CVE Vulnerability Catalog

A vulnerability in ash_typescript (npm) before 0.19.1 allows an unauthenticated attacker to read internal Elixir terms from an RPC error response by provoking an error the error builder has no dedicated clause for. This affects AshTypescript.Rpc.ErrorBuilder.build_error_response/1 and paths involving cast_map_to_struct/2 and format_field_type/1.

A vulnerability was found in Zen Cart up to version 2.2.2, affecting the zen_db_perform function in includes/modules/payment/paypaldp.php of the PayPal IPN Handler component. Manipulation of the txn_id argument leads to SQL injection, and the attack can be initiated remotely. The exploit has been made public.

A vulnerability was found in RuoYi up to version 4.8.3 in the checkRoleAllowed function of the /system/role/authDataScope file. Manipulation of the roleKey argument leads to improper privilege management. The attack can be launched remotely and the exploit has been publicly disclosed.

A flaw was found in DataEase up to version 3.0.0 in the Utils.buildCalcField function of the file io/dataease/engine/utils/Utils.java. Manipulation of the calculated field argument causes SQL injection. The attack can be initiated remotely and the exploit has been published.

An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to gain read access to the Tuleap database.

An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rights on one tracker to update or delete fields of all the trackers on the instance.

A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in a user's browser session.

A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in a user's browser session.

A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in a user's browser session.

An OS Command Injection vulnerability in Tuleap Enterprise Edition from 17.0 through 17.5 allows an attacker to execute arbitrary commands on the server.

An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with low-privilege credentials to obtain the authorization policy of a different account, such as admin, without knowing the password.

An improper verification of cryptographic signature vulnerability in DigiDoc libdigidocpp, DigiDoc4, DigiDoc Android, and DigiDoc iOS allows an attacker to create forged digital signatures that are displayed as valid by affected software.

This CVE number has been rejected. Reason: This candidate was issued in error. All references and descriptions have been removed to prevent accidental usage.

A vulnerability was detected in Kamailio up to versions 6.0.7/6.1.3 in the isup_get_calling_party function of the file src/modules/sipt/ss7_parser.c in the sipt module. Manipulation of the length argument results in buffer overflow. The attack may be performed remotely.

A security vulnerability was detected in Tencent WeKnora up to version 0.8.1 in the validateSubquery function of the file internal/utils/inject.go in the SQL Validator component. The manipulation leads to SQL injection. The attack can be carried out remotely and the exploit has been publicly disclosed.

A weakness was identified in agno-agi agno up to versions 3.0.6/3.1.1 in the member_agent.run function in the library libs/agno/agno/team/_default_tools.py in the Delegation Feature component. Executing a manipulation can lead to execution with unnecessary privileges. The attack can be executed remotely and the exploit has been made public.

A security flaw in agno-agi agno up to 3.0.6/3.1.1 affects the exec function in the Agent Orchestration Layer, allowing remote execution of dynamically-managed code.

A SQL Injection vulnerability in Kong Gateway (Enterprise and Open Source) clustering communication in Hybrid Mode, triggered by specially crafted RPC requests to the Control Plane, leading to unauthorized database access.

A vulnerability in agno-agi agno up to 2.7.3/3.0.6 affects the get_authentication_dependency function in auth.py, where manipulation of the security_key argument leads to missing authentication.

A vulnerability was determined in agno-agi agno up to version 3.0.9 in the agno.CodingTools.run_shell function in the library libs/agno/agno/tools/coding.py in the CodingTools component. Manipulation of the command argument causes OS command injection. The attack may be initiated remotely and the exploit has been publicly disclosed.