Stack-Based Buffer Overflow

gross is vulnerable to stack-based buffer overflow. The vulnerability is due to a stack-based buffer overflow in versions 0.9.3 through 1.x before 1.0.4. Remote attackers can exploit this vulnerability to trigger a denial of service grossd daemon crash or potentially execute arbitrary code in...

Denial Of Service (DoS)

XNIO API is vulnerable to Denial of Service DoS. The vulnerability is caused due to the problematic accumulation of notifier states within the chain. When this chain grows to be excessively large, it can lead to a StackOverflowException, overwhelming the stack and potentially causing Denial of...

Serverless Billing Attack

bref/bref is vulnerable to Serverless Billing Attack. The vulnerability is due to slow multi-byte string operations performed on the Content-Type header values in the Riverline/multipart-parser library used by Bref. It allows an attacker to send specially crafted requests, causing long operations...

HTML Injection

moodle/moodle is vulnerable to HTML Injection. The vulnerability due to Moodle's support for HTML code insertion within the Chat activity, which allows students to insert potentially harmful HTML elements that could lead to performance degradation...

Firewall Bypass

github.com/chirpstack/chirpstack-gateway-bridge/ is vulnerable to Firewall Bypass. The vulnerability is due to the firewall accepting specific TCP packets outside the ESTABLISHED connection state...

DNS Rebind Attack

Docker is vulnerable to DNS Rebind Attack. This vulnerability is due to the lack of proper isolation between containers and the host's DNS resolver, allowing malicious actors to exploit DNS rebinding to bypass network restrictions...

Arbitrary File Read

paddlepaddle is vulnerable to External Control of File Name or Path. The vulnerability is caused due to improper input validation within paddle.vision.ops.readfile, which allows an attacker to read arbitrary files on the system...

Server Side Request Forgery (SSRF)

mobsfscan is vulnerable to Server Side Request Forgery. The vulnerability due to inadequate input validation when extracting the android:host hostname attribute within the AndroidManifest.xml file, allowing attackers to manipulate requests and potentially make connections to internal-only service...

Denial Of Service (DOS)

github.com/argoproj/argo-cd is vulnerable to Denial Of Service. The vulnerability is due to the in-memory data storage which does not persist on restart, which allows attackers to perform unlimited login attempts and potentially disrupt services...

Container Escape

github.com/containers/buildah is vulnerable to container escape. The vulnerability is due to improper Containerfile validation which allows a dummy image with a symbolic link to the host's root filesystem as a mount source. This flaw enabling the mount operation to incorporate the host root...

Remote Code Execution

friendsofsymfony1/symfony1 is vulnerable to Remote Code Execution. The vulnerability is due to the ability to abuse the destruct methods in Swift Mailer classes, which can be exploited to execute arbitrary PHP code if a developer unserializes untrusted user input...

Improper Authentication

github.com/mattermost/mattermost-server is vulnerable to Improper Authentication. The vulnerability is due to improper verification of account ownership when switching from email to SAML authentication. This flaw allowing an authenticated attacker to take over other user accounts via a crafted...

Denial Of Service (DOS)

github.com/mattermost/mattermost-server is vulnerable to a Denial of Service. The vulnerability is due to missing limits on the number of @-mentions processed per message, allowing an authenticated attacker to crash the client applications of other users via large, crafted messages...

Cross-Site Scripting

github.com/mattermost/mattermost-server is vulnerable to Cross-Site Scripting. The vulnerability is due to improper escaping of user-controlled outputs when generating HTML pages. This flaw allows an attacker to execute scripts in the context of another user's browser session...

Cross-Site Request Forgery (CSRF)

esphome is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability exists due to inadequate validation of incoming requests within webserver.py, allowing an attacker to perform unauthorized actions on configuration files such as creating, editing, or deleting files...

Cross-Site Request Forgery (CSRF)

anchorcms/anchor-cms is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is caused due to insufficient validation for requests, allowing malicious actors to forge requests and execute unauthorized actions on behalf of authenticated users...

