Path Traversal

jupyterlsp is vulnerable to Path Traversal. The vulnerability due to Installations of jupyter-lsp running in environments without configured file system access control. This flaw allows an attacker to modify the jupyter root directory...

Heap Buffer Overflow

libaom.so is vulnerable to Heap Overflow. The vulnerability is due to improper input validation during resizing of frames, while performing multi-threaded encode. The attacker can perform a heap overflow & crash the application by exploiting this vulnerability...

Denial Of Service

libarchive.so is vulnerable to Denial Of Service. The vulnerability is due to improper input validation in the WARC parser within the warcread function in libarchive/archivereadsupportformatwarc.c. This issue can be exploited by an attacker via crafting a malicious WARC file resulting in Denial O...

Heap Buffer Overflow

libxml2 is vulnerable to Heap Buffer Overflow. The vulnerability is due to improper bound checking. This issue can be exploited by an attacker via parsing a malicious file to execute arbitrary code within the context of an unprivileged process...

Side Channel Vulnerability

Libgcrypt is vulnerable to Side Channel Vulnerability. The vulnerability is due to improper input validation within the Curve25519 algorithm located in cipher/ecc.c and mpi/ec.c. An attacker can possibly exfiltrate the private key as a result of this side channel attack...

Buffer Overflow

Vyper is vunlnerable to Buffer Overflow. The vulnerability is caused by buildIR for concat improperly adhering to the API of copy functions for =0.3.2 the copybytes function which results in Buffer Overflow...

Use After Free

libcurl.so is vulnerable to Use After Free. The vulnerability is due to improper freeing of an easy handle within the Curlclose function. The application frees the struct without assigning it to a null pointer. The usage of previously freed memory could lead to data corruption or lead to a crash ...

Html Injection

libSOGo.so is vulnerable to HTML injection. The vulnerability is due to improper HTML sanitization within the SOGo Web Mail component, allowing an attacker to preform a phishing attack...

Cross Site Scripting (XSS)

avo is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper sanitization of text passed in error or succeed messages within the Avo::BaseAction subclass. An attacker can inject arbitrary JavaScript into the message fields resulting in XSS...

Timing Attack

github.com/kudelskisecurity/crystals-go is vulnerable to Timing Attack. The vulnerability is caused due to variations in the execution time of cryptographic algorithms, which allows an attacker to gain information about the secret key...

Cross-Site Request Forgery (CSRF)

pyLoad is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to a missing SameSite attribute for the session cookie. This allows an attacker to perform a Cross-Site Request Forgery CSRF attack via an API call...

Account Take Over

gitlab is vulnerable to Account Take Over. The vulnerability is caused due to a missing validation of email addresses provided while resetting account passwords. An attacker can exploit this vulnerability to send reset emails to an unverified email address and can effectively reset the...

Use Of Hard-Coded Credentials

@evershop/evershop is vulnerable to the Use Of Hard-Coded Credentials. The vulnerability is due to the exposure of a weak HMAC secret. Attackers can use the predictable secret to create valid JSON Web Tokens JWT, which allows them access to sensitive information...

Arbitrary Code Execution

Jasper-Software is vulnerable to Arbitrary Code Execution. The vulnerability is caused due to a missing range check in the JPC. This allows a local attacker to execute arbitrary code...

SQL Injection

shopware/core and shopware/platform are vulnerable to SQL Injection. The vulnerability is caused due to a missing sanitization in the name field of the aggregations object while performing a search operation in Shopware application API. An attacker can exploit this using time-based SQL queries...

Denial Of Service (DoS)

Drupal is vulnerable to Denial of Service DoS. The vulnerability is caused due to improper handling of structural elements, which can result in Denial of Service...

Improper Authorization

@evershop/evershop is vulnerable to Improper Authorization. The vulnerability is due to lack of authorization checks while accessing GraphQL endpoints, resulting in Remote attackers extracting sensitive information...

