Advisory Catalog

JSONata expression can pollute the "Object" prototype

JetBrains TeamCity Authentication Bypass Vulnerability

Budibase affected by VM2 Constructor Escape Vulnerability

ZDI-CAN-19105: Parse Server literalizeRegexPart SQL Injection

A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/tfidf.py of the component TFIDFRetriever. The manipulation leads to server-side request forgery. It

Nteract Remote Code Execution vulnerability

livehelperchat Server-Side Template Injection

Mezzanine allows attackers to bypass access controls via manipulating the Host header

Mezzanine allows attackers to bypass access control mechanisms

Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID

Withdrawn Advisory: Subrion CMS vulnerable to SQL Injection

@nfid/embed has compromised private key due to @dfinity/auth-client producing insecure session keys

LangChain Experimental vulnerable to arbitrary code execution

pretix mishandles file validation

Cross-site Scripting in MLFlow

MLFlow Cross-site Scripting vulnerability leads to client-side Remote Code Execution

Onnx Out-of-bounds Read vulnerability

Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE

Progress Kemp LoadMaster OS Command Injection Vulnerability

php-svg-lib lacks path validation on font through SVG inline styles

pymatgen vulnerable to arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string

ConnectWise ScreenConnect Authentication Bypass Vulnerability

agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`

Improper Certificate Validation in apache airflow mongo hook

Deserialization of Untrusted Data in Torrentpier

Pimcore Host Header Injection in user invitation link

Fortinet Multiple Products Format String Vulnerability

Magento Open Source allows OS Command Injection

Magento Open Source allows Cross-Site Scripting (XSS)

Microsoft Outlook Improper Input Validation Vulnerability

Microsoft Exchange Server Privilege Escalation Vulnerability

Pixelfed doesn't check OAuth Scopes in API routes, giving elevated permissions

Ghost has possible Cross-site Scripting issue

Fortinet FortiOS Out-of-Bound Write Vulnerability

NPM IP package incorrectly identifies some private IP addresses as public

DIRAC's TokenManager does not check permissions on cached tokens

Pimcore Admin Classic Bundle permissions are not getting checked when working with tags

Vyper negative array index bounds checks

SQLAlchemyDA unauthenticated arbitrary SQL query execution

Stimulsoft Dashboard.JS directory traversal vulnerability

Gradio Path Traversal vulnerability

Vyper's bounds check on built-in `slice()` function can be overflowed

Bref vulnerable to Body Parsing Inconsistency in Event-Driven Functions

vantage6 has insecure SSH configuration for node and server containers

network Arbitrary Command Injection vulnerability

Ylianst MeshCentral Missing SSL Certificate Validation

DeviceFarmer stf uses DES-ECB

ai-flow Deserialization of Untrusted Data vulnerability

Deserialization of untrusted data in synthcity

Jenkins Command Line Interface (CLI) Path Traversal Vulnerability