Cross-Site Request Forgery (CSRF)

anchorcms/anchor-cms is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to improper request validation, which allows an attacker to forge requests and execute unauthorized actions on behalf of authenticated users...

Improper Access Control

Anope is vulnerable to password reset of suspended accounts. The vulnerability is due to a lack of prevention mechanisms in versions before 2.0.15, allowing the resetting of passwords for suspended accounts...

Improper Authorization

python is vulnerable to Improper Authorization. The vulnerability is due to dereferencing symlinks during cleanup of permissions-related errors, potentially allowing users with the ability to run privileged programs to modify permissions of files referenced by symlinks in certain situations...

Asymmetric Resource Consumption

python is vulnerable to Asymmetric Resource Consumption. This vulnerability is due to an issue in the zip format, allowing for the creation of zip-bombs with a high compression ratio...

Denial Of Service (DoS)

node-tar is vulnerable to Denial of service DoS. The vulnerability is caused by to lack of validation on the number of folders created during the folder creation process. This allows an attacker to consume excessive CPU and memory resources, potentially causing the system to become unresponsive o...

Code Injection

getgrav/grav is vulnerable to Code Injection. The vulnerability is due to unrestricted access to the Twig extension class from the Grav context. This flaw allows attackers to redefine configuration variables and bypass previous Server-Side Template Injection SSTI mitigations...

Server-Side Template Injection

getgrav/grav is vulnerable to Server-Side Template Injection. The vulnerability is due to insufficient sandboxing and validation of user-defined Twig template functions and filters, allowing authenticated users to execute arbitrary code on the server...

Path Traversal

getgrav/grav is vulnerable to Path Traversal. The vulnerability is due to missing .. sanitization of upload file paths, which allows an attacker to replace or create files with specific extensions such as .json, .zip, .css, .gif, etc...

Arbitrary Code Execution

getgrav/grav is vulnerable to Arbitrary Code Execution. This vulnerability is due to improper validation of accessible functions through the Utils::isDangerousFunction and the lack of restrictions on twig functions like twigarraymap, allowing attackers to bypass the validation and execute arbitra...

SQL Injection

github.com/layer5io/meshery is vulnerable to a SQL injection. The vulnerability is due to improper input validation in GetMeshSyncResources function within meshsynchandler.go. This flow allows a remote attacker to obtain sensitive information via the order parameter...

Code Injection

getgrav/grav is vulnerable to Code Injection. The vulnerability is due to unrestricted access to the twig extension class from the Grav context within twig.php, which allows attackers to redefine the escape function and execute arbitrary commands...

Improper Private IP Handling

libzephyr is vulnerable to Improper Private IP Address Handling. The vulnerability is caused due to inadequate filtering mechanisms, resulting in packets with localhost addresses to bypass security checks...

Cross-Site Request Forgery (CSRF)

gradio is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to inadequate Cross-Origin Resource Sharing CORS validation, which allows an external websites to make requests to gradio applications running locally...

Sensitive Information Disclosure

Liferay Portal is vulnerable to Sensitive Information Disclosure. This vulnerability is due to improper handling of hashed passwords within the page source...

User Enumeration

Liferay Portal is vulnerable to a User Enumeration. The vulnerability is due to differences in response times of requests, allowing remote attackers to determine the existence of an account in the application...

Improper Privilege Management

Snowflake Hive MetaStore Connector is vulnerable to Improper Privilege Management. The vulnerability is caused due to improper content validation within the addsnowflakehivemetastoreconnectorscriptaction.sh script, allowing a malicious actor to replace the valid content with malicious code,...

Expression Language Injection

OpenMetadata is vulnerable to Expression Language Injection. The vulnerability is due to in validateExpression function evaluates SpEL expressions using a StandardEvaluationContext, This enabling interaction with Java classes like java.lang.Runtime, ultimately resulting in Remote Code Execution...

