Open Redirect

Liferay Portal is vulnerable to Open Redirect. The vulnerability is due to improper handling of the 'REPLACEMENT CHARACTER' U+FFFD in HtmlUtil.escapeRedirect, allowing remote attackers to redirect users to arbitrary external URLs...

Open Redirect

Liferay Portal is vulnerable to Open Redirect. The vulnerability exists due to improper input validation and sanitization in the HtmlUtil.escapeRedirect function within Liferay Portal, Liferay DXP. This allows remote attackers to redirect users to arbitrary external URLs via parameters such as th...

Cross Site Scripting(XSS)

Liferay Portal vulnerable to Cross-Site Scripting XSS. The vulnerability is due to inadequate input sanitization of blog entries in Liferay Portal and Liferay DXP. Specifically, the default configuration does not properly filter JavaScript from blog entry content, allowing remote authenticated...

Uncontrolled Resource Consumption

Liferay Portal is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to reliance on a request parameter to limit file size, enabling remote authenticated users to upload excessively large files to the system's temp folder by altering the 'maxFileSize' parameter...

Information Disclosure

Liferay Portal is vulnerable to Information Disclosure. The vulnerability is due to an enumeration of user screen names, allowing remote authenticated users to obtain a user's full name from the page's title. This potentially leads to Information Disclosure...

Exposed Dangerous Method Or Function

turboboost-commands is vulnerable to Exposed Dangerous Method or Functions. The vulnerability is due to the existing checks that aren't robust enough to prevent sophisticated attackers from invoking more methods than should be permitted. Although commands verify that the class must be a Command a...

Insecure Default Initialization Of Resource

Liferay Portal is vulnerable to Insecure Default Initialization of Resource. This vulnerability is due to the default value of the portal property http.header.version.verbosity being set to full, allowing remote attackers to easily identify the version of the application and its vulnerabilities v...

Open Redirect

Liferay Portal is vulnerable to Open Redirect. The vulnerability is due to improper validation of user-supplied input in the edit region page of Countries Management, allowing remote attackers to redirect users to arbitrary external URLs via the...

Arbitrary Code Execution

github.com/projectdiscovery/nuclei is vulnerable to Arbitrary Code Execution. The vulnerability is due to improper validation of signed workflows within the parseWorkflowTemplate function in workflows.go, which allows the execution of unsigned code templates through workflows...

Denial Of Service (DoS)

github.com/mattermost/mattermost-server is vulnerable to Denial of Service DoS. The vulnerability due to there is no proper validation or check on the length when setting the title in a run checklist in Playbooks. An attacker can send a specially crafted request and potentially leads to crash of...

Improper Check For Unusual Or Exceptional Conditions

Mattermost is vulnerable to Denial Of Service. The vulnerability is due to there is no proper validation for the type of the "reminder" body request parameter. This allows an attacker to crash the Playbook Plugin when updating the status dialog...

Improper Access Control

Mattermost is vulnerable to Improper Access Control. The vulnerability is due to Mattermost's failure to check whether a user is a guest when updating the tasks of a private playbook run. It allows a guest to update the task of a private playbook run if they know the run ID...

Uncontrolled Resource Consumption

Mattermost is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to Mattermost's failure to handle a null request body in the /add endpoint, which allows a simple member to send a request with a null request body to that endpoint, causing it to crash. After a few repetition...

Authorization Bypass

Mattermost is vulnerable to Authorization Bypass in Playbooks Plugin Endpoint. The vulnerability is due to Mattermost's failure to perform authorization checks in the /plugins/playbooks/api/v0/runs/add-to-timeline-dialog endpoint of the Playbooks plugin. This allows an attacker to obtain limited...

Denial Of Service (DoS)

iperf is vulnerable to a Denial Of Service DoS. The vulnerability is due to a flaw in the iperf utility, causing it to hang indefinitely while waiting for the remainder or until the connection is closed, allows a malicious or malfunctioning client to send less data than expected to the iperf serv...

