Improper Authorization

github.com/stacklok/minder is vulnerable to Improper Authorization. The vulnerability due to improper input validation and insufficient access controls in handlersrepositories.go file by using GetRepository function, allowing users to manipulate the query parameters to access or delete repositori...

Side Channel Attack

libmbedtls.so is vulnerable to Side Channel Attack. The vulnerability is due to a miscalculation in a countermeasure to the Lucky 13 attack, allowing an active network attacker to partially recover plaintext of messages under specific conditions by exploiting timing measurements...

Cross Site Scripting (XSS)

sidekiq-unique-jobs is vulnerable to Cross Site Scripting XSS. The vulnerability is due to insufficient validation of user input in the filter functions, allowing a remote attacker to obtain sensitive information via a crafted URL, resulting in cross-site scripting XSS...

Cross Site Scripting

concrete5/concrete5 is vulnerable to Cross Site Scripting. The vulnerability is due to insufficient validation of administrator-provided data in the Name field of a Group type, allowing a rogue administrator to inject malicious code. This code may execute when users visit the affected page...

Denial Of Service (DOS)

ethabi is vulnerable to a recursive Denial of Service. The vulnerability is due to a recursive pointer issue, specifically related to handling deeply nested array structures in payloads, An attacker can trigger an OverflowError by creating a Python integer too large to convert...

Insecure Handling Of HTTP Requests

tomphttp/bare-server-node is vulnerable to Insecure handling of HTTP requests. The vulnerability is due to improper validation or sanitization of incoming HTTP requests, potentially allowing attackers to manipulate web traffic or perform other malicious activities...

Double Free

libyyjson is vulnerable to Double Free. The vulnerability is due to a lack of loop checks in the poolfree function of pool series allocator. This flaw allows an attacker to execute arbitrary code remotely, resulting in Denial of Service DoS attacks...

Heap-use-after-free

sixlabors.imagesharp is vulnerable to a Heap-use-after-free. The vulnerability is due to improper handling of specially crafted PNG image files during conversion in its PngDecoderCore.cs file's InitializeImage function, potentially leading to information disclosure...

Buffer Overflow

Qpdf is vulnerable to Heap Buffer Overflow. The vulnerability is due to improper handling in the std::sharedcount function at /bits/sharedptrbase.h, allowing attackers to crash the application by exploiting the heap buffer overflow...

Password Reset Bypass

Directus is vulnerable to Password Reset Bypass. The vulnerability is due to the password reset mechanism implementation combined with default database configurations in MySQL and MariaDB. This allows attackers in possession of a known email address to redirect a password reset email intended for...

Deserialization Of Untrusted Data

phpPgAdmin is vulnerable to a deserialization flaw in untrusted data, potentially leading to remote code execution. The vulnerability is due to user-controlled data being directly passed to the PHP 'unserialize' function in multiple instances. For example, the 'ma' POST parameter in the...

Authorization Bypass

github.com/zeromicro/go-zero is vulnerable to Authorization Bypass. The vulnerability is due to lack of proper origin validation in handlers.go file. The attacker can bypass CORS policy and retrieve user data...

Sql Injection

github.com/jackc/pgx is vulnerable to Sql Injection. The vulnerability is due to lack of sanitization of user-input. The attacker can exploit this vulnerability by injecting malicious sql queries...

Sensitive Information Disclosure

Directus is vulnerable to an Sensitive Information Disclosure. The vulnerability is due to insecure handling of version information, as the exact version number is included in compiled JS bundles that are accessible without authentication. This exposes potential information that a malicious...

Information Disclosure

@sentry/react-native is vulnerable to Information Disclosure. The vulnerability is due to allowing auth tokens to be set in the optional authToken configuration parameter. This flaw potentially leads to Information Disclosure when built into the application bundle and published...

Denial Of Service (DoS)

Clojure is vulnerable to Denial of Service DoS. The vulnerability is caused due to a lack of input validation in the clojure.core$partial$fn5920 function, which is part of the deserialization process. When an attacker manipulates the deserialization of inputs, they can exploit this function to...

Object Constructor And Prototype Override

jsonata is vulnerable to Object Constructor And Prototype Override. The vulnerability is due to a malicious expression leveraging the transform operator to override properties on the Object constructor and prototype. This may lead to denial of service, remote code execution, or other unexpected...

