mintplex-labs/anything-llm is vulnerable to multiple security issues due to improper input validation in several endpoints. An attacker can exploit these vulnerabilities to escalate privileges from a default user role to an admin role, read and delete arbitrary files on the system, and perform Serve...
AFFECTED_PRODUCTS:
Mintplexlabs Anythingllm
A remote code execution vulnerability exists in mintplex-labs/anything-llm due to improper handling of environment variables. Attackers can exploit this vulnerability by injecting arbitrary environment variables via the `POST /api/system/update-env` endpoint, which allows for the execution of arbitr...
AFFECTED_PRODUCTS:
Mintplexlabs Anythingllm
An improper authorization vulnerability exists in the mintplex-labs/anything-llm application, specifically within the '/api/v/' endpoint and its sub-routes. This flaw allows unauthenticated users to perform destructive actions on the VectorDB, including resetting the database and deleting specific n...
AFFECTED_PRODUCTS:
Mintplexlabs Anythingllm
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the oneflow.index_select parameter.
AFFECTED_PRODUCTS:
Oneflow Oneflow
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when an empty array is processed with oneflow.dot.
AFFECTED_PRODUCTS:
Oneflow Oneflow
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the oneflow.full parameter.
AFFECTED_PRODUCTS:
Oneflow Oneflow
An issue in the oneflow.permute component of OneFlow-Inc. Oneflow v0.9.1 causes an incorrect calculation when the same dimension operation is performed.
AFFECTED_PRODUCTS:
Oneflow Oneflow
Luxion KeyShot Viewer KSP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot Viewer. User interaction is required to exploit this vulnerability in that the target must visit...
AFFECTED_PRODUCTS:
Luxion Keyshot,
Luxion Keyshot Viewer
Luxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot Viewer. User interaction is required to exploit this vulnerability in that the target must...
AFFECTED_PRODUCTS:
Luxion Keyshot,
Luxion Keyshot Viewer
A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of A10 Thunder ADC. An attacker must first obtain the ability to execute low-privileged code on the target system in or...
AFFECTED_PRODUCTS:
A10Networks Advanced Core Operating System,
A10Networks Advanced Core Operating System,
A10Networks Advanced Core Operating System
... (+5)
A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of A10 Thunder ADC. Authentication is required to exploit this vulnerability.
The specific flaw exists within the CsrR...
AFFECTED_PRODUCTS:
A10Networks Advanced Core Operating System,
A10Networks Advanced Core Operating System,
A10Networks Advanced Core Operating System
... (+5)
A TarSlip vulnerability exists in the deepjavalibrary/djl, affecting version 0.26.0 and fixed in version 0.27.0. This vulnerability allows an attacker to manipulate file paths within tar archives to overwrite arbitrary files on the target system. Exploitation of this vulnerability could lead to remo...
AFFECTED_PRODUCTS:
Djl Deep Java Library
A Cross-Site Request Forgery (CSRF) vulnerability in significant-gravitas/autogpt version v0.5.0 allows attackers to execute arbitrary commands on the AutoGPT server. The vulnerability stems from the lack of protections on the API endpoint receiving instructions, enabling an attacker to direct a use...
AFFECTED_PRODUCTS:
Agpt Autogpt Classic
An issue in the oneflow.scatter_nd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when index parameter exceeds the range of shape.
AFFECTED_PRODUCTS:
Oneflow Oneflow
The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst (which can be considered traffic amplification in some cases), aka th...
The SuluFormBundle adds support for creating dynamic forms in Sulu Admin. The TokenController get parameter formName is not sanitized in the returned input field which leads to XSS. This vulnerability is fixed in 2.5.3.
AFFECTED_PRODUCTS:
Sulu Suluformbundle
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The vulnerability allows unauthorized access to the sensitive settings exposed by /api/v1/settings endpoint without authentication. All sensitive settings are hidden except passwordPattern. This vulnerability is fixed in 2.11...
AFFECTED_PRODUCTS:
Argoproj Argo Cd,
Argoproj Argo Cd,
Argoproj Argo Cd
An issue in `.npmrc` support in Deno 1.44.0 was discovered where Deno would send `.npmrc` credentials for the scope to the tarball URL when the registry provided URLs for a tarball on a different domain. All users relying on .npmrc are potentially affected by this vulnerability if their private regi...
AFFECTED_PRODUCTS:
Deno Deno
Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function addUser(). The users permission to add users to a project only get checked on the URL parameter project_id. If the user is authorized to add users to...
AFFECTED_PRODUCTS:
Kanboard Kanboard
The Jupyter Server provides the backend for Jupyter web applications. Jupyter Server on Windows has a vulnerability that lets unauthenticated attackers leak the NTLMv2 password hash of the Windows user running the Jupyter server. An attacker can crack this password to gain access to the Windows mach...
AFFECTED_PRODUCTS:
Jupyter Jupyter Server
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Itâs possible for authenticated users to enumerate clusters by name by inspecting error messages. Itâs also possible to enumerate the names of projects with project-scoped clusters if you know the names of the clusters. This v...
AFFECTED_PRODUCTS:
Argoproj Argo Cd,
Argoproj Argo Cd,
Argoproj Argo Cd
Directory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a crafted file uploaded to the _g and node parameters.
