Threats affecting pkg:bitnami/powershell

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a vulnerability that allows a remote authenticated attacker to obtain sensitive information by exploiting improper limitation of a pathname to a restricted directory.

IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a critical vulnerability that allows remote attackers to execute arbitrary code. This is due to improper control of code generation within the software. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

A missing authorization vulnerability exists in weDevs Happy Addons for Elementor up to version 3.50.1. This flaw allows attackers with limited privileges to exploit incorrectly configured access control, potentially leading to partial confidentiality and integrity impacts without user interaction.

IBM Langflow OSS versions 1.0.0 through 1.12.4 have a vulnerability where sensitive information is stored in cleartext. This flaw allows a remote authenticated attacker to access sensitive data without requiring user interaction. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.

IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a vulnerability that allows a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials. The vulnerability does not affect availability or integrity but impacts confidentiality. No patch or remediation information is provided in the available data.

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a vulnerability that allows a remote authenticated attacker to execute arbitrary code. This is due to improper neutralization of code in eval/exec functions, leading to critical security risks including full system compromise.

IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a vulnerability that allows a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code with unblocked patterns. This can lead to arbitrary operating system command execution on the server.

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a vulnerability that allows a remote authenticated attacker to execute arbitrary code due to improper control of code generation. This flaw has a critical severity with a CVSS score of 9.9, indicating high impact on confidentiality, integrity, and availability.

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a directory traversal vulnerability that allows an authenticated user to access arbitrary files on the system by sending a specially crafted URL request.

An insecure permission configuration in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to force a device freeze, resulting in a Denial of Service (DoS).

Bulk Share : Location Sender v2.1.0 (versionCode 5) contains insecure permissions that allow unauthorized attackers to invoke an exported component. This vulnerability can lead to arbitrary data access and control of data flow within the application.

MBasov OMN-Go versionCode 26080824 has insecure permissions that allow unauthorized attackers to invoke an exported component. This vulnerability can lead to arbitrary data access and control of data flow within the application.

NoNonsense Notes versionCode 72600 contains insecure permissions in its NotificationHelper component that allow unauthorized attackers to write to another user's notes by supplying a note ID.

Yet Another UPnP Controller versionCode 50200 contains insecure permissions that allow unauthorized attackers to invoke an exported component. This vulnerability can lead to arbitrary data access and control over application data.

Mirakel v3.0 (versionCode 60) contains insecure permissions in its MirakelInternalContentProvider component, allowing unauthorized attackers to read and modify other users' task databases.

LeafPad / Leaf Note version 1.21 has insecure permissions that allow unauthorized attackers to read other users' note data.

An insecure permission issue in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component. This vulnerability affects the track blocker mechanism of the application, potentially undermining its intended privacy protections.

An insecure permissions vulnerability exists in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400. This flaw allows unauthorized attackers to write arbitrary content into another user's private storage by sending a crafted payload.

An insecure permissions vulnerability exists in the ActivityMain component of the M66B/Marcel Bokhorst NetGuard no-root firewall (versionCode 2026080101/versionName 2.337). This flaw allows unauthorized attackers to force a device reset or cause a Denial of Service (DoS).

An insecure permissions vulnerability in rubenalfon Pile version 1.1.3 allows unauthorized attackers to invoke an exported component, which can lead to arbitrary data access and overwriting.