Authorization Bypass

moodle/moodle is vulnerable to Authorization Bypass. The vulnerability is due to insufficient permission checks, which allow unauthorized users to add comments to the comments block on another user's dashboard when it is not otherwise available...

Username Enumeration

IceWhaleTech/CasaOS-UserService is vulnerable to username enumeration. The vulnerability is due to improper error handling on the login page, which discloses whether a username exists based on the application's response to authentication attempts...

NULL Pointer Dereference

Libvirt is vulnerable to NULL pointer dereference. The vulnerability is caused by a race condition due to the simultaneous detachment of a host interface while collecting the list of interfaces using the virConnectListAllInterfaces API. This race condition leads to a situation where the path...

Improper Access Control

moodle/moodle is vulnerable to Improper Access Control. This vulnerability is due to a failure to honor Separate Groups mode restrictions, allowing users from different groups to be displayed. By default, this provides additional access to non-editing teachers...

NULL Pointer Dereference

xfig is vulnerable to NULL Pointer Dereference. The vulnerability is caused due to improper handling of the XGetWMHints function. The vulnerability allows an attacker to crash the application by exploiting the NULL pointer dereference condition with specially crafted input...

Improper Access Control

moodle/moodle is vulnerable to Improper Access Control. The vulnerability is caused by a failure to enforce Separate Groups mode restrictions during forum exports, resulting in exporting data for all groups...

Cross-Site Scripting (XSS)

Jenkins is vulnerable to Cross-site scripting XSS. The vulnerability is due to improper handling of workspaces and archived artifacts, allowing remote authenticated users to inject arbitrary web scripts or HTML...

Denial Of Service (DoS)

Libvirt is vulnerable to Denial of ServiceDoS. The vulnerability is due to improper handling of negative array lengths during memory allocation. If an attacker can pass a negative length to the gnew0 function will usually result in a Denial of ServiceDoS...

Cross-Origin Resource Sharing (CORS) Bypass

@kindspells/astro-shield is vulnerable to Cross-Origin Resource Sharing CORS Bypass. This vulnerability due to the introduction of valid integrity attributes to injected code and SRI hash added to the generated Content Security Policy CSP header, fooling the browser into believing that the inject...

SVG Injection

piccoloadmin is vulnerable to SVG Injection. This vulnerability due to insufficient input validation and improper handling of SVG files within Piccolo's admin panel, allowing attackers to upload a malicious SVG file, which, when loaded under certain contexts, permits arbitrary access to the admin...

Infinite Loop

protobuf is vulnerable to an infinite loop. The vulnerability is due to improper handling of malformed JSON structures, specifically when unmarshaling into messages containing a google.protobuf.Any value or when the UnmarshalOptions.DiscardUnknown option is set. This can potentially leads to deni...

Remote Code Execution (RCE)

jenkins-core is vulnerable to Remote Code Execution. The vulnerability is due to unsafe deserialization of Java objects. This flaw allows attackers to execute arbitrary code via a crafted serialized Java object, which could trigger an LDAP query to a third-party server...

Incorrect Authorization

quarkus is vulnerable to Incorrect Authorization. The vulnerability is due to improper sanitization or validation for certain character permutations when accepting requests. This potentially can leads to improper evaluation of permissions, resulting in security bypass or Denial of Service...

Buffer Overflow

gtkwave is vulnerable to Buffer Overflow. The vulnerability is due to inadequate bounds checking in the fstFread copy function. This allows an attacker to execute arbitrary code by providing a maliciously crafted .fst file...

Buffer Overflow

gtkwave is vulnerable to Buffer Overflow. The vulnerability is due to insecure handling of decompression in the uncompress function. This allows an attacker to execute arbitrary code by providing a maliciously crafted .fst file...

Buffer Overflow

gtkwave is vulnerable to Buffer Overflow. The vulnerability is due to insufficient input validation in the fastlzdecompress decompression function, allowing arbitrary code execution via a specially-crafted .fst file...

Buffer Overflow

gtkwave is vulnerable to Buffer Overflow. The vulnerability is caused due to insufficient input validation in the decompression function LZ4decompresssafepartial.This potentially leads to arbitrary code execution...

