Vulnerabilidades

Una vulnerabilidad fue determinada en indrasishbanerjee aem-mcp-server hasta b5f833aef9b5dfd17a5991b3b18a8a11edbdc583. Esto impacta la función getAssetMetadata del archivo src/mcp-server.ts del componente Axios Request Flow. Ejecutar una manipulación del argumento assetPath puede llevar a falsificación de petición del…

Lightweight Music Server (LMS) hasta la versión 3.76.0 contiene una vulnerabilidad de cross-site scripting almacenado que permite a los atacantes ejecutar JavaScript arbitrario incrustando HTML malicioso en las etiquetas de metadatos de archivos multimedia como GÉNERO, ARTISTA o ÁLBUM. Los atacantes pueden introducir…

Problema de encadenamiento de privilegios existe en ServerView Agents para Windows V11.60.04 y anteriores. Si esta vulnerabilidad es explotada, un atacante local autenticado que puede iniciar sesión en el servidor donde el producto afectado está instalado puede obtener privilegio SYSTEM.

Existe una asignación incorrecta de permisos para un recurso crítico en ServerView Agents para Windows V11.60.04 y versiones anteriores. Si esta vulnerabilidad es explotada, un atacante local autenticado que puede iniciar sesión en el servidor donde está instalado el producto afectado puede obtener privilegio SYSTEM.

Roslyn CodeLens MCP Server es un servidor MCP basado en Roslyn que proporciona inteligencia de código semántica para bases de código .NET. Desde la versión 0.0.9 hasta la 1.17.0, la herramienta MCP get_diagnostics carga y ejecuta todos los ensamblados DiagnosticAnalyzer referenciados por la solución objetivo sin…

Vulnerabilidad en el componente Net Service de Oracle Database Server. Versiones soportadas que están afectadas son 23.4.0-23.26.2. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red vía TLS comprometer Net Service. Ataques exitosos de esta vulnerabilidad pueden resultar en la…

Vulnerabilidad en el componente Net Service del servidor de base de datos Oracle. Las versiones compatibles que están afectadas son 23.4.0-23.26.2. La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red a través de TLS comprometer Net Service. Los ataques exitosos de esta…

Vulnerabilidad en el componente Net Service del servidor de base de datos Oracle. Las versiones soportadas que están afectadas son 23.4.0-23.26.2. Vulnerabilidad difícil de explotar permite a un atacante no autenticado con acceso de red vía TLS comprometer Net Service. Aunque la vulnerabilidad está en Net Service, los…

A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing a symbolic link (symlink) within an exported filesystem Persistent Volume Claim (PVC) that points outside its designated…

A misconfigured Content Security Policy (CSP) in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0442 and earlier) fails to define directives without fallbacks, allowing attackers to bypass intended security restrictions and load unauthorized resources.

Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP port 7878 and processes remote HTTP messages with URL paths starting with /resources, /status, /sysinfo, /woshome, /Settings, /schedule, or /DavCache.

Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() in various DLLs (i.e., WOSProfileMgrModule.dll, WOSWebDavModule.dll) can return a NULL pointer (i.e., when no user is logged into the Triofox Server Agent Management Console). The returned NULL pointer is not checked before being dereferenced.

Northern.tech Mender Server v4.1.0, v4.0.1 and below, and fixed in v4.1.1 and v4.0.2 allows Directory Traversal.

MapServer is a system for developing web-based GIS applications. From 6.4.0 to before 8.6.3, msSLDParseUserStyle always calls _SLDApplyRuleValues(psRule, psLayer, 1); for any <Rule> carrying <ElseFilter/> — it assumes msSLDParseRule added one class. When the rule has no symbolizer (a structurally valid SLD),…

Northern.tech Mender Enterprise Server before 4.1.1 has Incorrect Access Control.

A vulnerability was detected in TeamSpeak 3 Server up to 3.13.7. This issue affects some unknown processing of the component clientek Handshake Handler. Performing a manipulation of the argument proof results in reachable assertion. Remote exploitation of the attack is possible. Upgrading to version 3.13.8 is capable…

A security vulnerability has been detected in TeamSpeak 3 Server up to 3.13.7. This vulnerability affects unknown code of the component ECC Key Parser. Such manipulation leads to heap-based buffer overflow. The attack may be launched remotely. Upgrading to version 3.13.8 is able to resolve this issue. It is suggested…

A weakness has been identified in TeamSpeak 3 Server up to 3.13.7. This affects the function process_resend_queue of the component Connection State Management. This manipulation causes use after free. The attack may be initiated remotely. Upgrading to version 3.13.8 is able to mitigate this issue. The affected…

RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This vulnerability is fixed in 4.1.2 and 4.0.13.

RabbitMQ is a messaging and streaming broker. From 4.2.0 to before 4.2.4, RabbitMQ's MQTT plugin allows for topic-level authorization using regular expressions with variable substitution. Administrators can create patterns such as ^{client_id}-sensors$ to restrict user access to topics that include their client ID.…

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential arbitrary file read in the asperahttpd component. An authenticated user may be able to take advantage…

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential denial of service in the asperahttpd component. An unauthenticated user can cause the asperahttpd…

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vulnerability could allow an authenticated user to execute…

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vulnerability could be exploited to cause a denial of service…

IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability. A transfer client may be able to take advantage of this vulnerability to access files in the server's local storage that they should not have access to, when specific restriction settings are not in place.