Loomio version 2.22.0 allows executing arbitrary commands on the server.
This is possible because the application is vulnerable to OS Command Injection.
AFFECTED_PRODUCTS:
Loomio Loomio
Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary.
AFFECTED_PRODUCTS:
Yealink Configuration Encryption Tool
cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a service using cbor2 to parse a CBOR binary by sending a long enough object. Version 5.6.2 contains a...
AFFECTED_PRODUCTS:
Fedoraproject Fedora,
Fedoraproject Fedora,
Fedoraproject Fedora
... (+1)
PrestaShop is an open-source e-commerce platform. Starting in version 8.1.0 and prior to version 8.1.4, PrestaShop is vulnerable to path disclosure in a JavaScript variable. A patch is available in version 8.1.4.
AFFECTED_PRODUCTS:
Prestashop Prestashop
The documentation specifies that the BT_GATT_PERM_READ_LESC and BT_GATT_PERM_WRITE_LESC defines for a Bluetooth characteristic: Attribute read/write permission with LE Secure Connection encryption. If set, requires that LE Secure Connections is used for read/write access, however this is only true w...
AFFECTED_PRODUCTS:
Zephyrproject Zephyr
A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the server will end with both memory and ope...
AFFECTED_PRODUCTS:
Red Hat Jboss Enterprise Application Platform,
Red Hat Openshift Container Platform,
Red Hat Openshift Container Platform
... (+6)
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Brivo ACS100, ACS300 allows OS Command Injection, Bypassing Physical Security.This issue affects ACS100 (Network Adjacent Access), ACS300 (Physical Access): from 5.2.4 before 6.2.4.3.
AFFECTED_PRODUCTS:
Brivo Acs100 Firmware,
Brivo Acs300 Firmware
Insufficiently Protected Credentials, : Improper Access Control vulnerability in Brivo ACS100, ACS300 allows Password Recovery Exploitation, Bypassing Physical Security.This issue affects ACS100, ACS300: from 5.2.4 before 6.2.4.3.
AFFECTED_PRODUCTS:
Brivo Acs100 Firmware,
Brivo Acs300 Firmware
Iris is a web collaborative platform that helps incident responders share technical details during investigations. A stored Cross-Site Scripting (XSS) vulnerability has been identified in iris-web, affecting multiple locations in versions prior to v2.4.0. The vulnerability may allow an attacker to i...
AFFECTED_PRODUCTS:
Dfir-Iris Iris
Misskey is an open source, decentralized social media platform with ActivityPub support. Prior to version 2024.2.0, when fetching remote Activity Streams objects, Misskey doesn't check that the response from the remote server has a `Content-Type` header value of the Activity Streams media type, whic...
AFFECTED_PRODUCTS:
Misskey Misskey
alf.io is an open source ticket reservation system. Prior to version 2.0-Mr-2402, organization owners can view the generated API KEY and USERS of other organization owners using the `http://192.168.26.128:8080/admin/api/users/<user_id>` endpoint, which exposes the details of the provided user ID. Th...
AFFECTED_PRODUCTS:
Alf Alf
alf.io is an open source ticket reservation system. Prior to version 2.0-Mr-2402, an attacker can access data from other organizers. The attacker can use a specially crafted request to receive the e-mail log sent by other events. Version 2.0-M4-2402 fixes this issue.
AFFECTED_PRODUCTS:
Alf Alf
Yocto Project is an open source collaboration project that helps developers create custom Linux-based systems regardless of the hardware architecture. In Yocto Projects Bitbake before 2.6.2 (before and included Yocto Project 4.3.1), with the Toaster server (included in bitbake) running, missing inpu...
AFFECTED_PRODUCTS:
Linuxfoundation Yocto,
Linuxfoundation Yocto,
Linuxfoundation Yocto
eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data (`p[UD]`) and `guid` values used to disconnect between nodes are not encrypted, a vulnerability...
Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available (e.g., on their profile page).
AFFECTED_PRODUCTS:
Fedoraproject Fedora,
Moodle Moodle,
Moodle Moodle
... (+1)
The link to update all installed language packs did not include the necessary token to prevent a CSRF risk.
AFFECTED_PRODUCTS:
Fedoraproject Fedora,
Moodle Moodle,
Moodle Moodle
... (+1)
Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers.
AFFECTED_PRODUCTS:
Fedoraproject Fedora,
Moodle Moodle,
Moodle Moodle
... (+1)
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers.
AFFECTED_PRODUCTS:
Fedoraproject Fedora,
Moodle Moodle,
Moodle Moodle
... (+1)
The URL parameters accepted by forum search were not limited to the allowed parameters.
AFFECTED_PRODUCTS:
Fedoraproject Fedora,
Moodle Moodle,
Moodle Moodle
... (+1)
Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality.
AFFECTED_PRODUCTS:
Fedoraproject Fedora,
Moodle Moodle,
Moodle Moodle
... (+1)
During the secure boot, bl2 (the second stage of
the bootloader) loops over images defined in the table “bl2_mem_params_descs”.
For each image, the bl2 reads the image length and destination from the image’s
certificate. Because of the way of reading from the image, which base on 32-bit unsigned int...
