Apache SystemDS 3.4.0 Unauthenticated Java Deserialization

Summary SystemDS is an open source ML system for the end-to-end data science lifecycle from data integration, cleaning, and feature engineering, over efficient, local and distributed ML model training, to deployment and serving. To this end, it provides a stack of declarative languages with R-lik...

Apache PDFBox 3.0.8 Flate PNG Predictor Disproportionate Heap Allocation DoS

Summary The Apache PDFBox library is an open source Java tool for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command-line utilities...

Kemana Directory 1.5.6 Remote Code Execution

Summary Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana. Unique Kemana's features including: CMS engine based on our qEngine, multiple directories support, user friendly administration control panel, easy to use custom fields,...

Squirrelcart v3.5.4 (table) Remote Cross-Site Scripting Vulnerability

Summary Squirrelcart PHP Shopping Cart software is a fully customizable, robust php shopping cart, designed with the advanced developer and web novice in mind. Description Squirrelcart suffers from a XSS issue due to a failure to properly sanitize user-supplied input to the 'table' GET parameter ...

Sony PC Companion 2.1 (Admin_RemoveDirectory()) Stack-based Unicode Buffer Overload

Summary PC Companion is a computer application that acts as a portal to Sony Xperia and operator features and applications, such as phone software updates, management of contacts and calendar, media management with Media Go, and a backup and restore feature for your phone content. Description The...

Manx cms.xml 1.0.1 (ajax_get_file_listing.php) Multiple XSS Vulnerabilities

Summary Manx is a Content Management System that uses xml text files to store the page contents, instead of a mysql database. Description Input thru the GET parameters 'limit' and 'searchfolder' in 'ajaxgetfilelisting.php' are not sanitized allowing the attacker to execute HTML code into user's...

Online Grades 3.2.5 Multiple XSS Vulnerabilities

Summary Online Grades is the leading free-software project that allows K-12+ student grades attendance information to be posted onto a dynamic web site. Description Online Grades suffers from multiple cross-site scripting vulns. The issue is triggered when input passed via multiple parameters to...

Tugux CMS 1.2 Multiple Remote Vulnerabilities

Summary Tugux CMS is a free, open-source content Management system CMS and application that powers the entire web. Description The application suffers from multiple issues including: reflected and stored xss, sql Injection, local file inclusion, url redirection. Vulnerable parameters include:...

Ajaxel CMS 8.0 Multiple Vulnerabilities

Summary Ajaxel CMS is very simple ajaxified CMS and framework for any project needs. Description Ajaxel CMS version 8.0 and below suffers from multiple vulnerabilities inlcuding LFI, XSS, SQL injection and remote code execution via CSRF. Ajaxel CMS 8.0 Multiple Vulnerabilities Vendor: Ajaxel...

web@all CMS 2.0 (_order) SQL Injection Vulnerability

Summary web@all is a PHP content management system CMS. If you know about it,you nearly can use it to do anything. Description The application suffers from an SQL Injection vulnerability. Input passed via the GET parameter 'order' is not properly sanitised before being returned to the user or use...

GAzie 5.10 (Login parameter) Multiple Remote Vulnerabilities

Summary GAzie is a multi-company management program ERP that runs on Apache web server with support for PHP and Mysql database. Open Source web-based application for small and medium enterprises. Description GAzie is prone to a cross-site scripting and an SQL Injection vulnerability because it...

Xplico 0.5.7 (add.ctp) Remote XSS Vulnerability

Summary The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email POP, IMAP, and SMTP protocols, all HTTP contents, each VoIP call SIP, FTP, TFTP, and so on. Xplico isn’t a network protocol analyzer...

J. River Media Jukebox 12 MP3 File Handling Remote Heap Overflow PoC

Summary Media Jukebox 12 is a media player application for playing various media files on a Windows machine. Description Media Jukebox 12 suffers from a heap overflow vulnerability when processing .mp3 files and its metadata ID3 tags. When a malicious .mp3 file is played the application pops out ...

Got All Media 7.0.0.3 (t00t) Remote Denial of Service Exploit

Summary Got All Media is a Home theater PC application for Microsoft Windows platforms. Description Got All Media is exposed to a remote denial of service issue when processing URI requests. This issue occurs when the application handles an HTTP GET request over TCP port 5550. !/usr/local/bin/per...

Apache Curator 5.9.0 Java Deserialization

Summary Apache Curator is a Java/JVM client library for Apache ZooKeeper, a distributed coordination service. It includes a high level API framework and utilities to make using Apache ZooKeeper much easier and more reliable. It also includes recipes for common use cases and extensions such as...