SQL Injection

Lparse-server is vulnerable to a SQL injection when configured to use the PostgreSQL database. The vulnerability is due to inadequate input validation, allowing malicious SQL queries to be injected, particularly when interacting with a PostgreSQL database...

HTTP Header Injection

FullStackHero.WebAPI.Boilerplate is vulnerable to HTTP Header Injection. The vulnerability is due to insufficient input validation in the forgotten password functionality. This allows an attacker to manipulate the host header and leak sensitive information...

Sql Injection

github.com/jackc/pgproto3 is vulnerable to Sql Injection. The vulnerability is due to an integer overflow in the calculated message size, allowing an attacker to cause a single query or bind message to exceed 4 GB in size. This enables the attacker to control how the large message is sent,...

Authentication Bypass

github.com/coder/coder/ is vulnerable to Authentication Bypass. The vulnerability is due to inadequate verification of email domains, allowing an attacker to create an account with an unauthorized email...

Denial Of Service (DoS)

jose4j is vulnerable to Denial of Service DoS. The vulnerability is due to insufficient validation of a large p2c PBES2 Count value, allowing attackers to trigger excessive CPU usage. This potentially leads to Denial of Service DoS...

Access Control Bypass

sulu/sulu is vulnerable to Access Control Bypass. The vulnerability is due to a misconfiguration or flaw in the implementation of role-based access controls, permission checks or security settings, enabling users to bypass intended restrictions, which can leads to a significant security risk...

Privilege Escalation

app-builder-lib is vulnerable to Privilege escalation. The vulnerability is due to NSExec searching the current directory of the installer before searching the system's PATH when making a system call to open cmd.exe in the .nsh installer script. This flaw allows an attacker to exploit the situati...

Cross-Site Scripting (XSS)

org.apache.ambari, ambari is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient validation and constraint enforcement, resulting in a stored XSS. This could potentially be exploited to perform unauthorized actions, ranging from unauthorized data access to session...

CVE-2023-6917

performancecopilot/pcp is vulnerable to Creation of Temporary File With Insecure Permissions. The vulnerability is due to the mixed privilege levels utilized by systemd services associated with the package. While certain services operate within the confines of limited user/group privileges, other...

Incorrect Default Permissions

apache-airflow is vulnerable to Incorrect Default Permissions. The vulnerability is due to authenticated Ops and Viewers users being able to view all information on audit logs, including DAG names and usernames they were not permitted to view...

Improper Access Control

docassemble.base and docassemble.webapp are vulnerable to Improper Access Control. The vulnerability is due to improper validation of user-supplied input through URL parameters. An attacker can gain unauthorized access to information on the system by manipulating URLs to bypass access controls...

Overly Restrictive Account Lockout Mechanism

org.keycloak, keycloak-core is vulnerable to Overly Restrictive Account Lockout Mechanism. The vulnerability is due to improper handling of login attempts, which may allow a remote unauthenticated attacker to block other accounts from logging in by exploiting this flaw under certain conditions...

Improper Access Control

Suricata is vulnerable to Improper Access Control. The vulnerability is due to the way rules inspecting HTTP2 headers are implemented. An attacker can bypass these rules by splitting header frames...

Sensitive Information Disclosure

github.com/helm/helm/ is vulnerable to Sensitive Information Disclosure. The vulnerability is due to displaying secret values during a --dry-run call, posing a security risk of information disclosure, especially in CI/CD tool usage...

Path Traversal

langchain is vulnerable to Path Traversal. This vulnerability is due to a flaw in the loadchain function, allowing an actor to control the final part of the path parameter. This bypasses the intended behavior of loading configurations solely from a specific GitHub repository. The consequence coul...

Denial Of Service (DoS)

phpseclib/phpseclib is vulnerable to a Denial Of Service DoS. The vulnerability is due to a flaw in processing the ASN.1 object identifier of a certificate in ASN1.php file, where providing a sub identifier may lead to denial of service due to excessive CPU consumption during the decodeOID...

Remote Code Execution(RCE)

Nteract is vulnerable to Remote Code Execution RCE. The vulnerability is caused due to a lack of input validation in the Markdown link parsing functionality, allowing malicious actors to execute arbitrary code remotely...

