Advisory Catalog

Improper Access Control in janeczku/calibre-web

Generation of Error Message Containing Sensitive Information in janeczku/calibre-web

An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other maliciou

ReDoS in giskard's transformation.py (GHSL-2024-324)

Missing ratelimit on passwrod resets in zenml

Salt preflight script could be attacker controlled

Ansible-Core vulnerable to content protections bypass

Apache Airflow vulnerable to Insertion of Sensitive Information Into Sent Data

Gradio vulnerable to arbitrary file read with File and UploadButton components

ansible-core Incorrect Authorization vulnerability

OctoPrint has API key access in settings without reauthentication

OctoPrint Vulnerable to Reflected XSS in Jinja2 Templates

gradio Server Side Request Forgery vulnerability

changedetection.io Path Traversal

In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a directory is created in the history folder with the user's name. By manipulating the /file endpoint,

MPXJ has a Potential Path Traversal Vulnerability

Werkzeug possible resource exhaustion when parsing file data in forms

Werkzeug safe_join not safe on Windows

The Snowflake Connector for Python stores sensitive data in logs

A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an invalid memory address (0x1000c9714971).

A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a n

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files.

Flair allows arbitrary code execution

OpenCanary Executes Commands From Potentially Writable Config File

Lord of Large Language Models (LoLLMs) path traversal vulnerability in the api open_personality_folder endpoint

Lord of Large Language Models (LoLLMs) Server path traversal vulnerability in lollms_file_system.py

Gradio has an XSS on every Gradio server via upload of HTML files, JS files, or SVG files

Gradio performs a non-constant-time comparison when comparing hashes

Gradio has several components with post-process steps allow arbitrary file leaks

Gradio vulnerable to SSRF in the path parameter of /queue/join

Gradio has a one-level read path traversal in `/custom_component`

Gradio's CORS origin validation accepts the null origin

Gradio's `is_in_or_equal` function may be bypassed

open-webui allows writing and deleting arbitrary files

open-webui Insecure Direct Object Reference (IDOR) vulnerability

Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash in certain WebAssembly modules. The runtime crash may be undefined behavior if Wasmtime was compiled with Rust 1.80 or prior. The runtime c

Django allows enumeration of user e-mail addresses

OpenStack Ironic fails to verify checksums of supplied image_source URLs

OpenC3 stores passwords in clear text (`GHSL-2024-129`)

OpenC3 Cross-site Scripting in Login functionality (`GHSL-2024-128`)

Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP

Inefficient Regular Expression Complexity in langflow

Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function.

A stored cross-site scripting (XSS) vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of the "Admin" panel via a /core/config-revisions/ Add action. An authenticated user can inject arbitrary JavaScript or HTML into the "Top banner" field. NOTE: Multiple third parties h

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations endpoint, can be used to store HTML tags and trigger javascript execution upon edit operation. All supp

Prevent XSS from Confidant API call

Reverb use after free vulnerability

Heap-based Buffer Overflow in MicroPython

Use After Free in MicroPython

heap-buffer-overflow in MicroPython