Advisory Catalog

Possible leak of key's raw field if declared length is incorrect

Apache Superset allows authenticated users to access metadata they have no permission to

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in pycares

Potential double free of buffer during string decoding

A stored Cross-site Scripting (XSS) vulnerability was identified in the Data Import functionality of OpenCTI through 5.2.4. An attacker can abuse the vulnerability to upload a malicious file that will then be executed by a victim when they open the file location.

Open redirect in web2py

Withdrawn: Denial of Service in aiohttp

Formula Injection in Exported Data

Token bruteforcing.

Authorization Bypass Through User-Controlled Key when using CILogonOAuthenticator oauthenticator

Access control issue in AlekSIS-Core

`CHECK` failure in depthwise ops via overflows

Incomplete validation in signal ops leads to crashes in TensorFlow

Core dump when loading TFLite models with quantization in TensorFlow

Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow

Heap buffer overflow due to incorrect hash function in TensorFlow

Type confusion leading to `CHECK`-failure based denial of service in TensorFlow

Missing validation results in undefined behavior in `SparseTensorDenseAdd

Segfault due to missing support for quantized types

Missing validation causes denial of service via `Conv3DBackpropFilterV2`

Integer overflow in `SpaceToBatchND`

Denial of service in `tf.ragged.constant` due to lack of validation

Missing validation results in undefined behavior in `QuantizedConv2D`

Undefined behavior when users supply invalid resource handles

Missing validation causes denial of service via `LSTMBlockCell`

Missing validation causes denial of service via `LoadAndRemapMatrix`

Missing validation causes denial of service via `SparseTensorToCSRSparseMatrix`

Missing validation causes denial of service via `UnsortedSegmentJoin`

Missing validation causes denial of service via `Conv3DBackpropFilterV2`

Missing validation causes denial of service via `StagePeek`

Missing validation causes `TensorSummaryV2` to crash

Missing validation causes denial of service via `DeleteSessionTensor`

Missing validation crashes `QuantizeAndDequantizeV4Grad`

Missing validation causes denial of service via `GetSessionTensor`

tkvideo has a memory issue in playing videos

Potential Captcha Validate Bypass in flask-session-captcha

SVG with embedded scripts can lead to cross-site scripting attacks in xml2rfc

Manipulated inline images can cause Infinite Loop in PyPDF2

Uncontrolled Resource Consumption in Matrix Synapse

Open Redirect in Flask-AppBuilder

Exposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates

pgAdmin 4 Path Traversal vulnerability

Insertion of Sensitive Information into Log File in ansible

Exposure of Sensitive information in httpie

XML External Entities Vulnerability in CVRF-CSAF-Converter

saleor Missing Authorization vulnerability

Path traversal in FreeTAKServer-UI

Cross-site Scripting in FreeTAKServer-UI

SQL Injection in FreeTAKServer-UI

Improper Restriction of XML External Entity Reference in trytond and proteus