Use-After-Free

Google Chrome is vulnerable to use-after-free. the vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Out-of-Bounds Write

chromium is vulnerable to Out-of-Bounds Write. The vulnerability is due to improper handling of memory boundaries within the Blink library, which can be exploited by malicious HTML content...

Out-of-bounds Read

onnx is vulnerable to an Out-of-bounds Read. The vulnerability is due to missing buffer size checks which results in an off by one string copy within the ONNXASSERT and ONNXASSERTM functions...

Insecure Deserialization

autoprognosis is vulnerable to Insecure Deserialization. The vulnerability is due to loading untrusted data from loadmodelfromfile function within the Release Note Handler component, resulting in Command Injection...

Heap Corruption

fastecdsa is vulnerable to Denial of Service DoS. The vulnerability is due to the curvemathmul function within curveMath.c being used and interpreted as a user-defined type without proper initialization, leading to potential arbitrary free, realloc, null pointer dereference, and other issues, as...

Information Exposure

sanitize-html is vulnerable to Information Exposure. The vulnerability is due to the parsing of CSS through the style attribute without disabling source maps, which can allow attackers to infer the file system structure and dependencies of the server...

Arbitrary File Read

Appwrite is vulnerable to Directory Traversal. The vulnerability is due to insufficient validation of user-supplied input when creating an ACME challenge file, allowing an attacker to manipulate the request URI to access arbitrary files. The vulnerability is only exploitable if the...

Server Side Request Forgery (SSRF)

org.springframework:spring-web is vulnerable to Open Redirect. The vulnerability is due to insufficient validation checks of the host URL within UriComponentsBuilder.java. If an application utilizes the host validation checks, an attacker can perform an open redirect or Server-Side Request Forger...

Denial Of Service (DoS)

.NET is vulnerable to Denial Of Service Dos. The vulnerability is due to improper handling of x509 certificates, which can result in Denial of Service DoS...

Cross Site Scripting (XSS)

baserproject/basercms is vulnerable to Cross Site Scripting XSS. The vulnerability is due to inadequate input validation, allowing attackers to inject malicious scripts into the search functionality...

Cross-Site Scripting (XSS)

enhavo/enhavo-app is vulnerable to Cross Site Scripting XSS. The vulnerability is due to insufficient input validation in the Undertitle text field, enabling attackers to insert malicious code that is then executed within the context of the website...

Timing Attack

gradio is vulnerable to Timing Attack. The vulnerability is due to string comparisons in Python terminating early upon encountering a string mismatch. This allows an attacker to take advantage of the default lack of rate-limiting, to brute-force the correct username and password of an account...

Unrestricted File Upload

github.com/apache/incubator-answer is vulnerable to Unrestricted File Upload. The vulnerability is due to missing file type checks, which allows an attacker to upload large Pixel files will cause the server to run out of memory, resulting in Denial of Service DoS...

Path Traversal

typo3/cms is vulnerable to Path Traversal. The vulnerability is due to improper type check allowing attackers to bypass directory traversal checks by supplying an invalid UTF-8 encoding sequence...

Race Condition

github.com/apache/incubator-answer is vulnerable to a Race Condition. The vulnerability is due to improper synchronization during user registration, specifically when users rapidly submit multiple registrations using scripts. This can lead to the registration of multiple user accounts with the sa...

Cross Site Scripting (XSS)

labelstudio is vulnerable to Cross Site Scripting XSS. The vulnerability is due to not sanitizing the file in the "data import" function via the file upload feature before being rendered within the Choices or Labels tag. An attacker can inject malicious scripts into the code or imported data whic...

Cross Site Scripting (XSS)

mjml is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper input validation for HTML entities. This allows an attacker to insert untrusted data into MJML templates, which can result in Cross Site Scripting XSS...

External Control Of Filename

phenx/php-svg-lib is vulnerable to External Control of Filename. The vulnerability is due to insecure handling of inline CSS font definitions, allowing an attacker to deserialize a PHAR file through the phar:// URL handler. Note that remote code execution is only possible on PHP versions less the...

