Advisory Catalog

Tahoe-LAFS fails to ensure integrity

Improper Authentication in pip

SciPy creates insecure temporary directories

Incorrect Default Permissions in keyring

Server-Side Request Forgery in unoconv

graphite.composer.views.send_email vulnerable to SSRF

High severity vulnerability that affects indico

koji hub allows arbitrary upload destinations

Ansible Uses Plugins That Disclose Credentials

ecdsa Denial of Service vulnerability in signature verification and signature malleability

DOS attack in Pillow when processing specially crafted image files

Valve Steam Client before 2019-09-12 allows placing or appending partially controlled filesystem content, as demonstrated by file modifications on Windows in the context of NT AUTHORITY\SYSTEM. This could lead to denial of service, elevation of privilege, or unspecified other impact.

Duplicate Advisory: Possible remote code execution via a remote procedure call

Out-of-bounds Write in OpenCV

Home Assistant information disclosure vulnerability

LMDB invalid write

py-lmdb Divide by Zero interruptions

** DISPUTED ** In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enabled by default but if the user enables it and does not set a password, Supervisor logs a warning messa

Cross-Site Request Forgery in MicroPyramid Django CRM

Open Redirect in httpie

Elastic APM agent for Python client CGI proxy redirection flaw

NLTK Vulnerable To Path Traversal

OpenStack Nova Server Resource Faults Leak External Exception Details

Pallets Werkzeug Insufficient Entropy

Sensitive data written to disk unencrypted in Spark

Django Denial-of-service in django.utils.text.Truncator

Django Denial-of-service in strip_tags()

Uncontrolled Recursion in Django

NULL Pointer Dereference in OpenCV.

Out-of-bounds Read and Out-of-bounds Write in OpenCV

Out-of-bounds Read in OpenCV

Improper Access Control in novajoin

Pallets Werkzeug vulnerable to Path Traversal

Infinite Loop in scapy

Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage

python-engineio vulnerable to Cross-Site Request Forgery (CSRF)

XML Injection in python-libnmap

Mirumee Saleor CSRF Protection Disabled

postfix-mta-sts-resolver Algorithm Downgrade vulnerability

Aubio is vulnerable to a NULL pointer dereference in new_aubio_filterbank

Aubio is vulnerable to a NULL pointer dereference in new_aubio_notes function

Deserialization vulnerability exists in parso

Code Injection in PyXDG

Openstack Octavia Access Control Vulnerability

matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG

Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow

Improper Input Validation in Google TensorFlow

NULL Pointer Dereference in Google TensorFlow

Null pointer dereference in TensorFlow leads to exploitation

Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow