafted link or navigating to a...

Out-of-bounds Write

gtkwave is vulnerable to an Out-of-bounds Write. The vulnerability is due to a flaw in the LXT2 zlib block decompression functionality in .lxt2 file, allowing attackers to execute arbitrary code by crafting a malicious file...

Integer Overflow

gtkwave is vulnerable to Integer Overflow.The vulnerability is due to insufficient input validation and bounds checking within the VZT facgeometry parsing functionality in .vzt file, allow attackers to manipulate certain input parameters during the allocation of the rows array...

Integer Overflow

gtkwave is vulnerable to Integer Overflow.The vulnerability is due to insufficient input validation and bounds checking within the VZT facgeometry parsing functionality in .vzt file, allow attackers to manipulate certain input parameters during the allocating the msb array...

Integer Overflow

gtkwave is vulnerable to Integer Overflow.The vulnerability is due to insufficient input validation and bounds checking within the VZT facgeometry parsing functionality in .vzt file, allow attackers to manipulate certain input parameters during the allocation of the len array...

Out-of-bounds Write

gtkwave is vulnerable to Out-of-bounds Write. The vulnerabilities are due to flaws in the VZT vztrdgetfacname decompression functionality in .vzt file, allowing arbitrary code execution via a specially crafted file...

Integer Overflow

gtkwave is vulnerable to Integer Overflow.The vulnerability is due to insufficient input validation and bounds checking within the VZT facgeometry parsing functionality in .vzt file, allow attackers to manipulate certain input parameters during the allocation of the flags array...

Out-of-bounds Write

gtkwave is vulnerable to Out-of-bounds Write. The vulnerabilities stem from flaws in the VZT vztrdgetfacname decompression functionality in .vzt file, allowing arbitrary code execution via a specially crafted file...

Integer Overflow

gtkwave is vulnerable to Integer Overflow.The vulnerability is due to insufficient input validation and bounds checking within the VZT facgeometry parsing functionality in .vzt file, allow attackers to manipulate certain input parameters during the allocation of the vindexoffset array...

Integer Overflow

gtkwave is vulnerable to Integer Overflow.The vulnerability is due to insufficient input validation and bounds checking within the VZT facgeometry parsing functionality in .vzt file, allow attackers to manipulate certain input parameters during the allocation of the lsb array...

Integer Overflow

gtkwave is vulnerable to Integer Overflow.The vulnerability is due to insufficient input validation and bounds checking within the VZT vztrdblockvchdecode times parsing functionality in .vzt file, allow attackers to manipulate certain input parameters, particularly numtimeticks...

Integer Overflow

gtkwave is vulnerable to Integer Overflow. The vulnerability is due to insufficient input validation and bounds checking within the VZT vztrdblockvchdecode dictionary parsing functionality in .vzt file, allow attackers to manipulate certain input parameters, particularly numtimeticks...

Integer Overflow

gtkwave is vulnerable to Integer Overflow. The vulnerability is due to insufficient input validation and bounds checking within th VZT vztrdblockvchdecode dictionary parsing functionality in .vzt file allow attackers to manipulate certain input parameters, particularly numtimeticks...

Integer Overflow

gtkwave is vulnerable to Integer Overflow.The vulnerability is due to insufficient input validation and bounds checking within the VZT vztrdblockvchdecode times parsing functionality in .vzt file, allow attackers to manipulate certain input parameters, particularly numtimeticks...

Arbitrary Code Execution

gtkwave is vulnerable to Arbitrary Code Execution.This vulnerability arises from improper input validation in LXT2 lxt2rdexpandintegertobits function.An attacker could exploit this vulnerability by crafting a malicious .lxt2 file, which, when opened by a victim, could execute arbitrary code...

Cross Site Scripting (XSS)

francoisjacquet/rosariosis is vulnerable to Cross Site Scripting. The vulnerability is due to improper handling of input in the component Add Portal Note, leading to the execution of arbitrary JavaScript code...

Sensitive Information Disclosure

libmbedtls.so is vulnerable to Sensitive Information Disclosure. The vulnerability is due to inadequate handling of shared memory within the PSA Crypto API, potentially leading to information disclosure...

Missing Authentication

apacheairflow is vulnerable to Missing Authentication. The vulnerability due to lack of authentication enforcement on the lineage endpoint of the deprecated Experimental API, allows unauthenticated users to access the endpoint, potentially exposing metadata about a Directed Acyclic Graph DAG and...

Denial Of Service (DoS)

moodle/moodle is vulnerable to Denial of Service DoS. The vulnerability is due to insufficient file size checks in the file picker's unzip functionality. An attacker can cause a denial of service by uploading specially crafted zip files...