OS Command Injection

gtkwave is vulnerable to OS Command Injection. The vulnerability is due to insufficient validation of input during the decompression functionality while .ghw decompression, enabling attackers to execute arbitrary commands by crafting a malicious wave file...

OS Command Injection

gtkwave is vulnerable to OS Command Injection. The vulnerability is due to insufficient input validation in the decompression functionality in vcdrecordermain, allowing attackers to execute arbitrary commands by crafting a specially crafted wave file...

OS Command Injection

gtkwave is vulnerable to OS Command Injection. The vulnerability is due to inadequate input validation in the decompression functionality in vcdmain, enabling attackers to execute arbitrary commands through a specially crafted wave file...

OS Command Injection

gtkwave is vulnerable to OS Command Injection. The vulnerability is due to insufficient input validation in the decompression functionality in the vcd2lxt utility, which allows attackers to execute arbitrary commands by exploiting a specially crafted wave file...

OS Command Injection

gtkwave is vulnerable to OS Command Injection. The vulnerability is due to inadequate input validation in the decompression functionality in the vcd2lxt2 utility, allowing attackers to execute arbitrary commands by crafting a specially crafted wave file...

OS Command Injection

gtkwave is vulnerable to OS Command Injection. The vulnerability is due to inadequate input validation in the decompression functionality in the vcd2vzt utility, allowing attackers to execute arbitrary commands by exploiting a specially crafted wave file...

Heap Based Buffer Overflow

gtkwave is vulnerable to Heap Based Buffer Overflow. The vulnerability is due to insufficient bounds checking in the fstReaderIterBlocks2 chaintable parsing functionality using chaintable of FSTBLVCDATA and FSTBLVCDATADYNALIAS , allowing attackers to execute arbitrary code by crafting a specially...

Heap Based Buffer Overflow

gtkwave is vulnerable to Heap Based Buffer Overflow. The vulnerability is due to insufficient bounds checking in the fstReaderIterBlocks2 chaintable parsing functionality using the chaintable of the FSTBLVCDATADYNALIAS2, allowing attackers to execute arbitrary code by crafting a specially crafted...

Improper Array Index Validation

gtkwave is vulnerable to Improper Array Index Validation. The vulnerability is due to inadequate validation of array indices in the fstReaderIterBlocks2 tdelta functionality when signallens is 2 or more, allowing attackers to execute arbitrary code by crafting a specially crafted .fst file...

Arbitrary Code Execution

gtkwave is vulnerable to Arbitrary Code Execution. The vulnerability is due to insufficient validation of array indexes, specifically in the tdelta indexing when signallens is 0. A specially crafted .fst file can exploit these vulnerabilities to execute arbitrary code when opened by a victim...

Arbitrary Code Execution

gtkwave is vulnerable to Arbitrary Code Execution. The vulnerability arises from a specially crafted .fst file, allowing for arbitrary code execution upon opening the file. This vulnerability specifically relates to the tdelta indexing when signallens is 1...

Integer Overflow

gtkwave is vulnerable to Integer Overflow. This vulnerability allows for arbitrary code execution when a specially crafted .lxt2 file is opened by a victim...

Arbitrary Code Execution

gtkwave is vulnerable to Arbitrary Code Execution. The vulnerability arises from inadequate validation of array indices within the tdelta initialization process.A specially crafted .fst file can exploit these vulnerabilities, leading to arbitrary code execution...

Integer Overflow

gtkwave is vulnerable to Integer Overflow. The vulnerability is due to inadequate input validation, allowing a specially crafted .fst file to cause memory corruption when opened by a victim...

Injected Malicious Code

XZ is vulnerable to Injected Malicious Code. Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which...

Cross-site Scripting (XSS)

EasyCorp is vulnerable to the Cross-site Scripting XSS. The vulnerability is due to improper handling of the 'item' argument in the Autocomplete function within the file assets/js/autocomplete.js of the Autocomplete component, leading to cross-site scripting XSS attacks...

Denial Of Service

codeigniter4/framework is vulnerable to Denial Of Service DoS. The vulnerability is due to insufficient validation in the formatMessage function within the language, allowing an attacker to consume a large amount of memory on the server...