Denial Of Service (DoS)

jwcrypto is vulnerable to Denial Of Service DoS. The vulnerability is due to there is no proper validation on the length of tokens being processed by JWCrypto in the file jwe.py. This flaw allowing an attacker being able to exploit a high compression ratio in a malicious JWE Token, consuming...

Expression Language Injection

OpenMetadata is vulnerable to Expression Language Injection. The vulnerability is caused due to a lack of proper authorization checks, allowing attackers to execute arbitrary code by exploiting Expression language injection in the CompiledRule::validateExpression method...

Cross Site Scripting(XSS)

survey-creator is vulnerable to Cross Site Scripting XSS. This vulnerability is due to improper handling of the title parameter in form within string-editor.ts. This flows allows an attackers to execute arbitrary code and obtain sensitive information...

Cross-Site Request Forgery (CSRF)

github.com/owncast/owncast is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to allowing cross-origin requests using function RequireAdminAuth in the auth.go file, This flows enabling attackers to access privileged information such as the admin password by exploiting the...

Arbitrary Code Execution

ldap-account-manager vulnerable to arbitrary code execution. The vulnerability is due to improper log file path validation, allowing attackers to create a PHP file and log PHP code to it, which can be executed when accessed via the web...

Denial Of Service (DoS)

node-tar is vulnerable to Denial of service DoS. The vulnerability is caused due to lack of validation on the number of folders created during the folder creation process.This allows an attackers to consume excessive CPU and memory resources, potentially causing the system to become unresponsive ...

Clickjacking

Firefox is vulnerable to Clickjacking. The vulnerability is due to permission prompt input delay expiring while the window is not in focus, allowing malicious websites to exploit it...

Integer Overflow

Firefox, Firefox ESR, Thunderbird is vulnerable to integer overflow leading to out-of-bounds write. The vulnerability is due to integer overflows in AppendEncodedAttributeValue, ExtraSpaceNeededForAttrEncoding, and AppendEncodedCharacters, causing underallocation of an output buffer, which can...

Return-Oriented Programming(ROP)

thunderbird:sid, firefox-esr:sid is vulnerable to Return-Oriented ProgrammingROP. The vulnerability is due to improper handling of return registers, potentially allowing attackers to execute arbitrary code by overwriting them with controlled values...

Improper Input Validation

firefox is vulnerable to Improper Input Validation. The vulnerability is due to improper data handling leading to the creation of invalid Wasm values, potentially converting arbitrary integers into pointer values...

Out-of-Memory

thunderbird is vulnerable to Out-of-Memory. The vulnerability is due to the library's previous behavior of attempting to continue execution despite encountering out-of-memory conditions, which could potentially lead to exploitation...

Arbitrary Code Execution

firefox is vulnerable to Arbitrary Code Execution. The vulnerability is due to memory safety bugs leading to memory corruption which could be exploited to execute arbitrary code...

Memory Corruption

thunderbird is vulnerable to Memory Corruption.The vulnerability is due to improper handling of memory allocation or deallocation, It allows for potential memory corruption within the Firefox and Thunderbird applications, which could lead to the execution of arbitrary code by attackers...

Denial Of Service (DoS)

Firefox is vulnerable to Denial Of Service DoS. The vulnerability is caused due to improper sanitization of data when decoding a QUIC ACK frame, potentially leading to memory exhaustion and system crashes...

Code Execution

thunderbird is vulnerable to Code Execution. The vulnerability is due to insufficient input validation of certain code paths within the SafeRefPtr class, allowing the attacker to execute arbitrary code...

Permissions Bypass

thunderbird is vulnerable to a Permissions Bypass. The vulnerability is due to a missing delay on pointer lock usage, allowing a malicious page to deceive users into granting permissions...

Content Security Policy Bypass

firefox-esr is vulnerable to Content Security Policy Bypass. The vulnerability is due to insufficient validation of nonce values, allowing attackers to bypass strict content security policies...