Path Traversal

iodine is vulnerable to Path Traversal . The vulnerability is due to improper validation or URL's allowrf to manipulate the static file server. This issue can be exploited by an attacker to read files outside the public folder via a malicious URL...

Information Leak

pycryptodome and pycryptodomex are vulnerable to Information Leakage. The vulnerability is caused due to a side-channel leakage for OAEP decryption Optimal Asymmetric Encryption Padding used during RSA encryption. This can be exploited to mount a Manger attack leading to Information Leakage throu...

Server Side Request Forgery (SSRF)

dtale is vulnerable to Server Side Request Forgery. The vulnerability is due to the Load From the Web configuration being enabled by default. This issue can be exploited by an attacker to access files on the local network resulting in Server Side Request Forgery...

Open Redirect

Flarum is vulnerable to Open Redirect. The vulnerability is caused due to a lack of proper sanitization in the handling of the redirect parameters within the /logout route. This allows an attacker to craft a URL with a malicious redirect parameter...

Insufficient Randomness

github.com/cubefs/cubefs is vulnerable to use of insufficient random strings. The vulnerability due to creation of the accessKey which is insufficiently random. This allow an attacker to predict and/or guess the generated string and impersonate a user thereby obtaining higher privileges...

Information Disclosure

github.com/cubefs/cubefs is vulnerable to Information Exposure. The vulnerability is due to CubeFS leaking configuration keys in plaintext logs. This allow the attacker to read sensitive data from the logs and allow anyone to carry out operations on blobs...

Information Disclosure

github.com/cubefs/cubefs is vulnerable to Information Exposure. The vulnerability is due to the leakage of users secret keys and access keys in the logs in multiple components. This allow an attackers with access to the logs to retrieve sensitive information and impersonate other users...

Race Condition

Audited is vulnerable to Race Condition. The vulnerability is caused due lack of proper synchronization mechanisms during the use of Thread.current. This potentially leads to logging of wrong username in an audit log...

Denial Of Service (DoS)

paddlepaddle is vulnerable to Denial Of Service DoS.The vulnerability is caused due to a floating point exception in paddle.linalg.eig when the tensor dimensions contain 0. This can cause a runtime crash and a Denial Of Service DS...

Cross Site Scripting (XSS)

govuktechdocs is vulnerable to Cross Site Scripting XSS. The vulnerability is caused due to lack of proper input validation in the search results of pages. This allows an attacker to inject arbitrary HTML or scripts into the search results, resulting in Cross Site Scripting XSS...

Command Injection

PaddlePaddle is vulnerable to Command Injection. The vulnerability is caused due to improper command validation within the wgetdownload' method. The attacker can execute arbitrary commands on the operating system...

Denial Of Service (DoS)

PaddlePaddle is vulnerable to Denial Of Service DoS. The vulnerability is caused due to out of bounds access within paddle.mode. The attacker can trigger a runtime crash resulting in DoS...

Stored Cross Site Scripting (XSS)

class.upload.php is vulnerable to Stored Cross Site Scripting. The vulnerability is due to improper validation on uploaded files. This issue can be exploited by an attacker via uploading malicious files leading to the execution of arbitrary JavaScript...

Stack Based Buffer Overflow

paddlepaddle is vulnerable to Stack Based Buffer Overflow. The vulnerability is caused due to impropper shape validation within the paddle.linalg.luunpack function. This can lead to crashing of the application resulting in Denial of Service DOS...

Cross Site Scripting (XSS)

viewcomponent is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper rendering of a component directly from the controller with the viewcomponent gem. This issue can be exploited by an attacker to inject malicious Javascript into the webpage...

Information Disclosure

Kruise-daemon is vulnerable to Information Disclosure. The vulnerability is due to improper access to root privileges on the node where the kruise-daemon runs. This issue can be exploited by an attacker with root privileges to where the kruise-daemon runs to list all the secrets in the entire...

Integer Overflow

commonmarker is vulnerable to Integer Overflow . This vulnerability is due to unauthenticated remote access when parsing tables who's marker rows contain more than UINT16MAX columns. This allows the remote attackers to cause heap memory corruption which ranges from Information Leak to Arbitrary...

