Advisory Catalog

Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`

XPixelGroup BasicSR Command Injection

Azure PromptFlow remote code execution related to Jinja templates

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporter.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The attac

A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::GetNextLine in the library ParsingUtils.h of the component File Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remo

Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch

Zip Exploit Crashes Picklescan But Not PyTorch

ray vulnerable to Insertion of Sensitive Information into Log File

Jinja2 vulnerable to sandbox breakout through attr filter selecting format method

Rembg allows SSRF via /api/remove

Flask-AppBuilder Observable Response Discrepancy

Apache StreamPipes has improper privilege management in a REST interface

CodeChecker open redirect when URL contains multiple slashes after the product name

Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysis

copyparty renders unsanitized filenames as HTML when user uploads empty files

Exiv2 allows Use After Free

Keylime registrar is vulnerable to Denial-of-Service attack when updated to version 7.12.0

Label Studio allows Cross-Site Scripting (XSS) via GET request to `/projects/upload-example` endpoint

Vulnerable OpenSSL included in cryptography wheels

xml2rfc has file inclusion irregularities

lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell

snowflake-connector-python vulnerable to insecure cache files permissions

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0.

Composio Command Execution vulnerability

keras Path Traversal vulnerability

khoj has an IDOR in subscription management allows unauthorized subscription modifications

python-sql SQL injection vulnerability

OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information (SETTINGS_SUPPORT). This is due to inadequate access control for support information (http://<op

Koji Cross-site Scripting

Jinja has a sandbox breakout through indirect reference to format method

Jinja has a sandbox breakout through malicious filenames

PGHoard Path Traversal vulnerability

D-Tale allows Remote Code Execution through the Custom Filter Input

Apache Superset: Error verbosity exposes metadata in analytics databases

Synapse Matrix has a partial room state leak via Sliding Sync

Synapse's unauthenticated writes to the media repository allow planting of problematic content

Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality

pyspider Cross-site Scripting vulnerability

Sentry improper error handling leaks Application Integration Client Secret

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash.

django CMS Attributes Field Cross-site Scripting

Django Filer Unrestricted Upload of File with Dangerous Type

aiohttp allows request smuggling due to incorrect parsing of chunk extensions

django CMS Cross-Site Scripting (XSS)

OpenStack improperly deletes access rules

Cross-site Scripting (XSS) - DOM in janeczku/calibre-web