This vulnerability exists in the administrative file upload functionality of Cadmium CMS version 0.4.9. The endpoint `/admin/content/filemanager/uploads` does not implement
How the mentioned CVE works: The vulnerability is a stored Cross-Site Scripting (XSS) in the LibreNMS Alert Rule API. When
The vulnerability exists within the Downloader integration. When processing a user-supplied download request, the application constructs a final file path
How the CVE Works: The vulnerability exists within the Page Settings module of Piranha CMS version 12.1. The ‘Excerpt’ input
The vulnerability exists within the Media module of Piranha CMS. When a user, typically with content editor permissions, uploads or
The vulnerability in Umbraco CMS v16.3.3 arises from inadequate validation mechanisms during file upload processes, specifically targeting PDF files. Attackers
The vulnerability is in the `docloader.ts` file. A regex pattern used to parse HTML “ and “ tags contains nested
The vulnerability exists in the `Schema.load(data, many=True)` method. When deserializing a list of nested objects, the library’s logic for handling
How the Vulnerability Works: The vulnerability resides within KEDA’s TriggerAuthentication resource when configured for HashiCorp Vault authentication. Specifically, the `spec.hashiCorpVault.credential.serviceAccount`
How the mentioned CVE works: The vulnerability resides in the `time_tzsetup.cgi` CGI script on the Digiever device’s web interface. This
The vulnerability resides in n8n’s workflow expression evaluation system, where user-supplied expressions during workflow configuration are processed. Authenticated users can
The vulnerability operates within Cowrie’s default emulated shell mode, where it mimics common Linux commands for honeypot functionality. Commands like
The vulnerability exists in multiple API endpoints designed for user file access. These endpoints use a Universally Unique Identifier (UUID)
The vulnerability in Elasticsearch Packetbeat stems from improper resource management during IPv4 fragment reassembly. Packetbeat, a network packet analyzer, processes
How the CVE Works The vulnerability exists in an API endpoint designed to serve user-uploaded files, which are referenced by
The vulnerability exists in the `/api/v1/flows/` POST endpoint. An authenticated client can include an `fs_path` field in the request body.
The vulnerability resides in the snapshot restore functionality of Elasticsearch. An authenticated user with the specific privilege to restore snapshots
The vulnerability in Orejime arises from its processing of HTML data attributes during user consent actions. Orejime, a consent management
The vulnerability exists in the `get_oauth_router` function of FastAPI-Users. During OAuth authorization (/authorize), the `authorize` endpoint creates a JWT state
The vulnerability in fastapi-sso arises from improper handling of the OAuth state parameter during the authentication callback. The `get_login_url` method
The vulnerability exists in how Tutanota processes contact data within the Mithril.js framework. User-controlled input from imported contact fields is
An authenticated Keycloak realm administrator can configure an LDAP User Federation provider with a malicious LDAP server URL. The vulnerability
How the mentioned vulnerability works: The vulnerability exists in the Socket Appender component of Apache Log4j Core. Affected versions range
This vulnerability in Elasticsearch arises from improper resource allocation limits in the user settings data handling mechanism. Elasticsearch provides API
The vulnerability exists due to improper validation of calculated offsets within the Syslog input parser and the Dissect processor in
The GetAsanaObject Processor in Apache NiFi utilizes a Distribute Map Cache Client Service for state management. It employs generic Java
This critical vulnerability (CVE-2024-5997) resides in the IKEv2 implementation of WatchGuard Fireware OS for both Mobile User and Branch Office
This vulnerability exploits a race condition and insufficient symlink validation in Git during local clone operations with submodules. When cloning
This vulnerability, CVE-2025-53024, allows an authenticated attacker with commit privileges to read arbitrary files on the Weblate server’s filesystem. The
The vulnerability in Biopython’s Bio.Entrez module through version 1.86 involves improper handling of XML external entities (XXE) during XML parsing.
