Advisory Catalog

SoSReport Predictable Tmp File Names

SaltStack Salt Denial of Service via a crafted authentication request

Koji blacklisted paths workaround

Mercurial missing symlink check

SaltStack Salt Authentication Bypass when using the local_batch client from salt-api

SaltStack Salt arbitrary command execution in Salt-api via ssh_client

Plone vulnerable to cross-site request forgery

protobuf susceptible to buffer overflow

Plone unauthorized member addition vulnerability

Plone Header Injection

Kallithea cross-site request forgery (CSRF) vulnerability

IPython vulnerable to cross site request forgery (CSRF)

Code injection in ansible

Apache Spark Deserialization of Untrusted Data vulnerability

Scrapy denial of service vulnerability

Designate mDNS DoS through incorrect handling of large RecordSets

Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.

Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information.

Salt vulnerable to Improper Certificate Validation

PyJWT vulnerable to key confusion attacks

Incorrect Default Permissions in Supervisor

django-cms CSRF Vulnerability

attic has improper verification of unencrypted backups

Openstack Aodh can be used to launder Keystone trusts

Integer Overflow or Wraparound in OpenCV

Integer Overflow or Wraparound in OpenCV

Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV

Numpy missing input validation

Lemur uses static IV per key

Out-of-bounds Write in OpenCV

Out-of-bounds Write in OpenCV

Out-of-bounds Write in OpenCV

Out-of-bounds Write in OpenCV

Denial of Service in OpenCV

Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV

Denial of Service in OpenCV

Out-of-bounds Read in OpenCV

Out-of-bounds Read in OpenCV

Out-of-bounds Write in OpenCV

FedMsg not properly completing message validation

txAWS AWSServiceEndpoint defaults to not verifying server certificates

tlslite remote denial of service vulnerability

Ansible Arbitrary Code Execution

Ansible Sandbox Escape via Symlink Attack

Mercurial has Incorrect Permission Assignment for Critical Resource

OpenEXR invalid write

Radicale is vulnerable to timing oracles and simple bruteforce attacks

SaltStack Salt Information Exposure

Kallithea Routes CSRF Bypass

Pillow Buffer overflow in Jpeg2KEncode.c