AFFECTED_PRODUCTS:
Renesas Arm Trusted Firmware
Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. A potential security vulnerability has been discovered in `pimcore/admin-ui-classic-bundle` prior to version 1.3.4. The vulnerability involves a Host Header Injection in the `invitationLinkAction` function of the UserController, speci...
AFFECTED_PRODUCTS:
Pimcore Admin Classic Bundle
Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.2.7, 4.1.15, 4.0.15, and 3.5.19, when fetching remote statuses, Mastodon doesn't check that the response from the remote server has a `Content-Type` header value of the Activity Streams media type, which...
AFFECTED_PRODUCTS:
Joinmastodon Mastodon,
Joinmastodon Mastodon,
Joinmastodon Mastodon
... (+1)
pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is no vulnerability. A placeholder for a numeric value must be immediately preceded by a minus. There must be a second placeholder for a string v...
AFFECTED_PRODUCTS:
Fedoraproject Fedora,
PostgreSQL Postgresql Jdbc Driver,
PostgreSQL Postgresql Jdbc Driver
... (+4)
Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants.
AFFECTED_PRODUCTS:
Laborofficefree Laborofficefree
Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to perform a brute force attack and easily discover the root password.
AFFECTED_PRODUCTS:
Laborofficefree Laborofficefree
Encrypted database credentials in LaborOfficeFree affecting version 19.10. This vulnerability allows an attacker to read and extract the username and password from the database of 'LOF_service.exe' and 'LaborOfficeFree.exe' located in the '%programfiles(x86)%\LaborOfficeFree\' directory. This user c...
AFFECTED_PRODUCTS:
Laborofficefree Laborofficefree
A weak permission was found in the backup directory in LaborOfficeFree affecting version 19.10. This vulnerability allows any authenticated user to read backup files in the directory '%programfiles(x86)% LaborOfficeFree BackUp'.
AFFECTED_PRODUCTS:
Laborofficefree Laborofficefree
An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
AFFECTED_PRODUCTS:
Apple macOS,
Apple macOS,
Fedoraproject Fedora
... (+7)
Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26.
Users are recommended to upgrade to version 1.26, which fixes the issue.
AFFECTED_PRODUCTS:
Apache Commons Compress
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.
Users are recommended to upgrade to version 1.26.0 which fixes the issue.
AFFECTED_PRODUCTS:
Apache Commons Compress
An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an attacker to gain elevated privileges via the 12d Synergy Server and/or 12d Synergy File Replication Server executable service path. This is fixed in 4.3.10.192, 5.1.5.221, and 5.1.6.2...
AFFECTED_PRODUCTS:
12Dsynergy 12dsynergy,
12Dsynergy 12dsynergy,
12Dsynergy 12dsynergy
... (+3)
An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c does not set NumVFs to PCI_SRIOV_TOTAL_VF, and thus interaction with hw/nvme/ctrl.c is mishandled.
AFFECTED_PRODUCTS:
Qemu Qemu
An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
AFFECTED_PRODUCTS:
Qemu Qemu
Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character.
AFFECTED_PRODUCTS:
Serenity Serenity
plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service (application crash).
AFFECTED_PRODUCTS:
Gnome Glade,
Gnome Glade
close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.
AFFECTED_PRODUCTS:
Greenwoodsoftware Less
Signed to unsigned conversion esp32_ipm_send
AFFECTED_PRODUCTS:
Zephyrproject Zephyr,
Zephyrproject Zephyr
can: out of bounds in remove_rx_filter function
AFFECTED_PRODUCTS:
Zephyrproject Zephyr
Unchecked length coming from user input in settings shell
AFFECTED_PRODUCTS:
Zephyrproject Zephyr
Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
AFFECTED_PRODUCTS:
Huawei Emui,
Huawei Emui,
Huawei Harmonyos
... (+4)
Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentiality.
AFFECTED_PRODUCTS:
Huawei Emui,
Huawei Emui,
Huawei Harmonyos
... (+4)
Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affect service confidentiality.
AFFECTED_PRODUCTS:
Huawei Emui,
Huawei Emui,
Huawei Harmonyos
... (+4)
Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause features to perform abnormally.
AFFECTED_PRODUCTS:
Huawei Emui,
Huawei Harmonyos,
Huawei Harmonyos
Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect service confidentiality.
AFFECTED_PRODUCTS:
Huawei Emui,
Huawei Emui,
Huawei Harmonyos
... (+4)
Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability may cause out-of-bounds access.
AFFECTED_PRODUCTS:
Huawei Emui,
Huawei Emui,
Huawei Harmonyos
... (+4)
Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality.
AFFECTED_PRODUCTS:
Huawei Emui,
Huawei Emui,
Huawei Harmonyos
... (+4)
Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may affect availability.
AFFECTED_PRODUCTS:
Huawei Emui,
Huawei Emui,
Huawei Harmonyos
... (+4)
Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affect service confidentiality.
AFFECTED_PRODUCTS:
Huawei Emui,
Huawei Harmonyos,
Huawei Harmonyos
... (+1)
Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauthorized file sharing.
AFFECTED_PRODUCTS:
Huawei Emui,
Huawei Emui,
Huawei Harmonyos
... (+4)