Advisory Catalog

karmada vulnerable to arbitrary code execution via a crafted command

pgAdmin Cross-site Scripting vulnerability in /settings/store API response json payload

pgAdmin is affected by a multi-factor authentication bypass vulnerability

aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests

s3-url-parser vulnerable to Denial of Service via regexes component

Phlex vulnerable to Cross-site Scripting (XSS) via maliciously formed HTML attribute names and values

nautobot has reflected Cross-site Scripting potential in all object list views

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp.

CRI-O vulnerable to an arbitrary systemd property injection

Calico privilege escalation vulnerability

Buffer Overflow vulnerability in osrg gobgp

PyPXE Buffer Overflow vulnerability

Flowise vulnerable to code injection via api/v1

ZITADEL's Improper Lockout Mechanism Leads to MFA Bypass

Withdrawn Advisory: Cluster Monitoring Operator contains a credentials leak

Rancher does not properly specify ApiGroup when creating Kubernetes RBAC resources

Rancher Privilege escalation vulnerability via malicious "Connection" header

Rancher's Steve API Component Improper authorization check allows privilege escalation

Rancher's Failure to delete orphaned role bindings does not revoke project level access from group based authentication

Buffer Overflow in gitea

Access Restriction Bypass in go-ipfs

github.com/u-root/u-root/pkg/cpio Arbitrary File Write via Archive Extraction (Zip Slip)

Cisco ASA and FTD Denial of Service Vulnerability

The Rest views module lets site admins create rest exports in views with additional options for serializing data. This module does not accurately check access and may expose paths to unpublished content. This vulnerability is mitigated by the fact that there must be a specific content structure to

Conform contains a Prototype Pollution Vulnerability in `parseWith...` function

Renovate vulnerable to arbitrary command injection via helmv3 manager and registryAliases

dbt uses a SQLparse version with a high vulnerability

Arbitrary Code Execution in Gitea

@hoppscotch/cli affected by Sandbox Escape in @hoppscotch/js-sandbox leads to RCE

LibreNMS vulnerable to a Time-Based Blind SQL injection leads to database extraction

LibreNMS uses Improper Sanitization on Service template name leads to Stored XSS

LibreNMS vulnerable to SQL injection time-based leads to database extraction

OpenStack Storlets arbitrary code execution vulnerability

@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed

TCPDF vulnerable to Regular Expression Denial of Service

Sentry vulnerable to leaking superuser cleartext password in logs

PyTorch heap buffer overflow vulnerability

Pytorch use-after-free vulnerability

Handling untrusted input can result in a crash, leading to loss of availability / denial of service

Cross-site Scripting (XSS) possible due to improper sanitisation of `href` attributes on `<a>` tags

Dolibarr vulnerable to Cross-Site Request Forgery

OpenFGA Authorization Bypass

langchain vulnerable to path traversal

mlflow vulnerable to Path Traversal

mlflow vulnerable to Path Traversal

gradio vulnerable to Path Traversal

mlflow vulnerable to Path Traversal

mlflow vulnerable to Path Traversal

mlflow Path Traversal vulnerability

Request smuggling leading to endpoint restriction bypass in Gunicorn