Cross-site Request Forgery

blueocean is vulnerable to Cross-site Request Forgery. The vulnerability is due to a lack of requiring POST requests for an HTTP endpoint in GithubScm.java, which allows an attacker to view github credentials...

Buffer Overflow

ghostscript is vulnerable to Buffer Overflow. The vulnerability exists in the devnpcxwriterle function of gdevdevn.c, which allows a local malicious attacker to cause a denial of service via a crafted PDF file for a DEVN device with gs...

Arbitrary File Read

apache-airflow-providers-apache-spark is vulnerable to Arbitrary File Read. The vulnerability exists because the preparecommand function of sqoop.py does not properly validate the connection host field, which allows an attacker to pass malicious query param containing ?, leading to reading...

Denial Of Service (DoS)

libclamav.so is vulnerable to Denial of Service DoS attacks. The vulnerability is caused by an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding, resulting in denial of service conditions...

Buffer Overflow

Matthias-Wandel jhead is vulnerable to Buffer Overflow, it is caused by allowing attackers to execute arbitary code causing denial of service DoS...

SQL Injection

org.jeecgframework.boot:jeecg-boot-base-core is vulnerable to SQL Injection attacks. This vulnerability allows a local attacker to cause a denial of service DoS attack by injecting malicious SQL code into specially crafted requests. The vulnerability is caused by improper input validation in the...

Cross-site Request Forgery (CSRF)

org.jenkins-ci.plugins, favorite-view is vulnerable to Cross-Site Request Forgery. The vulnerability exists due to the lack of validation in the HTTP endpoint which allows an attackers to add or remove views from another user's favorite views tab bar...

Denial Of Service (DoS)

libprocps.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the ps option which allows an attacker to write unlimited amounts of unfiltered data into the process heap causing an application crash...

Cross-site Request Forgery

Folders Plugin is vulnerable to Cross-site Request Forgery. The vulnerability is due to a lack of requiring POST requests for an HTTP endpoint, which allows an attacker to copy a view inside a folder...

Information Disclosure

org.jenkins-ci.plugins, cloudbees-folder is vulnerable to Information Disclosure. The vulnerability exists because the library does not properly restrict the organization folder log file location, which allows an attacker to gain access to sensitive information in the system...

Credential Exposure

org.jenkins-ci.plugins, nodejs config-file-provide is vulnerable to information exposure. The vulnerability exists because it does not mask credentials for authentication in the npm config file, which results in credential exposure in the build log...

Cross-site Scripting (XSS)

@excalidraw/excalidraw is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to improper input sanitization via embedded links in whiteboard object which allows an attacker to inject and execute arbitrary JavaScript...

Information Exposure

org.jenkins-ci.plugins: config-file-provide is vulnerable to Information Exposure. The vulnerability is due to improper credential masking, which can result in credential exposure in build logs...

Arbitrary File Read

@tryghost/zip is vulnerable to Arbitrary File Read. The vulnerability exists because the module.exports function of extract.js does not properly restrict symbolic links in uploaded files, which allows an attacker to upload a symlink, leading to arbitrary files read on the operating system...

Improper Input Validation

github.com/woodpecker-ci/woodpecker is vulnerable to Improper Input Validation. The vulnerability occurs because the library does not properly validate webhook data, which could be used to take over the repository...

Double Free

libkrb5.so is vulnerable to Double Free. The vulnerability exists due to a failure in authorization data handling in the dotgsreq.c, which allows an attacker to cause the Key Distribution Center KDC to free the same pointer twice when incorrect data is copied from one ticket to another...

Prototype Pollution

tree-kit is vulnerable to Prototype Pollution. The vulnerability occurs because the extend function when the unflat option is set can be used to add arbitrary properties to an object , including properties that are not defined in the object's prototype which allows an attacker to execute arbitrar...

Cross-Site Scripting (XSS)

cockpit-hq/cockpit is vulnerable to Cross-Site Scripting XSS attacks. The vulnerability occurs because the library does not properly escape user input when rendering templates, allowing an authenticated attacker to inject malicious JavaScript code into a Cockpit page, which would then be executed...

Cross-Site Request Forgery (CSRF)

gin is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability occurs because the plugin does not require POST requests for an HTTP endpoint, which allows allows an attacker to copy a malicious folder, which could then be used to steal data or execute arbitrary code...

Cross-Site Scripting (XSS)

org.jenkins-ci.plugins:flaky-test-handler is vulnerable to Cross-Site Scripting XSS attacks. The vulnerability occurs because the plugin does not escape JUnit test contents when showing them on the Jenkins UI which could allow an attacker with access to the JUnit file content to inject malicious...

Server-Side Request Forgery (SSRF)

flarum/core and flarum/framework are vulnerable to Server-Side Request Forgery SSRF. The vulnerability exists due to the insecure implementation of the avatar upload functionality, which allows an attacker to upload files containing malicious URLs by spoofing the MIME type, resulting in SSRF...

Improper Access Control

maven-artifact-choicelistprovider is vulnerable to Improper Access Control. The vulnerability exists because the library does not set the appropriate context for credentials lookup, which allows an attacker with Item or Configure permission to access and capture credentials they are not entitled ...

Information Exposure

github.com/yaklang/yaklang is vulnerable to Information Exposure. The vulnerability exists because it does not properly validate information access permissions in httppool.go, which allows an attacker to read sensitive information in the system...

Denial Of Service (DoS)

libpoppler.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to null-pointer deference in the FoFiType1C::convertToType function of fofi/FoFiType1C.cc, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

libpoppler.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap buffer overflow in the FoFiType1C::cvtGlyph function of fofi/FoFiType1C.cc, allowing an attacker to cause an application crash...

