A vulnerability was found in Project Worlds Online Admission System 1.0 and classified as critical. This issue affects some unknown processing of the file documents.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public...
AFFECTED_PRODUCTS:
Online Admission System Project Online Admission System
Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.
AFFECTED_PRODUCTS:
Fortra Goanywhere Managed File Transfer,
Fortra Goanywhere Managed File Transfer
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Project files may contain malicious contents which the software will use to create files on the filesystem. This allows directory traversal and overwriting files with the privileges of the logged-in user.
AFFECTED_PRODUCTS:
Omron Sysmac Studio
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.
AFFECTED_PRODUCTS:
Omron Cj1g Cpu45p Firmware,
Omron Cj1g Cpu45p Gtc Firmware,
Omron Cj1g Cpu44p Firmware
... (+43)
A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. This vulnerability affects unknown code of the file pass-profile.php. The manipulation of the argument First Name/Last Name/User Name leads to cross site scripting. The attack can be init...
AFFECTED_PRODUCTS:
Online Railway Reservation System Project Online Railway Reservation System
A vulnerability, which was classified as problematic, was found in CodeAstro Internet Banking System 1.0. This affects an unknown part of the file pages_client_signup.php. The manipulation of the argument Client Full Name with the input <meta http-equiv="refresh" content="0; url=https://vuldb.com" /...
AFFECTED_PRODUCTS:
Martmbithi Internet Banking System
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930. Affected by this issue is the function setNatConfig of the file /Interface/DevManage/VM.php. The manipulation of the argument natAddress/natPort/natServerPort leads...
AFFECTED_PRODUCTS:
Uniview Isc 2500 S Firmware
DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php.
AFFECTED_PRODUCTS:
Dedecms Dedecms
Rejected reason: ***REJECT*** This was a false positive report.
Autolab is a course management service that enables instructors to offer autograded programming assignments to their students over the Web. Path traversal vulnerabilities were discovered in Autolab's assessment functionality in versions of Autolab prior to 2.12.0, whereby instructors can perform arb...
AFFECTED_PRODUCTS:
Autolabproject Autolab
CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command. This allows local users to read and write arbitrary files of certain file formats outside the CageFS environment.
AFFECTED_PRODUCTS:
Cloudlinux Cagefs
CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations this allows local users to view the authentication token via the process list and gain code execution as another user.
AFFECTED_PRODUCTS:
Cloudlinux Cagefs
In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.
Specifically, an application is vulnerable when all of the following are true:
* the application uses Spring MVC
* Spring Se...
AFFECTED_PRODUCTS:
VMware Spring Framework,
VMware Spring Framework
A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free.
AFFECTED_PRODUCTS:
Linux Linux Kernel,
Linux Linux Kernel,
Red Hat Enterprise Linux
chasquid before 1.13 allows SMTP smuggling because LF-terminated lines are accepted.
AFFECTED_PRODUCTS:
Blitiri Chasquid
In Clojure before 1.9.0, classes can be used to construct a serialized object that executes arbitrary code upon deserialization. This is relevant if a server deserializes untrusted objects.
AFFECTED_PRODUCTS:
Clojure Clojure
Open redirect vulnerability in Access analysis CGI An-Analyzer released in 2023 December 31 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary websites and conduct phishing attacks via a specially crafted URL.
AFFECTED_PRODUCTS:
Anglers-Net Cgi An Anlyzer
Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process. An attacker can decrypt ciphertexts by exploiting the Marvin security flaw. Exploiting this vulnerability requires the attacker to have access to a large number...
AFFECTED_PRODUCTS:
Jsrsasign Project Jsrsasign
Technicolor TC8715D devices have predictable default WPA2 security passwords. An attacker who scans for SSID and BSSID values may be able to predict these passwords.
darkhttpd before 1.15 uses strcmp (which is not constant time) to verify authentication, which makes it easier for remote attackers to bypass authentication via a timing side channel.
AFFECTED_PRODUCTS:
Unix4Lyfe Darkhttpd
darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.
AFFECTED_PRODUCTS:
Unix4Lyfe Darkhttpd
Dremio before 24.3.1 allows path traversal. An authenticated user who has no privileges on certain folders (and the files and datasets in these folders) can access these folders, files, and datasets. To be successful, the user must have access to the source and at least one folder in the source. Aff...
AFFECTED_PRODUCTS:
Dremio Dremio,
Dremio Dremio,
Dremio Dremio
GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17 allows attackers to trigger the generation of arbitrary Python code that is executed by SDFCodeExecutor. An attacker can create a dataframe that provides an English language specification of this Python code. NOTE:...
