Advisory Catalog

PGHoard Path Traversal vulnerability

D-Tale allows Remote Code Execution through the Custom Filter Input

djoser Authentication Bypass

Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access

python-libarchive directory traversal

OpenCTI is an open-source cyber threat intelligence platform. In versions below 6.2.18, because the function to limit the rate of OTP does not exist, an attacker with valid credentials or a malicious user who commits internal fraud can break through the two-factor authentication and hijack the accou

sigstore has insufficient validation of integration timestamp during verification

A number of releases of ultralytics contained malicious crypto miner software.

luigi Arbitrary File Write via Archive Extraction (Zip Slip)

unstructured XML External Entity (XXE)

Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled

Apache Superset: Error verbosity exposes metadata in analytics databases

Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions