Advisory Catalog

Denial of service due to unlimited number of parts

Vulnerable OpenSSL included in sgx-dcap-quote-verify-python

SameSite Attribute vulnerability in pimCore

Regular Expression Denial of Service in simple-markdown

Weak Password Requirements in thorsten/phpmyfaq

Uncaught Exception in thorsten/phpmyfaq

Regular Expression Denial of Service in simple-markdown

IPython vulnerable to command injection via set_term_title

IPFS go-unixfsnode subject to DOS via HAMT Decoding Panics

privilege chaining in cockpit-hq/cockpit

otelhttp and otelbeego have DoS vulnerability for high cardinality metrics

Vulnerable OpenSSL included in cryptography wheels

Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following

Sensitive Information leak via Script File in TinaCMS

mrpack-install vulnerable to path traversal with dependency

TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering

TerraMaster OS Remote Command Execution Vulnerability

Withdrawn: Fortra GoAnywhere MFT Deserialization of Untrusted Data vulnerability affects metasploit-framework

create-choo-app3 is vulnerable to Command Injection via the devInstall function

semver-tags is vulnerable to Command Injection via the getGitTagsRemote function

Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection

is-url Inefficient Regular Expression Complexity vulnerability

froxlor is vulnerable to privilege escalation from customer to root via directory-options

Path Traversal in gin-vue-admin

Payment information sent to PayPal not necessarily identical to created order

Switcher Client contains Regular Expression Denial of Service (ReDoS)

Broken Access Control in 3rd party TYPO3 extension "femanager"

Broken Access Control in 3rd party TYPO3 extension "femanager"

Django contains Uncontrolled Resource Consumption via cached header

Symfony storing cookie headers in HttpCache

Symfony vulnerable to Session Fixation of CSRF tokens

mt7688-wiscan is vulnerable to Command Injection due to improper input sanitization

is-http2 vulnerable to Improper Input Validation

XSS Attack with Express API

Parse Server option `masterKeyIps` vulnerability to IP spoofing

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.3 o

http-cache-semantics vulnerable to Regular Expression Denial of Service

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 before 0.13.3.

Linux Kernel Use-After-Free Vulnerability

Paranoidhttp Server-Side Request Forgery vulnerability

Eta vulnerable to Code Injection via templates rendered with user-defined data

Servst vulnerable to Path Traversal

JSZip contains Path Traversal via loadAsync

Froxlor contains Weak Password Requirements

NYUCCL psiTurk IS vulnerable to Improper Neutralization of Special Elements

DataFlow upload remote code execution vulnerability

Fix for authenticated remote code execution through layout update

DoS vulnerability in MaliciousCode filter

Fix for arbitrary file deletion in customer media allows for remote code execution

Fix for arbitrary command execution in custom layout update through blocks