Cross-Site Scripting

github.com/apache/incubator-answer is vulnerable to Cross-site Scripting XSS. The vulnerability is due to inadequate sanitization of user input in the summary field, which allows a logged-in attacker to inject malicious code when modifying their own submitted question...

Cross-site Scripting (XSS)

Enhavo is vulnerable to Cross-site Scripting XSS. The vulnerability is due to the Create Tag functionality, allowing attackers to inject arbitrary web scripts or HTML via a crafted payload into the Create Tag field within the New/Edit Article panel...

Chosen-Ciphertext Attack (KyberSlash)

pypqc vulnerable to a chosen-ciphertext attack. The vulnerability is caused by to an attacker submitting numerous ciphertexts for decryption and observing the response, potentially allowing them to recover the private key...

Cross-site Scripting (XSS)

enhavo is vulnerable to Cross-Site Scripting XSS. The vulnerability due to inadequate sanitization of user-supplied input in the Title text field, enabling attackers to inject and execute arbitrary scripts or HTML...

Cross Site Scripting (XSS)

baserproject/basercms is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper sanitation with the content management feature in View/Helper/BcAdminFormHelper.php, which allows an attacker to inject and execute arbitrary JavaScript in the browser...

Permissive Cross-domain Policy With Untrusted Domains

Fiber is vulnerable to Permissive Cross-domain Policy with Untrusted Domains. The vulnerability is due to insecure configurations, specifically allowing the Access-Control-Allow-Origin header to be set to a wildcard while also setting Access-Control-Allow-Credentials to true, contrary to...

Server Side Request Forgery (SSRF)

github.com/grafana/grafana-csv-datasource is vulnerable to Server Side Request Forgery SSRF. The vulnerability is due to improper validation of user input, allowing attackers to craft requests to endpoints within the local network...

Arbitrary Code Execution

pymatgen is vulnerable to Arbitrary Code Execution. The vulnerability is due to missing input sanitization within the JonesFaithfulTransformation.fromtransformationstr method, allowing an attacker to execute malicious code within the context of the application...

Cross-Site Scripting(XSS)

Liferay Portal and Liferay DXP are vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient sanitization in the HtmlUtil.escapeJsLink method, This flaws allowing remote attackers to inject arbitrary web script or HTML via crafted javascript: style links...

Cross Site Scripting

Liferay Portal is vulnerable to Cross Site Scripting. The vulnerability is present in the Users Admin module's edit user page. The vulnerability is due to insufficient sanitization of user input in the "Name" text field, allowing remote authenticated users to inject arbitrary web script or HTML v...

Cross-site Scripting (XSS)

Liferay Portal is vulnerable to stored cross-site scripting. The vulnerability is due to the improper neutralization of input during web page generation which allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into the first/middle/last name te...

Arbitrary Code Execution

phenx/php-svg-lib is vulnerable to Arbitrary Code Execution. The vulnerability due to lack of validation of the font-family attribute. An attacker can parse a Scalable Vector Graphics SVG containing a PHAR url within the the font family attribute, potentially leading to arbitrary code execution...

Cross-site Scripting (XSS)

Liferay Portal is vulnerable to stored cross-site scripting XSS. The vulnerability is due to improper neutralization of input during web page generation which allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into the name text field of a...

Cross-site Scripting (XSS)

Liferay Portal is vulnerable to Stored cross-site scripting XSS. The vulnerability is due to inadequate input validation, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted payload into a document's “Title” text field...

Cross Site Scripting

Liferay Portal is vulnerable to Cross Site Scripting. The vulnerability is due to inadequate input validation and output sanitization on the Language Override edit screen, allowing remote attackers to inject arbitrary web script or HTML via the...

Denial Of Service (DoS)

Helm is vulnerable to Denial Of Service DoS. The vulnerability is due to missing checks during the parsing of index and plugin YAML files leading to a crash when either an index.yaml file or a plugin.yaml file are missing metadata...

Denial Of Service (DoS)

cryptography is vulnerable to Denial Of Service DoS. The vulnerability is caused when a certificate's public key and the provided private key do not match, and the hmachash method is called within the privateFormat.PKCS12.encryptionbuilder object. This vulnerability allows an attacker to crash th...

