P-Net versions before 1.0.3, when compiled with the PNET_OPTION_AR_VENDOR_BLOCKS option enabled, contain a vulnerability where a data length is parsed from a field in the ARVendorBlock request that is not part of the block definition. This length is used to copy bytes into a fixed-size buffer without proper bounds checking, leading to an out-of-bounds write. This flaw can cause a crash resulting in denial of service or potentially allow arbitrary code execution. The vulnerable option is disabled by default.
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a vulnerability that allows a remote authenticated attacker to execute arbitrary commands due to improper control of code generation. This flaw can lead to full compromise of confidentiality, integrity, and availability of the affected system.
P-Net versions before 1.0.3 have a vulnerability where handling a read request for the PDPortDataCheck record with subslot 0 causes an infinite loop. This loop prevents the request from completing and causes the device to stop responding. A remote unauthenticated attacker can exploit this to cause a denial of service.
P-Net versions before 1.0.3 contain a vulnerability where a NULL AR pointer is dereferenced in the function pf_fspm_cm_read_ind() during handling of an implicit read request without a valid target AR UUID. This occurs if the application has registered a read callback. A remote unauthenticated attacker can exploit this to cause a denial of service by crashing the device.
P-Net versions prior to 1.0.3 contain a vulnerability in the pf_eth_recv() function where the length of a received Ethernet frame is not properly validated before accessing certain fields. This improper validation, especially in the VLAN tag processing loop without an upper bound, can lead to reading beyond the receive buffer. Such out-of-bounds reads may cause a denial of service (crash) or unintended disclosure of memory contents.
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a vulnerability that allows a remote authenticated attacker to execute arbitrary code. This is due to improper neutralization of special elements in OS commands, leading to command injection. The vulnerability has a high severity with a CVSS score of 8.8.
An unauthenticated Cross Site Scripting (XSS) vulnerability exists in Chained Quiz versions up to and including 1.4.1. This flaw allows attackers to inject malicious scripts without authentication, potentially impacting confidentiality, integrity, and availability.
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a vulnerability that allows a remote attacker with a low-privileged authenticated account to bypass administrator-only restrictions and execute arbitrary code on the server. This occurs through manipulation of a built-in code-execution component using attacker-supplied inputs.
USP Ultimate Screenshot Painter versionCode 240213.009 has insecure permissions that allow unauthorized attackers to move or overwrite files in another user's private storage by supplying a crafted content URI.
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain an authentication vulnerability that could allow a remote attacker to obtain sensitive information without authorization.
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a critical vulnerability that allows a remote authenticated attacker to execute arbitrary code due to missing authorization controls. The flaw affects confidentiality, integrity, and availability with a high severity score of 9.9.
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a vulnerability that allows a remote authenticated attacker to obtain sensitive information by exploiting improper limitation of a pathname to a restricted directory.
IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a critical vulnerability that allows remote attackers to execute arbitrary code. This is due to improper control of code generation within the software. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.
A missing authorization vulnerability exists in weDevs Happy Addons for Elementor up to version 3.50.1. This flaw allows attackers with limited privileges to exploit incorrectly configured access control, potentially leading to partial confidentiality and integrity impacts without user interaction.
IBM Langflow OSS versions 1.0.0 through 1.12.4 have a vulnerability where sensitive information is stored in cleartext. This flaw allows a remote authenticated attacker to access sensitive data without requiring user interaction. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.
IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a vulnerability that allows a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials. The vulnerability does not affect availability or integrity but impacts confidentiality. No patch or remediation information is provided in the available data.
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a vulnerability that allows a remote authenticated attacker to execute arbitrary code. This is due to improper neutralization of code in eval/exec functions, leading to critical security risks including full system compromise.
IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a vulnerability that allows a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code with unblocked patterns. This can lead to arbitrary operating system command execution on the server.
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a vulnerability that allows a remote authenticated attacker to execute arbitrary code due to improper control of code generation. This flaw has a critical severity with a CVSS score of 9.9, indicating high impact on confidentiality, integrity, and availability.
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a directory traversal vulnerability that allows an authenticated user to access arbitrary files on the system by sending a specially crafted URL request.