Netlux Antivirus 1.0.1.8 Session Manager Service Privilege Escalation

Summary Netlux Antivirus is an award-winning product that provides comprehensive protection against all types of viruses,trojans,malwares and spywares, secures your data, protects your privacy and ensures your PC remains virus-free. Description The Netlux Antivirus suffers from an unquoted search...

Monstra 1.2.1 Multiple HTML Injection Vulnerabilities

Summary Monstra is fast and small content management system written in PHP! It's free, open source and easy to use from the start! Description Monstra suffers from multiple stored XSS vulnerabilities when parsing user input to the 'menuitemlink', 'menuitemname' and 'pagetitle' parameters via POST...

MantisBT <=1.2.3 (db_type) Cross-Site Scripting & Path Disclosure Vulnerability

Summary MantisBT is a free popular web-based bugtracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a webserver. MantisBT has been installed on Windows, Linux, Mac OS, OS/2, and others. Almost any web browser should be able to...

Apache Bigtop Manager 1.1.0 (TarballExtractor) Arbitrary File Write

Summary Bigtop Manager is a modern, AI-driven web application designed to simplify the complexity of bigdata cluster management. Provides an easy deployment solution not only for Apache Bigtop components, but also other community version bigdata components. Description Apache Bigtop Manager suffe...

Apache Impala 4.5.1 Insufficient Authorization Remote Code Execution

Summary Apache Impala is a modern, open source, distributed SQL query engine for open data and table formats. Description Apache Impala versions 2.7.0 through 4.5.1 suffer from an insufficient authorization vulnerability that leads to remote code execution. A table created with STORED BY JDBC tak...

phpBugTracker 1.0.5 Multiple Reflected XSS Vulnerabilities

Summary phpBugTracker is a web-based bug tracker with functionality similar to other issue tracking systems, such as Bugzilla. Design focuses on separating the presentation, application, and database layers. phpBugTracker is lightweight and easy to install, operate and administer. Most text can b...

Deimos Kasa <= 2.58 (table) Local Integer Overflow Vulnerability

Summary Deimos Kasa is a Windows restaurant management software. Description Deimos Kasa is prone to an integer overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input in the table field. Successfully exploiting these issues may allow local attackers to...

Apache Celix 2.4.0 EDEF XML Parser Heap-Based Buffer Overflow

Summary Apache Celix is an implementation of the OSGi specification adapted to C and C++. It is a framework to develop dynamic modular software applications using component and/or service-oriented programming. Description Apache Celix suffers from a heap-based buffer overflow vulnerability in its...

Apache OzHera 2.2.6 Authenticated SQL Injection

Summary Apache OzHeraIncubating is an Application Performance Monitoring APM platform designed for the cloud-native era. It revolves around applications and integrates capabilities such as metric monitoring, distributed tracing, logging, and alerting. The platform's mission is to enhance the onli...

Apache Submarine 0.8.0 Authentication Bypass / Remote Code Execution

Summary Apache Submarine Submarine for short is an End-to-End Machine Learning Platform to allow data scientists to create end-to-end machine learning workflows. On Submarine, data scientists can finish each stage in the ML model lifecycle, including data exploration, data pipeline creation, mode...

Apache Airflow 3.3.2 (mask_secret()) Secrets Masker Deep-Nesting Secret Leak

Summary Apache Airflow is an open-source platform for developing, scheduling, and monitoring workflows, such as traditional time based or event-triggered batch-oriented data pipelines, machine learning, model training, and agentic or LLM-based workloads. Airflow’s extensible Python framework...

Apache ResilientDB 1.12.0 Uncontrolled Memory Allocation DoS

Summary Apache ResilientDB is a High Throughput Yielding Permissioned Blockchain Fabric founded by ExpoLab at UC Davis in 2018. ResilientDB advocates a system-centric design by implementing a multi-threaded architecture with deep pipelines. Further, ResilientDB separates the ordering of client...

Apache HugeGraph 1.7.0 Sandbox Bypass Remote Code Execution

Summary HugeGraph is a full-stack graph system covering graph database, graph computing, and graph AI. It provides complete graph data processing capabilities from storage and real-time querying to offline analysis, and supports both Gremlin and Cypher query languages. Description Apache HugeGrap...

Apache Doris 4.1.5 JDBC Catalog Arbitrary File Read

Summary Apache Doris is a high-performance, real-time analytical database based on the MPP architecture. Known for being efficient, simple, and unified, it returns query results over massive datasets within sub-second latency, and a single system supports both high-concurrency point queries and...