Denial Of Service

paddlepaddle is vulnerable to Denial Of Service DoS. The vulnerability is caused due to a nullptr exception in paddle.putalongaxis. The attacker can trigger a runtime crash which would result to DoS...

Denial Of Service (DoS)

encodedid-rails is vulnerable to Uncontrolled Resource Consumption. The vulnerability is caused due to improper length validation within the id parameter. This allows an attacker to send a request with an exceptionally long id parameter resulting in a Denial of Service DoS...

Denial Of Service (DoS)

paddlepaddle is vulnerable to Denial Of Service DOS. The vulnerability is caused due to a Null pointer dereference within the paddle.crop function when tensor dims are invalid. This leads to an application crash resulting in Denial Of Service DoS...

Improper Web Parameter Validation

httparty is the vulnerability of External Control of Assumed-Immutable Web Parameter. The vulnerability is caused due to The lack of escaping of the " Double-Quote character in Content-Disposition filename. This allows the attacker to modify the application data...

NULL Pointer Dereference

libgpac.so is vulnerable to NULL Pointer Dereference. The vulnerability is due to the gfavcchangevui function within avparsers.c because there is no validation on the avcc pointer utilizing it. This can lead to a null pointer dereference, resulting in Denial of Service...

Improper Input Validation

froxlor/froxlor is vulnerable to Improper Input Validation. The vulnerability is due to validation.js which does not effectively handle whitespace inputs in the form fields, which allowed users to escape the mandatory field checks...

Denial Of Service (DoS)

paddlepaddle is vulnerable to Floating Point Exception. The vulnerability is due to lack of validation for the num parameter in unstack function within manipulation.py. This allows attackers to potential misuse the num value, leading to issues like Floating Point Exceptions FPE in scenarios where...

SQL Injection

net.mingsoft: ms-mcms is vulnerable to SQL Injection. The vulnerability exists via the category Type parameter within /content/list.do, which allows an attacker to manipulate the backend database by injecting malicious SQL commands...

Denial Of Service

PaddlePaddle is vulnerable to Denial Of Service. The vulnerability is due to a nullptr exception in paddle.dot. This can cause a runtime crash resulting in Denial of Service...

Arbitrary File Read

org.apache.inlong: manager-pojo is vulnerable to Arbitrary File Read. The vulnerability is caused due to lack of validation performed while deserializing untrusted data. An attacker can perform an arbitrary file read using mysql driver...

Insecure Cryptographic Algorithms

github.com/karmada-io/karmada is vulnerable to Insecure Cryptographic Algorithms. The vulnerability is due to the default cipher suits as part of the TLS protocol, which includes the 3DES cypher that is deemed insecure. Attackers could exploit this weaknesses to break TLS security...

Remote Code Execution

org.apache.inlong:manager-pojo is vulnerable to Remote Code Execution. The vulnerability is caused due to a lack of validation within the updateAuditSource class. An attacker can inject code which would lead to RCE...

Cross-site Scripting (XSS)

tinymce is vulnerable to Cross-Site Scripting. The vulnerability is due to a lack of proper sanitization for iframe, object and embed URL attributes within the TinyMCE's core parser. This allows an attacker to insert a specially crafted piece of content into the editor using the clipboard or APIs...

Privilege Escalation

github.com/gravitational/teleport is vulnerable to Privilege Escalation. The vulnerability is due to a flaw in the implementation of access list feature, which allows an attacker to escalate their privileges...

Prototype Pollution

plotly.js is vulnerable to Prototype pollution. The vulnerability is caused due to missing validation against the proto attribute and other internal getters and setters. An attacker can pollute the prototype with properties containing harmful values, which is subsequently used by application...

Timing Attack

github.com/cubefs/cubefs is vulnerability to Timing Attack. The vulnerability is due to raw string comparisons within the CubeFS master component. This allow an attacker to steal user passwords by observing the timing between password attempts...

