Advisory Catalog

Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header

Relative path traversal in mlflow

Remote code injection in wwbn/avideo

SQL Injection in Admin Translations API

SQL Injection in Translation Export API

SQL Injection in Admin Search Find API

SQL Injection in AssetController

Hidden fields can be leaked on readable collections in Payload

Cross site scripting (XSS) in wwbn/avideo

Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer

HTML injection in search results via plaintext message highlighting

Arbitrary file read via SQL injection

Path traversal vulnerability in the file manager

Service Location Protocol (SLP) Denial-of-Service Vulnerability

Kiwi TCMS is an open source test management system. In kiwitcms/Kiwi v12.2 and prior and kiwitcms/enterprise v12.2 and prior, the `changelog.yml` workflow is vulnerable to command injection attacks because of using an untrusted `github.head_ref` field. The `github.head_ref` value is an attacker-cont

Incorrect success value returned in vyper

HTTP Multiline Header Termination

Uncaught Exception in yaml

Prototype Pollution in sheetJS

Improper Privilege Management in microweber

Session fixation in fastify-passport

IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar arithmetic

modoboa vulnerable to Cross-Site Request Forgery

sidekiq vulnerable to cross-site scripting

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in Pay

pretalx vulnerable to path traversal in HTML export

PaperCut NG/MF Improper Authentication Vulnerability

Debug mode leaks confidential data in Cilium

Strapi leaking sensitive user information by filtering on private fields

Strapi does not verify the access or ID tokens issued during the OAuth flow

Authentication Bypass in @strapi/plugin-users-permissions

sqlparse contains a regular expression that is vulnerable to Regular Expression Denial of Service

Improper header name validation in guzzlehttp/psr7

Shopware Has Improper Control of Generation of Code in Twig rendered views

GovernorCompatibilityBravo may trim proposal calldata

Mailman Core vulnerable to timing attacks

alextselegidis/easyappointments Session Fixation vulnerability

Google Chromium V8 Type Confusion Vulnerability

SpiceDB binding metrics port to untrusted networks and can leak command-line flags

Cisco Small Business RV Series Routers Command Injection Vulnerability

OpenFeature Operator vulnerable to Cluster-level Privilege Escalation

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Traefik HTTP header parsing could cause a denial of service

Answer vulnerable to account takeover because password reset links do not expire

Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

Apple Multiple Products WebKit Use-After-Free Vulnerability

Flask-AppBuilder Has No Rate Limiting on Login AUTH DB

yuan1994 tpAdmin Unrestricted Upload of File with Dangerous Type vulnerability

Apache Airflow Spark Provider vulnerable to improper input validation