Cross-site Scripting (XSS)

The Calendar module in Liferay Portal is vulnerable to Cross-site Scripting. The vulnerability is due to not escaping the user-supplied data in the default notification email template, which allows remote authenticated users to inject arbitrary web script or HTML via the title of a calendar event...

Cross-Site Scripting

Liferay portal is vulnerable to reflected cross-site scripting XSS. The vulnerability is due to insufficient input validation that allows remote attackers to inject arbitrary web script or HTML via a crafted payload into the “Blocked Email Domains” text field in the instance settings for Accounts...

Cross-Site Scripting

liferay portal is vulnerable to cross-site scripting XSS. The vulnerability is due to improper input validation in the portlet.js module of the Frontend JS library. This flaws allowing attackers to inject arbitrary web script or HTML via the anchor hash part of a URL...

Cross-Site Scripting

Liferay Portal is vulnerable to reflected cross-site scripting XSS. The vulnerability is due to insufficient input validation. This flaw allowing a remote attackers to inject arbitrary web script or HTML via the comliferayrolesadminwebportletRolesAdminPortlettabs2 parameter on the add assignees t...

Cross-Site Scripting

liferay portal is vulnerable to stored cross-site scripting XSS. The vulnerability is due to improper validation of the filename of an attachment in the Message Board widget, allowing remote authenticated users to inject arbitrary web script or HTML...

Cross-Site Scripting

liferay.portal are vulnerable to stored cross-site scripting XSS. The vulnerability is due to improper input validation in the Dynamic Data Mapping module's DDMForm, allowing remote authenticated users to inject arbitrary web script or HTML via the instanceId parameter...

Missing Encryption

github.com/cilium/cilium is vulnerable to Missing Encryption. The vulnerability is due to a lack of encryption to/from the Ingress and health endpoints when CRDs are used to store the Cilium state and Wireguard transparent encryption is enabled, which allows an attacker to eavesdrop on the...

Open Redirect

com.liferay.portal, release.dxp.bom is vulnerable to Open Redirect. The vulnerability is caused due to allowing user supplied input in URLs as a redirect target and not sanitizing the user supplied input in the adaptive media administration page. This allows remote attackers to redirect users to...

Invalid Memory Access

firefox is vulnerable of Invalid Memory Access. The vulnerability due to incorrect object was checked for NULL in the built-in profiler which potentially leads to invalid memory access and undefined behavior...

Cache Poisoning

firefox is vulnerable to Cache Poisoning. The vulnerability is due to incorrect sharing of cache between the fetch API and navigation, as the cache key does not include optional headers that fetch may contain. It allows an attacker could potentially poison the local browser cache by priming it wi...

Buffer Overflow

Firefox and Thunderbird are vulnerable to Buffer Overflow. The vulnerability is due to memory safety issues, some of which indicate evidence of memory corruption. It is presumed that with sufficient effort, these bugs could be exploited to execute arbitrary code...

Incorrect Code Generation

Firefox, Firefox ESR, and Thunderbird are vulnerable to incorrect code generation. The vulnerability is due to incorrect code generation, specifically affecting 32-bit ARM devices. This issue could result in unexpected numeric conversions and potential undefined behavior...

Arbitrary Code Injection

Firefox, Firefox ESR, and Thunderbird are vulnerable to Arbitrary Code Injection. The vulnerability is due to the incorrect honoring of Set-Cookie response headers in multipart HTTP responses. If an attacker could manipulate the Content-Type response header and control part of the response body,...

Unexpected Mouse Re-positioning

Firefox, Firefox ESR, and Thunderbird are vulnerable to unexpected mouse re-positioning. The vulnerability is due to a combination of exiting fullscreen mode and using requestPointerLock on a malicious website. This could lead to the user's mouse being re-positioned unexpectedly, causing confusio...

Integer Overflow

dav1d is vulnerable of integer overflow. The vulnerability due to improper memory allocation in dav1d AV1 decoder that can occur when decoding videos with large frame size. it could indeed lead to memory corruption and pose a security risk...