A vulnerability was found in xataio Xata Agent up to 0.3.0. It has been classified as problematic. This affects the function GET of the file apps/dbagent/src/app/api/evals/route.ts. The manipulation of the argument passed leads to path traversal. Upgrading to version 0.3.1 is able to address this issue. The patch is named 03f27055e0cf5d4fa7e874d34ce8c74c7b9086cc. It is recommended to upgrade the affected component.
Unauthenticated file upload vulnerability in Teledyne FLIR AX8 thermal cameras up to version 1.46 allows remote attackers to upload arbitrary files via the /upload.php endpoint. Public exploit code is available, and while the CVSS 4.0 score is low (2.1) due to required privileges, the EPSS score of 0.11% suggests low exploitation probability. No active exploitation has been reported in CISA KEV.
SQL injection in Brilliance Golden Link Secondary System up to 20250609 allows remote authenticated attackers to manipulate the custTradeName parameter in /storagework/custTakeInfoPage.htm, potentially leading to data theft or system compromise. A public exploit is available, but no active exploitation has been confirmed.
SQL injection in Brilliance Golden Link Secondary System up to 20250609 allows remote authenticated attackers to manipulate the custTradeName parameter in /storagework/rentTakeInfoPage.htm, potentially leading to data breach or system compromise. Public exploit code is available, but no active exploitation has been confirmed by CISA KEV. EPSS score is low (0.07%), suggesting limited exploitation likelihood.
Cross-site request forgery in PHPGurukul Car Rental Portal 3.0 allows an attacker to perform unauthorized actions on behalf of an authenticated user. A publicly available exploit exists, but exploitation requires user interaction and no active exploitation has been confirmed.
Path traversal vulnerability in xlang-ai OpenAgents up to commit ff2e464 allows attackers to read or write arbitrary files via the create_upload_file function in backend/api/file.py. Public exploit code exists, but the vulnerability is not actively exploited per CISA KEV, and EPSS score is low (0.18%).
Path traversal vulnerability in SuperAGI up to 0.0.14 allows attackers to read arbitrary files via the download_attachment function in EmailToolKit. Public exploit code exists, but no active exploitation has been confirmed. EPSS score is low (0.18%), indicating limited exploitation likelihood.
Path traversal vulnerability in Upsonic up to 0.55.6 allows attackers to read arbitrary files via the file.filename parameter in markdown/server.py. Public exploit code is available, and a patch has been released. The CVSS 4.0 score is 2.0 (low), but the EPSS score of 0.18% suggests low exploitation likelihood.
Deserialization vulnerability in Upsonic up to 0.55.6 allows remote authenticated attackers to execute arbitrary code via the Pickle Handler in /tools/add_tool. Public exploit code exists, but no active exploitation has been confirmed. EPSS score is low (0.07%), indicating limited exploitation likelihood.
Use-after-free vulnerability in WebAssembly wabt up to 1.0.37 allows local attackers to cause a denial of service via crafted input. Public exploit code exists, but exploitation requires local access and low privileges. EPSS score is low (0.05%), and no active exploitation in CISA KEV has been reported.
Resource consumption vulnerability in WebAssembly wabt up to 1.0.37 allows local attackers to cause denial of service via the OnDataCount function in src/interp/binary-reader-interp.cc. Publicly available exploit code exists, but EPSS score is low (0.05%) and no active exploitation has been confirmed.
Out-of-bounds write in wasm3 0.5.0 allows local attackers to cause a denial of service via a crafted WebAssembly module. The vulnerability is triggered in the MarkSlotAllocated function of source/m3_compile.c. A public exploit exists, but no active exploitation has been reported and EPSS score is low (0.05%).
Out-of-bounds read in swftools wav2swf component allows local attackers to cause a denial of service via a crafted WAV file. The vulnerability affects swftools up to version 0.9.2 and has a public exploit available, though no active exploitation has been reported. EPSS score is low (0.05%), indicating low exploitation likelihood.
Heap-based buffer overflow in HDF5 up to 1.14.6 allows local attackers to cause a denial of service or potentially execute arbitrary code. Public exploit code exists, but no active exploitation has been confirmed. EPSS score is low (0.05%), indicating limited exploitation likelihood.
Heap-based buffer overflow in HDF5 up to 1.14.6 allows local attackers to execute arbitrary code or cause denial of service via a crafted file. Public exploit code exists, but no active exploitation in the wild has been confirmed. EPSS score is low (0.05%), indicating low exploitation probability.
Reachable assertion in WebAssembly wabt up to 1.0.37 via the LogOpcode function in src/binary-reader-objdump.cc allows local attackers to cause a denial of service. A public exploit exists, but the vendor doubts real-world impact and a patch is available. EPSS score is low (0.04%), indicating minimal exploitation risk.
PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to version 6.7.2, in certain places, powsybl-core XML parsing is vulnerable to an XML external entity (XXE) attack and to a server-side request forgery (SSRF) attack. This allows an attacker to elevate their privileges to read files that they do not have permissions to, including sensitive files on the system. The vulnerable class is com.powsybl.commons.xml.XmlReader which is considered to be untrusted in use cases where untrusted users can submit their XML to the vulnerable methods. This can be a multi-tenant application that hosts many different users perhaps with different privilege levels. This issue has been patched in com.powsybl:powsybl-commons: 6.7.2.
A path transversal vulnerability in Brocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to gain access to files outside the intended directory potentially leading to the disclosure of sensitive information. Note: Admin level privilege is required on the switch in order to exploit
Cross-site scripting (XSS) in PHPGurukul COVID19 Testing Management System 2021 allows remote attackers to inject arbitrary web scripts via the 'q' parameter in /search-report-result.php. A public exploit exists, but no active exploitation has been reported and EPSS score is low (0.04%).
Cross-site scripting (XSS) vulnerability in Luna Imaging up to version 7.5.5.6 allows remote attackers to inject arbitrary web scripts via the 'q' parameter in the /luna/servlet/view/search endpoint. Public exploit code exists, but no active exploitation has been reported and EPSS score is low (0.04%).
Path traversal vulnerability in OpenBMB XAgent up to version 1.0.0 allows attackers to read arbitrary files via the /conv/community endpoint. Public exploit code exists, but no active exploitation has been confirmed. EPSS score is low (0.09%), indicating limited exploitation likelihood.
Open redirect vulnerability in PHPGurukul COVID19 Testing Management System 2021 allows remote attackers to redirect users to arbitrary external sites via the 'q' parameter in /search-report-result.php. The exploit has been publicly disclosed, increasing risk of phishing attacks. EPSS score is low (0.04%), indicating low exploitation likelihood in the wild.