AFFECTED_PRODUCTS:
Cubecart Cubecart
An attacker with access to the private network (the charger is connected to) or local access to the Ethernet-Interface can exploit a faulty implementation of the JWT-library in order to bypass the password authentication to the web configuration interface and then has full access as the user would h...
AFFECTED_PRODUCTS:
Vw Id.charger Connect Firmware,
Vw Id.charger Connect Firmware,
Vw Id.charger Connect Firmware
... (+3)
Untrusted data deserialization vulnerability has been found in Mentor - Employee Portal, affecting version 3.83.35. This vulnerability could allow an attacker to execute arbitrary code, by injecting a malicious payload into the âViewStateâ field.
AFFECTED_PRODUCTS:
Summar Mentor
Sourcecodester Stock Management System v1.0 is vulnerable to SQL Injection via editCategories.php.
AFFECTED_PRODUCTS:
Stock Management System Project Stock Management System
The Wbcom Designs â Custom Font Uploader plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'cfu_delete_customfont' function in all versions up to, and including, 2.3.4. This makes it possible for authenticated attackers, with Subscriber-level ac...
AFFECTED_PRODUCTS:
Wbcomdesigns Custom Font Uploader
Vulnerability in Dulldusk's PHP File Manager affecting version 1.7.8. This vulnerability consists of an XSS through the fm_current_dir parameter of index.php. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session.
AFFECTED_PRODUCTS:
Dulldusk Phpfilemanager
The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period.
AFFECTED_PRODUCTS:
Born05 Two Factor Authentication
The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitting a valid TOTP.
AFFECTED_PRODUCTS:
Born05 Two Factor Authentication
The Essential Addons for Elementor â Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'get_manual_calendar_events' function in all versions up to, and including, 5.9.22 due to insufficient input sanitization and...
AFFECTED_PRODUCTS:
Wpdeveloper Essential Addons For Elementor
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.0.276 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated atta...
AFFECTED_PRODUCTS:
Extendthemes Colibri Page Builder
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to blind SQL Injection via the âdata[addonID]â parameter in all versions up to, and including, 1.5.109 due to insufficient escaping on the user supplied parameter and lack of sufficient preparat...
AFFECTED_PRODUCTS:
Unlimited-Elements Unlimited Elements For Elementor
The MultiVendorX Marketplace â WooCommerce MultiVendor Marketplace Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the âhover_animationâ parameter in all versions up to, and including, 4.1.11 due to insufficient input sanitization and output escaping. This makes it pos...
AFFECTED_PRODUCTS:
Multivendorx Multivendorx
The Qi Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file uploader in all versions up to, and including, 1.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and abov...
AFFECTED_PRODUCTS:
Qodeinteractive Qi Blocks
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
AFFECTED_PRODUCTS:
Sysaid Sysaid
SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
AFFECTED_PRODUCTS:
Sysaid Sysaid
SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.
AFFECTED_PRODUCTS:
Solarwinds Serv-U,
Solarwinds Serv-U
The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the âexport_settingsâ function in versions 2.7.1 to 2.7.2. This makes it possible for authenticated attackers, with Subscriber-level access and...
AFFECTED_PRODUCTS:
Xootix Login\/signup Popup
A host whitelist parser issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This issue only affects GravityZone Console versions before 6.38.1-2 that are running only on premise.
AFFECTED_PRODUCTS:
Bitdefender Gravityzone
A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.
AFFECTED_PRODUCTS:
Red Hat Enterprise Linux,
Red Hat Enterprise Linux,
Red Hat Enterprise Linux
... (+18)
Rejected reason: ** REJECT ** Accidental duplicate assignment of CVE-2024-4755. Please use CVE-2024-4755.
The Open Graph plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.11.2 via the 'opengraph_default_description' function. This makes it possible for unauthenticated attackers to extract sensitive data including partial content of password-prot...
AFFECTED_PRODUCTS:
Willnorris Open Graph
The WP Dark Mode â WordPress Dark Mode Plugin for Improved Accessibility, Dark Theme, Night Mode, and Social Sharing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpdm_social_share_save_options function in all versions up to, and inc...
AFFECTED_PRODUCTS:
Wppool Wp Dark Mode
The WordPress prettyPhoto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the âurlâ parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...
AFFECTED_PRODUCTS:
Master-Addons Prettyphoto
The Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the â_idâ parameter in all versions up to, and including, 1.1.39 due to insufficient input sanitization and output esc...
AFFECTED_PRODUCTS:
Wpthemespace Magical Addons For Elementor
The Startklar Elementor Addons plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.7.15 via the 'dropzone_hash' parameter. This makes it possible for unauthenticated attackers to copy the contents of arbitrary files on the server, which can contain sensi...
AFFECTED_PRODUCTS:
Web-Shop-Host Startklar Elmentor Addons
The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the â_idâ parameter in all versions up to, and including, 6.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributo...
AFFECTED_PRODUCTS:
Quomodosoft Elementsready
The Rotating Tweets (Twitter widget and shortcode) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's' 'rotatingtweets' in all versions up to, and including, 1.9.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it p...
AFFECTED_PRODUCTS:
Martintod Rotating Tweets
The Materialis Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's materialis_contact_form shortcode in all versions up to, and including, 1.3.41 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...
AFFECTED_PRODUCTS:
Extendthemes Materialis Companion