AFFECTED_PRODUCTS:
Gabrieleventuri Pandasai
LlamaIndex (aka llama_index) through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQueryEngine, NLSQLRetriever, RetrieverQueryEngine, and PGVectorSQLQueryEngine. For example, an attacker might be able to delete this year's student records via "Dro...
AFFECTED_PRODUCTS:
Llamaindex Llamaindex
MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen.
AFFECTED_PRODUCTS:
Deepwisdom Metagpt
A vulnerability, which was classified as problematic, has been found in LinZhaoguan pb-cms 2.0. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation with the input <div onmouseenter="alert("xss)"> leads to cross site scripting. The attack may be lau...
AFFECTED_PRODUCTS:
Pb-Cms Project Pb Cms
A vulnerability was found in Any-Capture Any Sound Recorder 2.93. It has been declared as problematic. This vulnerability affects unknown code of the component Registration Handler. The manipulation of the argument User Name/Key Code leads to memory corruption. It is possible to launch the attack on...
AFFECTED_PRODUCTS:
Taurisoft Any Sound Recorder
A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. Affected by this vulnerability is an unknown functionality of the file pages_client_signup.php. The manipulation of the argument Client Full Name leads to cross site scripting. The attack can be launched re...
AFFECTED_PRODUCTS:
Martinmbithi Internet Banking System
A vulnerability was found in Nsasoft ShareAlarmPro 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the component Registration Handler. The manipulation of the argument Name/Key leads to memory corruption. Local access is required to approach this attack....
AFFECTED_PRODUCTS:
Nsasoft Sharealarmpro
An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions.
AFFECTED_PRODUCTS:
Arm Mbed Tls
A vulnerability has been found in Nsasoft Product Key Explorer 4.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Registration Handler. The manipulation of the argument Name/Key leads to memory corruption. An attack has to be approached l...
AFFECTED_PRODUCTS:
Nsasoft Product Key Explorer
A vulnerability, which was classified as critical, was found in European Chemicals Agency IUCLID 7.10.3 on Windows. Affected is an unknown function of the file iuclid6.exe of the component Desktop Installer. The manipulation leads to incorrect default permissions. The attack needs to be approached l...
AFFECTED_PRODUCTS:
Echa.europa Iuclid
An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum.
AFFECTED_PRODUCTS:
Arm Mbed Tls
The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to json.py.
AFFECTED_PRODUCTS:
Embedchain Embedchain
The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument.
AFFECTED_PRODUCTS:
Embedchain Embedchain
The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML.
AFFECTED_PRODUCTS:
Llamahub Llamahub
A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.
AFFECTED_PRODUCTS:
Linux Linux Kernel,
Linux Linux Kernel,
Red Hat Enterprise Linux
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input ../../....
AFFECTED_PRODUCTS:
Dlink Dir 859 Firmware
A vulnerability, which was classified as problematic, has been found in go4rayyan Scumblr up to 2.0.1a. Affected by this issue is some unknown functionality of the component Task Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 2.0.2...
AFFECTED_PRODUCTS:
Go4Rayyan Scumblr
Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame. A PSK is generated by using the first six characters of the SSID and...
Ghost before 5.76.0 allows XSS via a post excerpt in excerpt.js. An XSS payload can be rendered in post summaries.
AFFECTED_PRODUCTS:
Ghost Ghost
Code Injection in paddlepaddle/paddle
AFFECTED_PRODUCTS:
Paddlepaddle Paddle
The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission parameters in all versions up to, and including, 1.8.5.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scri...
AFFECTED_PRODUCTS:
Wpforms Wpforms
The ColorMag theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the plugin_action_callback() function in all versions up to, and including, 3.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to install and act...
AFFECTED_PRODUCTS:
Themegrill Colormag
The VK Block Patterns plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.31.1.1. This is due to missing or incorrect nonce validation on the vbp_clear_patterns_cache() function. This makes it possible for unauthenticated attackers to clear the pa...
AFFECTED_PRODUCTS:
Vektor-Inc Vk Block Patterns
The POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth Glucose Monitoring System, sends unencrypted glucose measurements over BLE.
AFFECTED_PRODUCTS:
Popsdiabetes Rebel
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.
AFFECTED_PRODUCTS:
Yonyou Yonbip
An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.
AFFECTED_PRODUCTS:
Yonyou Yonbip