Apache NuttX RTOS 13.1.0 6LoWPAN HC06 Decompressor Kernel Out-of-Bounds Write

Summary Apache NuttX is a free and open-source FOSS real-time operating system RTOS with an emphasis on standards compliance and small footprint. Scalable from 8-bit to 64-bit microcontroller environments, the primary governing standards in NuttX are POSIX and ANSI standards. Additional standard...

Apache Avatica 1.29.0 JDBC Connection Property Injection

Summary Avatica is a framework for building database drivers. Avatica is defined by a wire API between a client and a server. The Avatica server is an HTTP server, the Avatica client is a JDBC driver, and the wire API is defined by JSON or Protobuf Buffers. The flexibility of the wire API and HTT...

Apache Qpid Dispatch Router 1.19.0 Remote Stack Overflow

Summary A high-performance, lightweight AMQP 1.0 message router, written in C and built on Qpid Proton. It provides flexible and scalable interconnect between any AMQP endpoints, whether they be clients, brokers or other AMQP-enabled services. Description Apache Qpid Dispatch suffers from a...

Apache MINA Vysper 0.7 Unbounded XML Buffer Pre-Auth DoS

Summary Apache Vysper is an XMPP eXtensible Messaging and Presence Protocol server, also known as Jabber, designed to run stand-alone or embedded in another application and work with any compliant XMPP client. Description Apache MINA Vysper is an XMPP server that suffers from a remote,...

Apache YuniKorn 1.9.0 LDAP Group Provider Panic Denial of Service

Summary Apache YuniKorn is a light-weight, universal resource scheduler for container orchestrator systems. It is created to achieve fine-grained resource sharing for various workloads efficiently on a large scale, multi-tenant, and cloud-native environment. YuniKorn brings a unified,...

Apache AsterixDB 0.9.9 Missing Authentication

Summary Apache AsterixDB is a highly scalable data management system that can store, index, and manage semi-structured data, e.g., much like MongoDB, but it also supports a full-power query language with the expressiveness of SQL and more. Unlike analytics engines like Apache Hive or Apache Spark...

Apache IoTDB 2.0.11 Authenticated Server-Side Request Forgery

Summary Apache IoTDB is an industrial IoT time-series database management system that adopts a lightweight architecture with edge-cloud collaboration, supporting integrated collection, storage, management, and analysis of IoT time-series data. It features multi-protocol compatibility, ultra-high...

Apache Paimon 2.1.0 MySQL CDC Arbitrary File Read

Summary A lake format that enables building a Realtime Lakehouse Architecture with Flink and Spark for both streaming and batch operations. Innovatively combines lake format and LSM structure, bringing realtime streaming updates into the lake architecture. Description Apache Paimon's MySQL CDC...

Apache jclouds 2.7.0 XML External Entity (XXE) Injection

Summary Apache jclouds is an open source multi-cloud toolkit for the Java platform that gives you the freedom to create applications that are portable across clouds while giving you full control to use cloud-specific features. The jclouds API gives you the freedom to use portable abstractions or...

Apache NiFi MiNiFi C++ 1.0.0 Uncontrolled Memory Allocation

Summary MiNiFi - a subproject of Apache NiFi - is a complementary data collection approach that supplements the core tenets of NiFi in dataflow management, focusing on the collection of data at the source of its creation. Description Apache NiFi MiNiFi C++ contain an uncontrolled memory allocatio...

Apache RocketMQ Client C++ 2.2.0 (RemotingCommand::Decode) Out-of-Bounds Read

Summary RocketMQ-Client-CPP is the C/C++ client of Apache RocketMQ, a distributed messaging and streaming platform with low latency, high performance and reliability, trillion-level capacity and flexible scalability. Description Apache RocketMQ Client C++ suffers from a remote out-of-bounds read...

Apache Qpid Proton C API 0.40.0 Remote Stack Overflow

Summary Qpid Proton is a high-performance, lightweight messaging library. It can be used in the widest range of messaging applications, including brokers, client libraries, routers, bridges, proxies, and more. Proton makes it trivial to integrate with the AMQP 1.0 ecosystem from any platform,...

Apache CarbonData 2.3.2 Index Server Java Deserialization

Summary Apache CarbonData is an open-source, indexed columnar data storage format and database management system designed for fast interactive analytics on petabyte-scale big data platforms like Apache Hadoop and Apache Spark. Description Apache CarbonData suffer from a Java deserialization...

Apache Karaf Cellar 4.4.8 Remote Code Execution

Summary Apache Karaf Cellar is a complete clustering solution for Apache Karaf Container. Cellar can be directly installed on running Karaf Container instances. Description Apache Karaf Cellar suffers from an unauthenticated cluster-join vulnerability leading to remote code execution. The default...