Advisory Catalog

URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal

Remote Code Execution via unsafe classes in otherwise permitted modules

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata.

netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset and netCDFDataset::~netCDFDataset).

Integer overflow in pywin32

libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid.

XML2Dict XML Entity Expansion Vulnerability

ReDOS in Mpmath

Cross-Site Request Forgery (CSRF) in FastAPI

Remote Code Execution via traversal in TAL expressions

Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks

Reflected cross-site scripting issue in Datasette

Observable Timing Discrepancy in aaugustin websockets library

Potential infinite loop in Pillow

Uncontrolled Resource Consumption in Pillow

Pillow denial of service

Catastrophic backtracking in URL authority parser when passed URL containing many @ characters

Openstack Neutron has Insufficient Verification of IPv6 addresses

Exposure of sensitive information to an unauthorized actor in HyperKitty

Insertion of Sensitive Information into Log File in ansible

Memory access due to code generation flaw in Cranelift module

Server-Side Request Forgery in Plone

Remote Code Execution via traversal in TAL expressions

Type confusion during tensor casts lead to dereferencing null pointers

Heap out of bounds write in `RaggedBinCount`

Reference binding to null pointer in `MatrixDiag*` ops

Session operations in eager mode lead to null pointer dereferences

Heap buffer overflow in `Conv3DBackprop*`

Division by 0 in `Conv2DBackpropInput`

Heap buffer overflow caused by rounding

Invalid validation in `SparseMatrixSparseCholesky`

Heap out of bounds read in `RaggedCross`

Heap buffer overflow in `QuantizedMul`

Heap buffer overflow in `QuantizedReshape`

Heap buffer overflow in `QuantizedResizeBilinear`

Heap buffer overflow in `Conv2DBackpropFilter`

Division by 0 in `QuantizedBiasAdd`

Heap OOB in `QuantizeAndDequantizeV3`

Heap buffer overflow in `SparseSplit`

Heap OOB access in unicode ops

Heap buffer overflow in `RaggedTensorToTensor`

Heap OOB access in `Dilation2DBackpropInput`

Reference binding to null in `ParameterizedTruncatedNormal`

Heap out of bounds read in `RequantizationRange`

Heap out of bounds read in `MaxPoolGradWithArgmax`

Memory corruption in `DrawBoundingBoxesV2`

Undefined behavior in `MaxPool3DGradGrad`

Heap buffer overflow in `MaxPool3DGradGrad`

Heap buffer overflow in `AvgPool3DGrad`

Heap buffer overflow in `FractionalAvgPoolGrad`