CVE Brief Security Intelligence

HAPI FHIR is susceptible to uncontrolled resource consumption due to inefficient regular expression complexity, which can be triggered by unauthenticated attackers to cause a denial of service.

Adobe Acrobat Reader is vulnerable to a heap-based buffer overflow that may allow an attacker to execute arbitrary code in the context of the current user.

The Cursor code editor for Windows is vulnerable to remote code execution via an untrusted search path, allowing attackers to execute malicious code when a user interacts with a workspace.

Pimcore contains an SQL injection vulnerability allowing authenticated attackers to execute arbitrary SQL commands.

Google Cloud Firebase Studio was affected by a missing authorization vulnerability allowing unauthorized users to download source code and access sensitive data via GCS URL signing requests.

Dancer::Plugin::Auth::Google fails to perform proper SSL certificate validation during authentication requests, potentially allowing man-in-the-middle attacks.

A missing authorization vulnerability in Pimcore allows authenticated users to perform unauthorized actions, potentially leading to data integrity issues or service disruption.

Pimcore is vulnerable to insecure deserialization of untrusted data, which can be leveraged by an authenticated user with high privileges to achieve remote code execution.

A TOCTOU race condition in the Zoom Workplace VDI Plugin for Windows allows authenticated local users to escalate privileges during installation or uninstallation.

Zoom Rooms for Windows contains an improper privilege management vulnerability that may allow an authenticated local user to perform unauthorized actions.

JLine3 is affected by an uncontrolled resource consumption vulnerability that allows unauthenticated remote attackers to cause a denial of service.

JLine3 is affected by an uncontrolled resource consumption vulnerability that allows unauthenticated remote attackers to cause a denial of service.

The Apache Airflow Git provider defaults to disabling SSH host-key verification, allowing man-in-the-middle attacks to intercept credentials or inject malicious repository content.

The User Registration & Membership plugin for WordPress is vulnerable to improper privilege management, potentially allowing unauthorized access to administrative functions.

A privilege escalation vulnerability in the Apache Airflow FAB auth manager allows authenticated users to gain global DAG permissions due to a naming collision with the `DAGs` resource.

The Shibboleth WordPress plugin fails to properly verify identity headers, allowing unauthenticated attackers to spoof sessions and potentially gain administrative access.

The css_parser Ruby library is vulnerable to Server-Side Request Forgery (SSRF) due to improper handling of CSS input, allowing unauthenticated attackers to perform unauthorized requests.

ViewComponent for Ruby on Rails is vulnerable to Cross-site Scripting (XSS) due to improper neutralization of input during web page generation.

The joserfc library is vulnerable to authentication bypass and weak credential handling due to flaws in its implementation of JSON Object Signing and Encryption standards.

The AsyncSSH Python package is susceptible to a path traversal vulnerability that could allow unauthorized access to files outside of the intended directory.

Datadog dd-trace-py is susceptible to a resource exhaustion vulnerability due to a lack of limits on resource allocation.

ZenHive mpp fails to properly validate input quantities, allowing unauthenticated remote clients to inflate gas costs for sponsors.

ZenHive mpp contains an input validation vulnerability that enables unauthenticated remote clients to drain fee-payer wallets by specifying arbitrary gas prices.

ZenHive mpp contains an input validation vulnerability that allows unauthenticated remote attackers to drain fee-payer wallets, causing denial of service.

Zalando Skipper is vulnerable to HTTP request smuggling due to inconsistent interpretation of HTTP requests between the proxy and backend services.

The @hapi/content package is susceptible to interpretation conflicts when parsing HTTP Content headers, potentially allowing for unexpected application behavior.

IBM Langflow OSS is vulnerable to OS Command Injection, allowing authenticated users with low privileges to execute arbitrary system commands on the host server.

A path traversal vulnerability in IBM Langflow OSS allows authenticated attackers to read or potentially overwrite sensitive files outside of the intended application directories.

IBM Langflow OSS contains an unspecified vulnerability that allows authenticated attackers to perform unauthorized actions, necessitating an immediate software update.

IBM Langflow OSS versions 1.0.0 through 1.10.0 are susceptible to a code injection vulnerability, which may allow authenticated users to execute arbitrary code.

A vulnerability in the Agentic-Flow AI agent orchestration platform allows for OS command injection via insufficient input neutralization.

The systeminformation library for Node.js is vulnerable to OS command injection due to improper neutralization of input elements.

The ChronoForms extension for Joomla, versions 1.0 through 8.0.52, contains an unauthenticated stored cross-site scripting (XSS) vulnerability.

A reflected cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition version 8, allowing for unauthorized script execution.

A path traversal vulnerability in GitHub Enterprise Server allows authenticated attackers with code execution in the Dependabot container to write files to arbitrary repository paths.

A security flaw in the ongres scram library allows for algorithm downgrade attacks during SASL authentication, potentially leading to unauthorized authentication bypass.

IBM Langflow OSS versions 1.0.0 through 1.10.1 are affected by an authorization bypass vulnerability allowing authenticated users to access resources via user-controlled keys.

IBM Langflow OSS is vulnerable to an unspecified security flaw that may allow for unauthorized system impact.

IBM Storage Protect Client contains a security vulnerability that may allow an unauthenticated attacker to impact system confidentiality, integrity, and availability.

SigNoz is susceptible to open redirection and insufficient verification of data authenticity, which can be leveraged to manipulate SSO/OAuth state and facilitate session token theft.

OpenClaw is susceptible to an authentication bypass vulnerability due to insufficient verification of data authenticity, potentially allowing unauthenticated access to sensitive functionality.

IBM Db2 is susceptible to a code injection vulnerability that could allow an authenticated local user to execute unauthorized code.

ForgeCode, an AI pair-programming CLI, is vulnerable to arbitrary code execution because it automatically loads and executes MCP servers defined in untrusted repositories.

OpenClaw contains a vulnerability where it improperly loads untrusted plugins during setup mode, potentially leading to arbitrary code execution on the host.

A use-after-free vulnerability in YAML::Syck allows local, authenticated attackers to potentially execute arbitrary code or cause a crash.

IBM Langflow OSS versions 1.0.0 through 1.10.0 contain a vulnerability that may allow an authenticated user to gain unauthorized access to sensitive information.

A server-side request forgery (SSRF) vulnerability in OpenClaw allows an authenticated user to bypass network policies via the execution server.

A server-side request forgery (SSRF) vulnerability in the browser snapshot feature of OpenClaw allows an authenticated user to perform unauthorized requests.

YAML::Syck is affected by an out-of-bounds read vulnerability that could lead to information disclosure or application instability.

Emlog versions 2.6.13 and earlier are vulnerable to path traversal and remote file inclusion due to improper control of file paths and include statements.

The stoatchat application contains an authorization bypass vulnerability where users with read-only permissions can retrieve webhook tokens.

Datadog dd-trace-go versions prior to 2.8.1 are vulnerable to resource exhaustion due to a lack of limits on allocated resources.

Netty is susceptible to uncontrolled resource consumption, allowing unauthenticated remote attackers to cause a denial of service via resource exhaustion.

The DataDog dd-trace-js library is vulnerable to resource exhaustion due to improper allocation of resources without limits, enabling remote denial of service.

Perl versions through 5.43.10 contain an integer overflow in S_measure_struct, which can lead to an out-of-bounds heap read during pack and unpack operations.

AhnLab EPP Management contains a vulnerability that permits an authenticated attacker to execute unauthorized actions, potentially leading to total system compromise.