Insecure Deserialization

Dataease is vulnerable to Insecure Deserialization. The vulnerability is due not considering URL encoding while blacklisting certain user-controllable jdbc parameters in the JDBC connection url while calling methods getExtraParams and URLDecoder.decodegetExtraParams within Mysql.java. An attacker...

Memory Leak

libming.so is vulnerable to Memory Leak. The vulnerability is due to a failure to free allocated heap memory for SWFFILLSTYLE in the fillstyle-FillStyles member during parsing of a crafted SWF file, leading to a Denial of Service DoS...

Denial Of Service (DoS)

phpseclib/phpseclib is vulnerable to a Denial Of Service DoS. The vulnerability is due to a flaw in handling malformed certificates in the phpseclib/Math/BigInteger.php file by using the method isPrime. It allows an attacker to trigger excessive CPU consumption during the isPrime primality check...

Cross-site Scripting (XSS)

Concrete CMS is vulnerable to cross-site scripting. The vulnerability is due to improper input validation, allowing an administrator to inject malicious code through the Layout Preset name, posing a risk of executing unauthorized scripts within the context of the targeted user's browser...

Memory Leak

libming/libming is vulnerable to Memory Leak. The vulnerability is due to a failure to free dynamically allocated memory for gerec-GlyphIndex, resulting in a denial of service DoS when processing a crafted SWF file...

Cross Site Scripting

sidekiq-unique-jobs is vulnerable to Cross Site Scripting XSS. The vulnerability is due to a missing input validation and output sanitization for the GET request parameters handled by the endpoints - /changelogs, /locks and /expiringlocks of the "admin" web UI. This can allow an attacker to...

Cross Site Scripting(XSS)

bagisto/bagisto is vulnerable to Cross Site ScriptingXSS.The vulnerability is due to insufficient validation of user-uploaded PNG files in the ThemeCustomizationRepository.php file by using the product review option, allowing attackers to inject malicious scripts into the application, posing a ri...

Cross Site Scripting(XSS)

org.apache.archiva, archiva-common is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper neutralization of input during web page generation, allowing malicious scripts to be injected into web pages. This poses a risk of executing arbitrary code in the context of a user's...

Type Confusion

Google Chrome is vulnerable to Type Confusion. The vulnerability is due to type confusion in the V8 engine of Google Chrome versions prior to 122.0.6261.94. A remote attacker could potentially exploit this by using a crafted HTML page to corrupt objects, leading to security issues...

Type Confusion

Google Chrome is vulnerable to Type Confusion. The vulnerability is due to type confusion in the V8 engine of Google Chrome versions prior to 122.0.6261.94. A remote attacker could potentially exploit this by using a crafted HTML page to corrupt objects, leading to security issues...

Integer Overflow

github.com/authzed/spicedb is vulnerable to Integer Overflow. The vulnerability is due to a potential panic scenario, rendering the server unavailable and this arises from an excessive number of relationships for a specific resource and subject type within any SpiceDB cluster. It may lead to...

Cross Site Request Forgery (CSRF)

mongo-express is vulnerable to Cross Site Request Forgery CSRF. The vulnerability is due a missing CSRF protection in an end point /admin. An attacker can exploit this to do unauthorized actions, such as deletion of a Collection...

Improper Authentication

ZenML Server is vulnerable to Improper Authentication. The vulnerability is due to the REST API /api/v1/users/usernameorid/activate allows access on the basis of a valid username along with a new password in the request body. An attacker can exploit this to mount remote privilege escalation...

Missing Critical Step In Authentication

Central Dogma is vulnerable to Missing Critical Step in Authentication. The vulnerability is due accepting unsigned SAML messages assertions, logout requests, etc. as they are when using SAML as the authentication mechanism instead of rejecting them. An attacker can forge a SAML message to...

Improper Input Validation

Apache DolphinScheduler is vulnerable to Improper Input Validation. The vulnerability is due to a missing input validation in method generateContentWithTaskParams for the parameter condition. An authenticated user can execute arbitrary, unsandboxed JavaScript on the server by submitting crafted...

Denial Of Service (DoS)

phpseclib/phpseclib is vulnerable to a Denial Of Service DoS. The vulnerability is due to a flaw in handling malformed certificates in the phpseclib/Math/BigInteger.php file by using the method isPrime. It allows an attacker to trigger excessive CPU consumption during the isPrime primality check...