A vulnerability has been found in Radarr 5.28.0.10274. The affected element is an unknown function of the file C:ProgramDataRadarrbinRadarr.Console.exe of the component Service. Such manipulation leads to incorrect default permissions. The attack can only...
A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file C:ProgramDataSonarrbinSonarr.Console.exe of the component Service. Performing manipulation results in incorrect default permissions. The attack is only possible...
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man...
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to traverse directories on the system. An attacker could...
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls....
OpenObserve is a cloud-native observability platform. In versions up to and including 0.16.1, when creating or renaming an organization with HTML in the name, the markup is rendered inside the invitation email. This indicates...
Astro is a web framework. Starting in version 5.2.0 and prior to version 5.15.6, a Reflected Cross-Site Scripting (XSS) vulnerability exists in Astro’s development server error pages when the `trailingSlash` configuration option is used....
Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.13.0, Directus does not properly clean up field-level permissions when a field is deleted. When a field is...
Keyfactor SignServer before 7.3.1 has Incorrect Access Control, issue 1 of 3. More information : https://docs.keyfactor.com/signserver/latest/signserver-7-3-release-notes
Keyfactor SignServer before 7.3.1 has Incorrect Access Control, issue 2 of 3. More information : https://docs.keyfactor.com/signserver/latest/signserver-7-3-release-notes
Keyfactor SignServer before 7.3.1 has Incorrect Access Control, issue 3 of 3. More information : https://docs.keyfactor.com/signserver/latest/signserver-7-3-release-notes
A denial-of-service (DoS) vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to reboot a firewall by sending a specially crafted packet through the dataplane. Repeated attempts to initiate a reboot causes...
Typebot is an open-source chatbot builder. In versions prior to 3.13.1, a Server-Side Request Forgery (SSRF) vulnerability in the Typebot webhook block (HTTP Request component) functionality allows authenticated users to make arbitrary HTTP requests...
Socket Firewall is an HTTP/HTTPS proxy server that intercepts package manager requests and enforces security policies by blocking dangerous packages. Socket Firewall binary versions (separate from installers) prior to 0.15.5 are vulnerable to arbitrary...