Broken Access Control

shopware/core and shopware/platform are vulnerable to Broken Access Control. The vulnerability is due to a insufficiency in verifying user authorizations for actions that modify the payment, delivery, and/or order status resulting in users lacking write permissions for orders being able to change...

Cross Site Scripting (XSS)

avo is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper sanitization of the keyvalue parameters within keyvaluecontroller.js. An attacker can inject arbitrary Javascript into the victim's browser...

Privilege Escalation

templated-dictionary is vulnerable to Privilege Escalation. The vulnerability is caused due to absence of proper sandboxing mechanisms during the expansion and execution of Jinja2 templates. This allows an attacker to define configuration tags that potentially lead to privilege escalation or code...

Cross-site Scripting (XSS)

readthedocssphinxsearch is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper sanitization of user content in the search results rendering function. This potentially allowing an attacker to include arbitrary HTML content in these results and that can leads to XSS...

Sensitive Information Exposure

org.apache.solr: solr-core is vulnerable to Sensitive Information Exposure. The vulnerability is caused due to publishing all unprotected environment variables available to each Apache Solr instance thorough Solr Metrics API. An attacker can access Sensitive Information by exploiting this...

Integer Overflow

libidn2.so is vulnerable to Integer Overflow. The vulnerability is due to the use of an unsigned integer llen in a loop condition, which could overflow due to the post-increment operation in the loop. This can potentially lead to Denial of Service...

Improper Input Validation

libidn2.so is vulnerable to Improper Input Validation. The vulnerability is due to improper roundtrip checks while converting A-labels to U-labels. This makes it possible for an attacker to impersonate arbitrary domains...

Remote Code Execution

Apache IoTDB is vulnerable to Remote Code Execution. The vulnerability is due to the UDF component, which allows an attacker execute arbitrary code...

Path Traversal

Apache Shiro is vulnerable to Path Traversal Vulnerability. The vulnerability is due to improper validation and sanitization of respective path before processing. This issue can be exploited by an attacker to perform authentication bypass...

Directory Traversal

fastify-swagger-ui is vulnerable to Directory Traversal. The vulnerability is caused due to a default configuration issue in @fastify/swagger-ui .If the baseDir option is not set, the module exposes all files in its directory through the HTTP route it serves. This allows an attacker to gain...

Improper Certificate Validation

CPAN.pm is vulnerable to Improper Certificate Validation. The vulnerability is caused due to not verifying TLS certificates when downloading distributions over HTTPS because verifyssl is missing when using HTTP::Tiny library during the connection. This can allow an attacker to inject into the...

Improper Certificate Validation

HTTP::Tiny is vulnerable to Improper Certificate Validation. The vulnerability is caused due to an Insecure Default Initialization of Resource flaw where TLS certificates were not verified by default. This can lead to loss of confidentiality, integrity, and availability...

Improper Certificate Validation

GitLab::API::v4 is vulnerable to Improper Certificate Validation. The vulnerability is caused due to not verifying TLS certificates when connecting to a GitLab server. This can be exploited to enable machine-in-the-middle attacks...

Improper Authentication Limits

wwbn/avideo is vulnerable to Improper Authentication Limits. The vulnerability is due to a lack of login attempt restrictions. An attacker can send a specially crafted HTTP request which leads to a captcha bypass. This allows the attacker to brute force the user credentials...

Buffer Overflow

libuev.so is vulnerable to Buffer Overflow. The vulnerability is due to insufficient maxevents validation within uev.c. An attacker can perform a buffer overflow by submitting a large maxevents value...

Buffer Overflow

libebml.so is vulnerable to Buffer Overflow. The vulnerability is caused due to insufficient buffer size checks of in MemIOCallback.cpp. An attacker can perform a buffer overflow by providing a crafted input...

Insecure Direct Object Reference

nextjs is vulnerable to Insecure Direct Object Reference Vulnerability. The vulnerability is due to a logical flaw within the auth function in the App Router, and getAuth within the Pages Router. This issue can be exploited by an attacker to gain unauthorized access or conduct privilege escalatio...