When the `nbconvert` tool converts a notebook containing SVG output to a PDF on Windows, it must find the Inkscape
The vulnerability is a missing key commitment flaw in the S3 Encryption Client for PHP. When the library’s `InstructionFileMetadataStrategy` is
The vulnerability arises from the lack of key commitment in the S3 Encryption Client (S3EC) for Go when using the
The vulnerability stems from a missing cryptographic “key commitment” mechanism in the S3 Encryption Client for Ruby when using the
The vulnerability exists in Storybook’s build-time processing of environment variables from `.env` files (e.g., .env.local). When `storybook build` is executed
The vulnerability arises because tinacms utilizes the gray-matter npm package to parse front matter in markdown files without overriding its
This vulnerability is a cryptographic key commitment flaw in the AWS S3 Encryption Client for Java, known as an “Invisible
How the mentioned CVE works: The AWS S3 Encryption Client for .NET (S3EC) facilitates client-side encryption for data stored in
How the mentioned CVE works: The vulnerability resides in the `jwe.decrypt` function of python-jose version 3.3.0. It involves the processing
The Insecure Direct Object Reference (IDOR) vulnerability in Pagekit CMS v1.0.18 resides within the User Role component, allowing unauthorized privilege
The vulnerability in Pagekit CMS v1.0.18 involves an authenticated arbitrary file upload in the /storage/poc.php component. Attackers with valid user
The vulnerability in jose4j before version 0.9.5 involves a denial-of-service attack through crafted JSON Web Encryption (JWE) tokens. JWE tokens
The vulnerability in Mattermost arises from insufficient validation of redirect URLs on the /error page in affected versions. When an
How the CVE Works The vulnerability exists in the Model Context Protocol (MCP) server for Git. When the server is
The vulnerability exists within the Mattermost GitHub plugin’s reaction forwarding feature. When a user adds an emoji reaction to a
The vulnerability exists in the Apache Airflow Providers Edge3 package versions prior to 2.0.0 when installed on an Airflow 2.x
This vulnerability, as indicated by its CVSS 3.1 score of 10.0, represents a critical threat vector within affected Cisco systems.
The vulnerability, CVE-2024-56789, stems from a logic flaw within the Auth0-PHP SDK’s token verification routine. When a Symfony application configured
The vulnerability arises from flawed audience claim validation in the Auth0-PHP SDK’s JWT token verification process. Access tokens and ID
How the Mentioned CVE Works The vulnerability, CVE-2024-XXXXX, stems from a flaw in the Auth0-PHP SDK’s token validation logic. The
How the Mentioned Vulnerability Works This was a sophisticated supply chain attack against the ASUS Live Update software distribution mechanism.
How the mentioned CVE works: A reserved CVE is allocated by a CVE Numbering Authority (CNA) for a vulnerability before
How the mentioned CVE works: The vulnerability stems from flawed audience validation in the Auth0-PHP SDK integrated into the Auth0
The vulnerability in mcp-server-git‘s `git_init` tool functioned as a path traversal and authorization bypass. Unlike other tools in the server
This vulnerability exploits Grav’s page editing interface, which insufficiently sanitizes user input in content fields. An authenticated user, even with
CVE-2025-43463 is a security vulnerability in Apple macOS caused by a parsing flaw in the handling of directory paths. The
How the CVE Works Apache StreamPark versions 2.0.0 to 2.1.6 use the user’s plaintext password as the HMAC signing key
The vulnerability is a stored Cross-Site Scripting (XSS) flaw within the Frappe LMS Job Form. In versions prior to 2.42.0,
The vulnerability exists because the device’s web interface uses HTTP Basic Authentication over unencrypted HTTP connections. When an administrator logs
The vulnerability is a heap-based buffer overflow (CWE-122) in the Pepper language compiler, version 0.1.1. The flaw exists within the
How the Mentioned CVE Works The vulnerability CVE-2025-43437 is an information disclosure weakness within the “Find My” component of Apple’s
The CVE-2025-6599 vulnerability is an uncontrolled resource consumption flaw in the HTTP web server of the Zyxel DX3301-T0 routers. It
The vulnerability exists in the `/__vite_rsc_findSourceMapURL` endpoint of the Vite RSC plugin. During development mode (vite dev), this endpoint accepts
This vulnerability exists in the Account module’s user registration endpoint. The `/Account/Register` page accepts a `returnUrl` parameter to redirect users
The vulnerability exists in builtin functions (flatten, min, max, mean, median) that recursively traverse user-supplied data structures (arrays, maps) without
How the Mentioned CVE Works (CVE-2025-12084) This vulnerability exists in the `xml.dom.minidom` module of CPython, the standard Python implementation. The