Use After Free

libqpdf.so is vulnerable to Use After Free. The vulnerability exists due to a lack of entity value validations in the libqpdf parameter of PlAESPDF.cc. An attacker could exploit arbitrary code into the system...

Cross-site Scripting (XSS)

librenms/librenms is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to lack of sanitization of user inputs in multiple files which allows an attacker to inject and execute arbitrary javascript...

Arbitrary Code Execution

langchain is vulnerable to Arbitrary Code Execution. The vulnerability is caused by improper input sanitization in the prompt parameter, which could allow an attacker to execute arbitrary commands on the victim's system...

Arbitrary Code Execution

langchain is vulnerable to Arbitrary Code Execution. This vulnerability is caused by a flaw in the frommathprompt and fromcoloredobjectprompt functions, which could allow an attacker to execute arbitrary code on the victim's system by sending a specially crafted prompt...

Arbitrary Code Execution

langchain is vulnerable to Arbitrary Code Execution. The vulnerability is due to the usage of the exec python function in PythonAstREPLTool.run which can be exploited to execute arbitrary Python code through prompt injection...

Arbitrary Code Execution

llama-index is vulnerable to Arbitrary Code Execution. The vulnerability exists because of the improper handling of user input in the PandasQueryEngine function of the library, which allows an attacker to inject and execute malicious code due to the usage of the exec function...

Arbitrary Code Execution

pandasai is vulnerable to Arbitrary Code Execution. An attacker is able to exploit this vulnerability by sending a specially crafted request to the Pandas-AI server. This request would cause the server to execute arbitrary code with the privileges of the root user. The vulnerability exists in...

Arbitrary Code Execution

org.alluxio:alluxio-core-common is vulnerable to Arbitrary Code Execution. The vulnerability is due to the lluxio.util.CommonUtils.getUnixGroups method which improperly sanitizes the shell command which is used to get the Unix groups of a user. This allows an attacker to inject arbitrary code int...

Cross-site Scripting (XSS)

scancodeio is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to the lack of sanitization in the key parameter of licenses.py, which allows an attacker to inject and execute malicious JavaScript through the /license/ endpoint...

Improper Access Control

@keystone-6/core is vulnerable to Improper Access Control. The vulnerability exists when the ui.isAccessAllowed parameter in the KeystoneMeta function of adminMetaSchema.ts is set as undefined, which allows an attacker to access the admin meta GraphQL query if the session strategy is not defined...

Missing Authorization

The Mattermost is vulnerable to Missing Authorization. The vulnerability is due to not invalidating existing authorization codes when deauthorizing an OAuth2 app. This can result in attacker generating an access token by leveraging the existing authorization codes...

Cross-site Scripting (XSS)

cockpit-hq/cockpit is vulnerable to Stored Cross-site Scripting XSS. The vulnerability exists because xhtml files are not restricted which allows an attacker to upload a xhtml files in the assets manager, resulting in XSS when viewed...

Integer Overflow

libImlib2.so is vulnerable to Integer Overflow. The vulnerability exists due to invalid memory allocations which allows an attacker to cause an overflow and out-of-bound reads...

Buffer Overflow

libzephyr.so is vulnerable to Buffer Overflows. The vulnerability exists in the memcpy function at usbdcnativeposix.c due to not properly handling the buffer size, which allows an attacker to cause an application crash...

Cross-site Scripting (XSS)

external-svg-loader is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to the lack of input sanitization in the renderBody function of svg-loader.js, which allows an attacker to inject and execute malicious JavaScript through a maliciously crafted SVG...

Cross-site Scripting (XSS)

github.com/treeverse/lakefs is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the controller.go and getobject.go, which allows an attacker to inject and execute malicious JavaScript when opening a direct link to an HTML file via lakeFS...

Cross Site Scripting (XSS)

svelecte is vulnerable to Cross Site Scripting XSS. The vulnerability occurs when a user enters a specially crafted item name in the Svelte dropdown. Sites using Svelecte with dynamically created items from external or user-created content may be vulnerable to XSS attacks and clickjacking...

Denial Of Service (DoS)

postgresql is vulnerable to Denial Of Service DoS. This vulnerability occurs when a user sends a specially crafted MERGE command to PostgreSQL. If the command is valid, PostgreSQL could be tricked into entering an infinite loop which could prevent PostgreSQL from serving requests, resulting in a...

SQL Injection

postgresql is vulnerable to SQL injection. This vulnerability occurs when a user sends a specially crafted query that uses the @extowner@ function. If the query is valid, PostgreSQL could be tricked into executing arbitrary SQL code...

HTTP Request Smuggling

tornado is vulnerable to HTTP Request Smuggling. Tornado deviates from HTTP RFCs by interpreting the characters -, +, and in chunk length and Content-Length values. When used behind proxies that interpret non-standard characters differently, which can lead to request smuggling...

Denial Of Service (DoS)

libbind9.so is vulnerable to Denial Of Service DoS. The vulnerability exists when debug logging is turned on, due to assertion errors in renderecs which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libGraphicsMagick.so is vulnerable to Denial of Service DoS attacks. The vulnerability exists due to a divide-by-zero error in the ReadMNGImage function of png.c which allows an attacker to cause an application crash via a crafted mng file...

Denial Of Service (DoS)

libpoppler.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the open function in Outline.cc which allows an attacker to cause an application crash via a crafted PDF file...

Cross-site Scripting (XSS)

kindeditor is vulnerable to Cross-site Scripting.The vulnerability exists due to improper input sanitization in the content1 parameter of demo.jsp which allows an attacker to inject and execute malicious JavaScript into the browser...

Cross-site Scripting (XSS)

braft-editor is vulnerable to Cross-site Scripting. The vulnerability exists due to a lack of sanitization of HTML elements in the embed media feature, which allows an attacker to inject and execute malicious Javascript into the browser...