Advisory Catalog

Missing Origin Validation in parcel-bundler

Missing Origin Validation in browserify-hmr

Matrix Synapse Improper Signature Validation

Smarty Path Traversal Vulnerability

Moodle XML import of ddwtos could lead to intentional remote code execution

golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer

golang.org/x/net/html NULL Pointer Dereference vulnerability

QuickAppsCMS Cross-Site Request Forgery (CSRF)

golang.org/x/net/html NULL Pointer Dereference vulnerability

Microsoft Windows Privilege Escalation Vulnerability

OpensStack Neutron Denial of Service Vulnerability

Docker Authentication Bypass

Go Ethereum Improper Input Validation

phpMyFAQ CSRF

JSON-Patch Out-of-bounds Write vulnerability

MicroPyramid Django-CRM CSRF

Elefant CMS CSRF Vulnerability

simplehttpserver allows directory traversal and file listing

Mosca REDoS Vulnerability

Nokogiri gem, via libxml, is affected by DoS vulnerabilities

conference-scheduler-cli Arbitrary Code Execution

Gleez CMS CSRF Allows Adding of Administrator Accounts

Electron webPreferences vulnerability can be used to perform remote code execution

Apache Struts Remote Code Execution Vulnerability

Traefik Missing Authentication

Flask is vulnerable to Denial of Service via incorrect encoding of JSON data

Pyro mishandles pid files in temporary directory locations and opening the pid file as root

PyCryptodome integer overflow vulnerability

Pimcore CSRF Vulnerability

Microsoft Windows Shell Remote Code Execution Vulnerability

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft Scripting Engine Memory Corruption Vulnerability

Laravel Framework RCE Vulnerability

Gogs and Gitea SSRF Vulnerability

Symfony Directory Traversal

SEOmatic plugin for Craft CMS SSTI Vulnerability

Symfony Host Header Injection

Ansible apt_key module does not properly verify key fingerprint

A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily guessable default credentials.

PyCA Cryptography vulnerable to GCM tag forgery

Path Traversal in superstatic

Wizkunde SAMLBase SAML Bypass

October CMS Local File Inclusion

Aubio is vulnerable to denial of service via aubio_source_avcodec_readframe function

Aubio is vulnerable to denial of service via aubio_pitch_set_unit function

Aubio is vulnerable to out of bound read when samplerate > 50kHz

Nokogiri NULL Pointer Dereference

OpenStack Identity service (keystone) Incorrect Authorization

Ansible Arbitrary Code Execution