| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed ${expr} or {${expr}} sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP code when the generated snippet runs. |
| Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows unauthenticated attackers to bypass destination checks via URL userinfo parsing differences. Attackers can set fetch_ssl_certificate=true with crafted userinfo URLs so SSLCertificate.from_url connects to internal hosts on port 443, probing reachability and leaking certificate details. |
| A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C100/C101 v5, C210 v3.6 and C520WS v2.6 in the HTTP POST body parsing logic due to missing validation of remaining buffer capacity after dynamic allocation, due to insufficient boundary validation when handling externally supplied HTTP input.
An attacker
on the same network segment could trigger heap memory corruption conditions by
sending crafted payloads that cause write operations beyond allocated buffer
boundaries. Successful exploitation
causes a Denial-of-Service (DoS) condition, causing the device’s process to
crash or become unresponsive. |
| Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| Thelia before 3.1.5 and 3.2.x before 3.2.4 contains a business logic vulnerability that allows authenticated customers to bypass coupon usage limits because usage is counted only when orders become paid. Attackers can place multiple pay-later orders while a usage remains, or cancel paid orders to inflate max_usage, gaining unlimited discounts. |
| Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other users' quotes by bypassing per-user data scope checks in QuoteController. Attackers can query the quotes search and lead-products endpoints to retrieve quote addresses, totals, contact details, and product pricing belonging to any user or lead. |
| AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an absolute-form request that causes Request.scheme to use attacker-controlled request-target scheme data instead of the connection protocol. Applications that use Request.scheme for security decisions can consequently be tricked into treating an unencrypted connection as encrypted or an encrypted connection as unencrypted. This issue is fixed in version 3.14.4. |
| This candidate was in a CNA pool that was not assigned to any issues. |
| This candidate was in a CNA pool that was not assigned to any issues. |
| This candidate was in a CNA pool that was not assigned to any issues. |
| This candidate was in a CNA pool that was not assigned to any issues. |
| This candidate was in a CNA pool that was not assigned to any issues. |
| This candidate was in a CNA pool that was not assigned to any issues. |
| This candidate was in a CNA pool that was not assigned to any issues. |
| This candidate was in a CNA pool that was not assigned to any issues. |
| This candidate was in a CNA pool that was not assigned to any issues. |
| This candidate was in a CNA pool that was not assigned to any issues. |
| This candidate was in a CNA pool that was not assigned to any issues. |
| This candidate was in a CNA pool that was not assigned to any issues. |
| This candidate was in a CNA pool that was not assigned to any issues. |