Information Disclosure

apacheairflow is vulnerable to a Information Disclosure. The vulnerability is due to an insecure umask configuration in numerous Airflow components when running with the --daemon flag, resulting in a race condition that results in setting files within the airflow home directory world writable...

Cross Site Scripting(XSS)

github.com/ca17/teamsacs is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient input validation in the errmsg parameter, allowing remote attackers to execute arbitrary code through a crafted script...

Connection ID Exhaustion

github.com/quic-go/quic-go is vulnerable to a Connection ID exhaustion. The vulnerability is caused by an attacker manipulating of the round-trip time RTT estimate of the peer by sending a large number of NEWCONNECTIONID frames to exhaust the memory of the receiver, which allows an attacker to...

Improper Privilege Management

uvdesk/community-skeleton is vulnerable to Improper Privilege Management. This vulnerability is due to inadequate access controls, allowing unauthorized users to gain privileged access to system resources...

Cross Site Request Forgery (CSRF)

github.com/mudler/localai is vulnerable to Cross Site Request Forgery CRSF. The vulnerability is due to a lack of CSRF tokens, allowing an attacker to host malicious JavaScript on a host. When visited by a LocalAI user, this could allow the attacker to fill disk space to deny service or abuse...

Incorrect Authorization

Apache Pulsar is vulnerable to Incorrect Authorization. The vulnerability is due to improper permission checks, which allows an attacker to perform operations such as unloading topics or triggering compaction. Additionally, the vulnerability allows an authenticated user to read, create, modify, a...

Authentication Bypass

causal/oidc is vulnerable to Authentication Bypass. The vulnerability is due to improper verification of the OpenID Connect authentication state from the user lookup chain, leading to authentication of any valid frontend user with a non-empty "txoidc" field...

Cross-Site Scripting (XSS)

github.com/temporalio/ui-server is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization of signal names, allowing an attacker to inject a script that executes when a victim views the signal in the timeline page displaying the workflow execution details...

Memory Leak

vertx-core is vulnerable to a Memory Leak. The vulnerability is due to erroneous caching in the server name map for TCP servers configured with TLS and SNI support. This allows attackers to send TLS client hello messages with fake server names, triggering a JVM out-of-memory error...

Stack Based Buffer Overflow

gtkwave is vulnerable to Stack Based Buffer Overflow. The vulnerability is due to insufficient bounds checking in the fstReaderVarint32 function. Crafted .fst files, allowing attackers to execute arbitrary code execution when opened by a victim...

Stack Based Buffer Overflow

gtkwave is vulnerable to Stack Based Buffer Overflow. The vulnerability is due to insufficient bounds checking in the fstReaderVarint32WithSkip function. Crafted .fst files, allowing attackers to execute arbitrary code execution when opened by a victim...

Stack Based Buffer Overflow

gtkwave is vulnerable to Stack Based Buffer Overflow. The vulnerability is due to insufficient bounds checking in the fstReaderVarint64 function. Crafted .fst files, allowing attackers to execute arbitrary code execution when opened by a victim...

Arbitrary Write

gtkwave is vulnerable to Arbitrary Write. These vulnerabilities can be exploited via a specially crafted .vcd file, allows a victim would need to open the malicious file and potentially leading to arbitrary code execution...

Arbitrary Write

gtkwave is vulnerable to Arbitrary Write. These vulnerabilities can be exploited via a specially crafted .vcd file, allows a victim would need to open the malicious file and potentially leading to arbitrary code execution...

Arbitrary Write

gtkwave is vulnerable to Arbitrary Write. These vulnerabilities can be exploited via a specially crafted .vcd file, allows a victim would need to open the malicious file and potentially leading to arbitrary code execution...

Integer Overflow

gtkwave is vulnerable to an Integer Overflow. This vulnerability due to integer overflow via a specially crafted .fst file in the timetable tsecnitems functionality of the fstReaderIterBlocks2 module, allows a victim would need to open the malicious file...

Integer Overflow

gtkwave is vulnerable to Integer Overflow. The vulnerability is due to an integer overflow in the value elements within its LXT2 lxt2rdtrace value elements allocation functionality Crafting a specially designed .lxt2 file can allows an unsuspecting victim must open the malicious file...

Integer Overflow

gtkwave is vulnerable to an Integer Overflow. The vulnerability is due to integer overflow within its VZT longestlen value allocation functionality in the .vzt file, allows an unsuspecting victim must open the malicious file...

Cross Site Scripting (XSS)

Bonita is vulnerable to Cross Site Scripting XSS. The vulnerability is due to inadequate input validation on a UI screen within the administration panel, allowing malicious scripts to be stored and executed...