Error Log Leakage

fgr is vulnerable to Error Log Leakage. The vulnerability is due to insufficient sanitization of error messages or tracebacks within the code. The vulnerability allows an attacker with access to the log stream to expose potentially sensitive information through error messages or tracebacks...

Incorrect Default Permissions

Liferay Portal is vulnerable to Incorrect Default Permissions. This vulnerability is due to insufficient access control mechanisms for guest users. The guest users can view any web content template by default. An attackers can exploit this to view any template via the UI or API...

Insecure Variable Substitution

github.com/go-vela/server is vulnerable to Insecure Variable Substitution. This vulnerability is due to the use of variable substitution combined with insensitive fields such as parameters, image, and entrypoint in Vela pipelines. The vulnerability allows an attacker to bypass log masking and...

Insertion Of Sensitive Information Into Log File

Kibana is vulnerable to Insertion of Sensitive Information into Log File. The vulnerability is caused due to improper handling of errors or debug logging, leading to the inclusion of credentials, API keys, and other sensitive data in Kibana logs. This potentially leads to Sensitive Information...

Sensitive Information Disclosure

Mattermost-plugin-playbooks is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper authorization checks when creating a playbook action. An attacker with limited privileges can leak sensitive playbook information, such as the playbook's name, by creating a playboo...

Server-Side Request Forgery (SSRF)

org.apache.cxf, cxf-rt-databinding-aegis is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due improper URL sanitisation which allows an attacker to perform SSRF attacks on web services that take at least one parameter of any type. Users of other data bindings, including the...

Username Enumeration

Vantage6 is vulnerable to Username Enumeration. This vulnerability is due to inadequate access controls of sensitive information due to the exposure of API routes /recover/lost and /2fa/lost, which allows unauthorized individuals to trigger password or Multi-Factor Authentication MFA token recove...

Improper Resource Shutdown Or Release

CoreWCF.NetFramingBase is vulnerable to Improper Resource Shutdown or Release. The vulnerability is due to a failure to close established connections after the timeout has occurred, which can result in Denial of Service. An attacker can trigger this vulnerability by either establishing a connecti...

Insecure Variable Substitution

github.com/go-vela/types is vulnerable to Insecure Variable Substitution. The vulnerability arises due to the unexpected behavior of variable substitution combined with insensitive fields like parameters, image, and entrypoint. This allows for bypassing log masking and exposing secrets without...

Sensitive Information Disclosure

Apache ZooKeeper is vulnerable to Sensitive Information Disclosure. The vulnerability is due to missing ACL checks in the persistent watcher feature. An attackers can monitor child znodes by attaching a persistent watcher to a parent node they already have access to. When the persistent watcher i...

Out-of-bounds Read

gpac is vulnerable to Out-of-bounds Read. The vulnerability is caused due to a lack of input validation in the gfdashsetupperiod function within dashclient.c. This can potentially lead to Denial of ServiceDoS...

Insecure CORS Configuration

vantage6 is vulnerable to Insecure CORS Configuration. This vulnerability is due to the absence of proper CORS configuration, which can allow unauthorized domains to access sensitive data...

Out-of-bounds Read

gpac is vulnerable to Out-of-bounds Read. The vulnerability is caused due to incorrect bounds checking when accessing the name array within swfparse.c. This allows an attacker to potentially execute arbitrary code or cause Denial of Service DoS...

Insecure Variable Substitution

github.com/go-vela/cli is vulnerable to Insecure Variable Substitution. The vulnerability arises due to the unexpected behavior of variable substitution combined with insensitive fields like parameters, image, and entrypoint. This allows for bypassing log masking and exposing secrets without usin...

Denial Of Service (DoS)

Mattermost is vulnerable to Denial of Service DoS. The vulnerability is due to a lack of limitation on payload size during JSON parsing, This Flaws allows an attacker to send an excessively large email payload and that can crash the server...