Heap Buffer Overflow

PaddlePaddle is vulnerable to Heap Buffer Overflow. The vulnerability is due to the paddle.repeatinterleave function when using invalid params, which can result in Denial of Service or information disclosure...

Unauthorized SFTP Access

teleport is vulnerable to unauthorized SFTP access. The vulnerability allows an attacker with access to teleport nodes within the cluster to initiate SFTP connections to the Proxy Service, resulting in unauthorized access to the service...

Privilege Escalation

craftcms/cms is vulnerable to Privilege Escalation. The vulnerability is due to the actionSave function within ElementsController.php, because there are no checks for save permissions before and after applying POST params to the element, as well as the actionSaveUser function within...

Server Side Request Forgery

github.com/gravitational/teleport is vulnerable to Server Side Request Forgery SSRF. The vulnerability is caused due to lack of proper validation or restrictions of the destinations for SSH connections initiated through the proxy or agents. This allows an authenticated user with valid credentials...

Stack Overflow

Ion Java is vulnerable to Stack Overflow. The vulnerability is due to improper validation while deserializing Ion text encoded data, or deserializing Ion text or binary encoded data into an IonValue model. This issue can be exploited by an attacker via crafted malicious Ion data, resulting in...

Denial Of Service (DoS)

github.com/cubefs/cubefs is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of incoming HTTP requests in a CubeFS HandlerNode that could allow an authenticated users to send maliciously-crafted requests that would crash the ObjectNode. An attacker can send a...

Denial Of Service (DoS)

PaddlePaddle is vulnerable to Denial Of Service DoS. The vulnerability is caused due to floating point exception within the paddle.lerp function, which may cause a runtime crash and Denial Of Service DoS...

Buffer Overflow

PaddlePaddle is vulnerable to Buffer Overflow. The vulnerability is caused due to missing input size checks within the paddle.searchsorted function, which may lead to Denial of Service DoS...

Denial Of Service (DoS)

PaddlePaddle is vulnerable to Denial Of Service DoS. The vulnerability is due to improper checks in the paddle.nextafter function, which may cause a runtime crash resulting in Denial of Service DoS...

Code Execution

teleport is vulnerable to Code Execution. The vulnerability is due to improper validation on user supplied environment variables. This issue can be exploited by an attacker to execute arbitrary code on the MacOS systems...

Denial Of Service (DOS)

PeterO.Cbor is vulnerable to Denial Of Service. The vulnerability is due to use of less efficient data structures like regular a Dictionary that are not optimized for performance. An attacker can exploit this inefficiency by decoding specially crafted CBOR data which can potentially lead to Denia...

Denial Of Service (DOS)

paddlepaddle is vulnerable to Denial Of Service DoS. The vulnerability is caused due to an uncaught floating point exception which is thrown from the paddle.nanmedian function while evaluating a numel / stride expression when the stride variable has a value of zero. This leads to a run time crash...

SQL Injection

gilacms/gila is vulnerable to SQL Injection. The vulnerability is due to the improper santization of the Area parameter within the AdministrationWidget tab, which allows an attacker to execute arbitrary web scripts which results in SQL injection...

SQL Injection

gilacms/gila is vulnerable to SQL Injection. The vulnerability is due to improper userid parameter sanitization within the login portal, which allows an attacker to execute arbitrary web scripts which results in SQL injection...

SQL Injection

gilacms/gila is vulnerable to SQL Injection. The vulnerability is due to improper ID parameter sanitization within login portal endpoint, which allows an attacker to execute arbitrary web scripts resulting in SQL injection...

Mutation Cross Site Scripting (mXSS)

OWASP AntiSamy is vulnerable to Mutation Cross Site Scripting mXSS. The vulnerability is due to improper parsing of HTML when the preserveComments directive is enabled in the policy. This issue can be exploited by an attacker by injecting malicious input to execute arbitrary JavaScript...

Code Injection

ShifuM is vulnerable to Code Injection. The vulnerability is due to improper handling of the FilterExpression argument within the Java Expression Language Handler in the src/main/java/ml/shifu/shifu/core/DataPurifier.java file. This issue can be exploited by an attacker by manipulating the...