Recovery Notification Bypass

WWBN AVideo is vulnerable to Recovery Notification Bypass. The vulnerability is due to a flaw in the captcha validation functionality of the userRecoverPass.php script. This issue can be exploited by an attacker to create a recovery pass code for any user...

Privilege Escalation

WWBN AVideo is vulnerable to Privilege Escalation. The vulnerability is due to improper salt generation functionality within the application. An attacker can exploit this issue via crafting malicious HTTP requests leading to the recovery of the admin password...

Use After Free

sqlite3 is vulnerable to a Heap Based Use After Free. The vulnerability is caused due to a flaw in function jsonParseAddNodeArray within sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and...

Heap Buffer Overflow

UPX is vulnerable to a heap-based buffer overflow. The vulnerability is due to the variable 'bucket' pointing to an inaccessible address in the function PackLinuxElf32::invertptdynamic at plxelf.cpp which can be exploited by attackers to execute arbitrary code or cause a denial of service...

Heap-Based Buffer Overflows

upx-ucl:sid is vulnerable to Heap-Based Buffer Overflows. The vulnerability due to the generic pointer 'p' points to an inaccessible address in func getle32. It could leads to allows an attacker exploits in multi heap buffer overflow...

Heap Buffer Overflow

UPX is vulnerable to a heap-based buffer overflow. The vulnerability is due to the variable 'bucket' pointing to an inaccessible address in the function PackLinuxElf64::invertptdynamic at plxelf.cpp, allowing attackers to potentially execute arbitrary code or cause a denial of service by exploiti...

Heap-Based Buffer Overflow

upx-ucl:sid is vulnerable to Heap-based buffer overflow. The vulnerability due to by more checking of DTGNUHASH and DTHASH tables in upx commit src/plxelf.cpp. It allow an attacker to change the file sizes finally will leads to memory out of bounds...

Heap-Based Buffer Overflow

upx-ucl:sid is vulnerable to Heap-based buffer overflow. The vulnerability due to the generic pointer 'p' points to an inaccessible address in func getle32. It allow an attacker exploit with improper operations leads to memory out of bounds...

Cross Site Scripting(XSS)

spip:sid is vulnerable to Cross Site ScriptingXSS. This vulnerability due to input fromrequest is not restricted to safe characters. It allow an attacker to change files in ecrire/public/assembler.php...

Buffer Overflow

librecad:sid is vulnerable to buffer overflow. The vulnerability due to get the Unauthorized access for DBF file. It allow an attacker get access could extract the sensitive information and changes the record length...

Buffer Overflow

Asterisk is vulnerable to Buffer Overflow. The vulnerability is caused due a missing validation for the available buffer space while storing a new value of a PJSIPHEADER dialplan function in the update functionality. This can lead to overwriting memory or causing a crash resulting in Denial Of...

Denial Of Service

squid:buster is vulnerable to Denial Of Service. The vulnerability due to an Uncontrolled Recursion bug configured by sending a large X-Forwarded-For header when the followxforwardedfor feature. It allows a remote attacker to perform Denial of Service attack...

Buffer Overflow

gemmi:sid is vulnerable to Buffer overflow. The vulnerability due to long path exist in the tinydirfileopen function. It leads to memory corruption denial of service to potential arbitrary code execution...

Incorrect Authorization

openstack-keystone is vulnerable to Incorrect Authorization. The vulnerability is caused due to a flaw where only the first 72 characters of an application secret are verified. This allows attackers to bypass some password complexity which administrators may be counting on leading to compromising...

Denial Of Service

upx-ucl:sid is vulnerable to Denial Of Service. The vulnerability due to a failed crafted file passed to the the readx function unsignedlen getSize. It leads to allows attackers to cause a denial of service...

Out-of-bounds Write

qemu is vulnerable to Out-of-bounds Write. The vulnerability is due to there is no proper bounds checking in the virtionetflushtx function of QEMU's virtio-net device when certain guest features are enabled. This oversight allows for a stack-based buffer overflow, enabling a malicious user to...