Credential Leakage

follow-redirects is vulnerable to Credential Leakage. The vulnerability is due to insufficient redaction of the proxy-authentication header when handing requests. If an attacker can trigger a cross domain redirect, they can capture the request header containing the sensitive proxy-auth header,...

Improper Authentication

wpasupplicant is vulnerable to the Improper Authentication vulnerability. The vulnerability arises because wpasupplicant can be configured to skip TLS certificate verification during Phase 1 authentication, and an eappeapdecrypt vulnerability can then be exploited to bypass Phase 2 authentication...

Performance Degradation

BIND is vulnerable to a performance degradation issue when a resolver cache contains a large number of ECS EDNS Client Subnet records for the same name, impacting query performance during the cache database cleanup process...

Denial Of Service

go is vulnerable to Denial Of Service. The vulnerability is due to insufficient handling of certificate chains containing certificates with unknown public key algorithms...

Interpretation Differences

net/mail in GO is vulnerable to Interpretation Differences. The vulnerability is due to the ParseAddressList function incorrectly handling comments text within parentheses inside display names. The parser handles the display names different then conforming address parsers, which could result in...

Sensitive Information Disclosure

go is vulnerable to Sensitive Information Disclosure. The vulnerability is due to errors returned from MarshalJSON methods containing user-controlled data, which can break contextual auto-escaping behavior, leading to unexpected content injection into templates...

Uncontrolled Resource Consumption

avahi is vulnerable to the Uncontrolled Resource Consumption. avahi library is vulnerable to a flaw that allows an unprivileged user to trigger a dbus call, leading to a crash of the avahi daemon...

Timing Side-Channel Attack

Firefox is vulnerable to Timing Side-Channel Attack. The vulnerability is caused due to the improper handling of timing during decryption, potentially enabling attackers to recover private data...

Reachable Assertion

Avahi is vulnerable to Reachable Assertion. the vulnerability is due to a reachable assertion in the dbussethostname function...

Reachable Assertion

Avahi is vulnerable to Reachable Assertion. the vulnerability is due to a reachable assertion in the avahirdataparse function...

Reachable Assertion

Avahi is vulnerable to Reachable Assertion. the vulnerability is due to a reachable assertion in the avahiescapelabel function...

Reachable Assertion

Avahi is vulnerable to Reachable Assertion. the vulnerability is due to a reachable assertion in the avahialternativehostname function...

Reachable Assertion

Avahi is vulnerable to Reachable Assertion. the vulnerability is due to a reachable assertion in the avahidnspacketappendrecord...

Out-of-bounds Write

openexr is vulnerable to due Out-of-bounds Write. The vulnerability is due to a failure in validating the number of scanline samples of an OpenEXR file containing deep scanline data. This vulnerability was addressed in versions v3.2.2 and v3.1.12 of the affected library...

Sensitive Information Disclosure

go is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the client not forwarding sensitive headers such as "Authorization" or "Cookie" when following an HTTP redirect to a domain that is not a subdomain match or exact match of the initial domain...

Memory Exhaustion

go is vulnerable to Memory Exhaustion. The vulnerability is due to the lack of proper enforcement of limits on the total size of parsed form data, leading to unbounded memory consumption while reading a single form line...

Denial Of Service (DOS)

intel-microcode is vulnerable to Denial Of Service. The vulnerability is due to a failure in the protection mechanism of the bus lock regulator, which may allow an unauthenticated user to potentially enable denial of service via network access...

Misinterpretation Of Input

amavis is vulnerable to Misinterpretation of Input. The vulnerability is due to an interpretation conflict in MIME email messages, allows incorrect checks for banned files or malware when multiple boundary parameters are present in the email message...

Denial Of Service (DOS)

Libreswan is vulnerable to Denial Of Service. The vulnerability is due to an issue where Libreswan restarts when a connection configured with PreSharedKeys authby=secret cannot find a matching configured secret. it can cause repeated crashes leading to a Denial of Service...

Use After Free

chromium is vulnerable to Use After Free.The vulnerability is due to improper handling of memory when processing crafted HTML pages, leading to potential heap corruption...