Buffer Over-read

libzephyr.so is vulnerable to Buffer Over-read. The vulnerability is due to a flaw in the handling of malformed GATT packets by the BLE victim device when communicating with a malicious BLE device. This flaw allows the malicious BLE device to crash the victim device...

Denial Of Service (DoS)

Elasticsearch is vulnerable to Denial Of Service DoS. The vulnerability is due to a flaw that causes the Elasticsearch ingest node which parses PDF files to crash. Notably, this issue does not occur with password-protected or unencrypted PDF files, and requires the attachment processor to be...

Insufficient Access Control

Kimai is vulnerable to Insufficient Granularity of Access Control. This vulnerability is due to the viewothertimesheet permission between the UI and API performing differently, leading to unauthorized access to timesheet entries...

Remote Code Execution (RCE)

aliyundrivewebdav is vulnerable to Remote Code Execution RCE. The vulnerability is due to insufficient input validation and sanitization of the sid parameter of the actionqueryqrcode component, which allows attackers to execute arbitrary code...

Denial Of Service (DoS)

github.com/argoproj/argo-cd/ is vulnerable to Denial Of Service. The vulnerability is due to the loadRepoIndex function in the ArgoCD's helm package, which lacks limitations on the size and time while fetching data. An attacker can point ArgoCD to a malicious Helm registry, which results in an ou...

Improper Neutralization Of Special Elements In Output Used By A Downstream Component ('Injection')

Astro-Shield is vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection'. The vulnerability is caused due to inadequate validation of user-controlled content, potentially allowing the inclusion of malicious resources in the generated CSP heade...

Cross-Site Scripting (XSS)

TinyMCE is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper SVG sanitization, which allows an attacker to inject a SVG payload though an object or embed element, which results in Cross-Site Scripting...

Cross-Site Scripting (XSS)

TinyMCE is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper iframe restrictions, which allows an attacker add an iframe element with malicious code which will execute upon insertion. Note that malicious code will be sandboxed due to same-origin browser protections...

Path Traversal

Lektor is vulnerable to Path Traversal. The vulnerability is due to improper sanitization of user-supplied input, allowing an attacker to execute arbitrary shell commands via manipulated files within the templates directory...

Server-Side Template Injection (SSTI)

wintercms/winter is vulnerable to Server-side Template Injection SSTI. The vulnerability is due to insufficient input validation, allowing an admin authenticated remote attacker to execute arbitrary code by injecting a crafted payload into the CMS Pages field and Plugin components...

Information Leakage

@electron/packager is vulnerable to Information Leakage. The vulnerability is due to improper memory allocation during the bundling process, which can expose sensitive information such as environment variables or secret files...

Session Fixation

@workos-inc/authkit-nextjs vulnerable to Session Fixation. This vulnerability is due to the improper handling of expired sessions within session.ts. This allowing an attacker to reuse an expired session by controlling the x-workos-session header...

Cross Site Scripting (XSS)

JupyterHub is vulnerable to Cross Site Scripting XSS. The vulnerability is due to the mishandling of cookies on malicious subdomains, which allows an attacker to achieve unauthorized access and control over a user's session and potentially gain full access to the JupyterHub API or the user's...

Unauthorized Access

oro/platform is vulnerable to Unauthorized Access. The vulnerability is due to inadequate access control measures within the OroPlatform's handling of page state data, which allows logged-in users to access the page state data of pinned pages belonging to other users by exploiting pageId hashes...

Unrestricted Upload Of File With Dangerous Type

ZITADEL is vulnerable to Unrestricted Upload of File with Dangerous Type. The vulnerability is caused by bypassing the ContentTypeAllowed function in asset.go with a malicious avatar image upload. Files with MIME types not intended for use as avatar images are allowed. To be vulnerable, a differe...

Insecure Direct Object Reference (IDOR)

pimcore/pimcore is vulnerable to Insecure Direct Object Reference IDOR. This vulnerability is due to insufficient access controls and improper handling of session information within the Pimcore platform. Specifically, the flaw arises from the platform's failure to properly restrict access to...