The vulnerability exists in the `fsSize()` function within the `systeminformation` npm package on Windows. The optional `drive` parameter is unsanitized
The vulnerability exists within the WP Directory Kit plugin for WordPress, specifically in the `wdk_generate_auto_login_link` function responsible for creating automatic
A logic flaw within the `sudo` command’s file handling on macOS could allow a locally executed application to bypass intended
The vulnerability CVE-2025-53963 exploits a fundamental weakness in the security configuration of the Thermo Fisher Ion Torrent OneTouch 2 (INS1005527)
The vulnerability exists in the Instagram authentication adapter of Parse Server. During the OAuth flow, the adapter improperly accepted a
The vulnerability exists in the `formDataToObject` function within the `@trpc/server` package, specifically used by the Next.js App Router adapter. When
The vulnerability arises from a misconfigured internal proxy within the runtimes-inventory-rhel8-operator. This proxy is intended to handle specific inventory reports
How the Mentioned CVE Works The vulnerability CVE-2025-37979 is a buffer overflow in the Qualcomm LPASS (Low Power Audio Subsystem)
The vulnerability CVE-2025-37998 exists within the `output_userspace()` function of the Open vSwitch (OVS) kernel module. The flaw stems from the
The vulnerability is a Time-of-Check-Time-of-Use (TOCTOU) race condition in the `filelock` Python library. The `UnixFileLock._acquire` method checks if a lock
The `bpf_redirect_peer` helper function in the Linux kernel is used by BPF programs to redirect a packet to a network
How the Mentioned CVE Works: The vulnerability exists in the Django-allauth social authentication adapters for Okta and NetIQ (OpenID Connect)
The vulnerability exists within the HTML pages served for password reset and email verification functionalities in Parse Server. These pages
In the Linux kernel’s x86 memory management, a race condition in the `should_flush_tlb()` function could cause necessary TLB (Translation Lookaside
The vulnerability exploits a missing nil check in the SIPGO library’s `NewResponseFromRequest` function. SIP request parsing succeeds even when a
How the mentioned CVE works CVE-2025-37958 is a race condition vulnerability in the Linux kernel’s memory management subsystem, specifically in
The vulnerability is a NULL pointer dereference in the `mtk_pmic_keys_probe` function of the Linux kernel’s MediaTek PMIC keys driver. During
The vulnerability CVE-2025-37967 is a deadlock condition within the Linux kernel’s USB Type-C Connector System Software Interface (UCSI) driver, specifically
How the mentioned CVE works: The vulnerability CVE-2025-37970 exists within the `st_lsm6dsx` Inertial Measurement Unit (IMU) driver of the Linux
The vulnerability is a use-after-free bug in the Linux kernel’s Hierarchical Fair Service Curve (HFSC) network packet scheduling subsystem. The
The vulnerability is a Regular Expression Denial of Service (ReDOS) in the figure caption extension (pymdownx.blocks.caption) of PyMdown Extensions. The
The vulnerability CVE-2025-37968 is a race condition-induced deadlock within the `opt3001` ambient light sensor driver in the Linux kernel. The
How the mentioned CVE works The vulnerability exists within the `st_lsm6dsx` inertial measurement unit (IMU) driver of the Linux kernel.
In django-allauth versions prior to 65.13.0, a flaw exists in the Identity Provider (IdP) component regarding session management and token
The vulnerability is a memory leak within the `parse_lease_state()` function of the ksmbd (kernel SMB daemon) module in the Linux
This vulnerability is a stored HTML injection in the LibreDesk contact management system. The flaw exists in the API endpoint
How the mentioned CVE works The vulnerability exists in the IP Virtual Server (IPVS) subsystem of the Linux kernel, which
How the CVE Works The vulnerability exists in the Linux kernel’s network scheduling (net_sched) subsystem. Queueing disciplines (qdiscs) like `fq`
This vulnerability exists in the netfilter ipset subsystem of the Linux kernel, specifically affecting hash-type sets that use timeouts. A
This vulnerability concerns an incorrect security mitigation in the Linux kernel for ARM64 (arm64) systems. The issue is related to
The vulnerability CVE-2025-37994 is a NULL pointer dereference (CWE-476) in the Linux kernel’s USB Type-C UCSI DisplayPort driver. It is
How the mentioned CVE works (around 20 lines): The vulnerability exists within the `qibfs` filesystem driver in the Linux kernel.
This vulnerability exists in the `wl1251` WiFi driver within the Linux kernel. During the transmission process, the driver’s `wl1251_tx_work` function
The vulnerability exists in the `rou3` router library, versions before the fix at commit f60b43f. This library normalizes URL paths
