Advisory Catalog

Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User

Netmaker IDOR Allows User to Update Other User's Password

Netmaker has Hardcoded DNS Secret Key

Keylime registrar and (untrusted) Agent can be bypassed by an attacker

GeoNode Server Side Request forgery

libp2p nodes vulnerable to OOM attack

Argo CD web terminal session doesn't expire

RARLAB WinRAR Code Execution Vulnerability

Apache Airflow denial of service vulnerability

Apache Airflow Session Fixation vulnerability

webui-aria2 Path Traversal vulnerability

json2xml Uncaught Exception vulnerability

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file.

Weaviate denial of service vulnerability

Shescape on Windows escaping may be bypassed in threaded context

Craft CMS vulnerable to Remote Code Execution via validatePath bypass

Cockpit Cross-site Scripting vulnerability

Cockpit Cross-site Scripting vulnerability

Apache Airflow Spark Provider Improper Input Validation vulnerability

Cockpit Cross-site Scripting vulnerability

Flarum vulnerable to LFI and Blind SSRF via Avatar upload

Woodpecker does not validate webhook before changing any data

Yaklang Plugin's Fuzztag Component Allows Unauthorized Local File Reading

LibreNMS Cross-site Scripting vulnerability

Apple Multiple Products Unspecified Vulnerability

Cockpit Cross-site Scripting vulnerability

FaucetSDN Ryu Denial of Service Vulnerability

FaucetSDN Ryu Denial of Service Vulnerability

Withdrawn Advisory: Daylight Studio FUEL-CMS SQLi Vulnerability

apache-airflow-providers-apache-drill Improper Input Validation vulnerability

Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

1Panel arbitrary file write vulnerability

1Panel O&M management panel has a background arbitrary file reading vulnerability

Unsanitized user controlled input in module generation

Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers

Excessive Iteration in gRPC

Angular critical CSS inlining Cross-site Scripting Vulnerability Advisory

Magento Open Source allows Improper Neutralization of Special Elements Used

Magento Open Source allows XML Injection

libp2p nodes vulnerable to attack using large RSA keys

Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability

wger Workout Manager Cross-Site Request Forgery vulnerability

PrestaShop file access through path traversal

PrestaShop XSS injection through Validate::isCleanHTML method

ScanCode.io command injection in docker image fetch process

Privilege escalation via ApiTokensEndpoint

Cockpit Cross-site Scripting vulnerability

Apache Airflow Execution with Unnecessary Privileges

Nuclei Path Traversal vulnerability

ZKTeco BioTime Path Traversal Vulnerability