LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport

### Summary LMCache is vulnerable to Unauthenticated Remote Code Execution via Pickle Deserialization on the Multiprocess ZMQ Transport ### Details LMCache multiprocess mode, also called distribu

CVSS 9.8

Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.

Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and write privileged kern

CVSS 9.3

Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V

Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain conditi

CVSS 9.3

Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticated

Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticated attackers to access all /api/* routes because controller authorization attributes are comm

CVSS 9.3

FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers

FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-login endpoints. Attackers ca

CVSS 9.3

Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated

Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-hi

CVSS 9.3

IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to

IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/** is excluded from the Shiro jwt fil

CVSS 9.3

WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated att

WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/{feed_id} endpoint. A

CVSS 9.3

Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated at

Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge super administrator tokens by using the hard-coded Auth.AccessSecret in a

CVSS 9.3

DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated

DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenSer

CVSS 9.3

DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauthe

DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauthenticated attackers to gain administrator access using the built-in admin/Databuff@123 acco

CVSS 9.3

LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated re

LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token interceptor is registered. A

CVSS 9.3

WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthe

WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can

CVSS 9.3

Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web s

Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's user_ok() function, which copies Basic-auth usernames with unbounded strcpy() call

CVSS 9.3

Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Ama

Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpo

CVSS 9.2