Advisory Catalog

OpenEXR Out-Of-Memory via Unbounded File Header Values

OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode

OpenEXR Out of Bounds Heap Read due to Bad Pointer Arithmetic in LossyDctDecoder_execute

MS SWIFT Deserialization RCE Vulnerability

MS SWIFT WEB-UI RCE Vulnerability

copyparty Reflected XSS via Filter Parameter

This module enables you to integrate Google Tag Manager (GTM) into your Drupal site by allowing administrators to configure and embed GTM container snippets. The module doesn't sufficiently sanitize the GTM container ID under the scenario where a user with the *Administer gtm* permission enters mal

Pyload log Injection via API /json/add_package in add_name parameter

copyparty has DOM-Based XSS vulnerability when displaying multimedia metadata

webfinger.js Blind SSRF Vulnerability

Withdrawn Advisory: CodeIgniter4 Cross-Site Scripting Vulnerability in debugbar_time Parameter

Assemblyline 4 service client vulnerable to Arbitrary Write through path traversal in Client code

Calibre Web and Autocaliweb have OS Command Injection vulnerability

Mezzanine CMS vulnerable to Cross-site Scripting

Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.

Dagster Local File Inclusion vulnerability

Femanager extension for TYPO3 allows Insecure Direct Object Reference

Powermail extension for TYPO3 allows Insecure Direct Object Reference

HAX CMS application pages vulnerable to clickjacking

Starlette has possible denial-of-service vector when parsing large files in multipart forms

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.6.6, an IDOR vulnerability in the GrapQL `NotificationLineNotificationMarkReadMutation` and `NotificationLineNotificationDeleteMutation` mutations of OpenCTI allows an authenticate

Filemanager is vulnerable to Relative Path Traversal through filemanager.php

OpenZeppelin Contracts Bytes's lastIndexOf function with position argument performs out-of-bound memory access on empty buffers

DiracX-Web is vulnerable to attack through an Open Redirect on its login page

This module enables you to analyze the content that you're authoring for a website. It shows you a preview of what a search result might look like. The module doesn't sufficiently escape the metadata from content while rendering the preview, opening up the possibility of a XSS attack. This vulnera

This module allows you to define custom attributes for a block. You can specify an attribute name to be added to the block in a predefined format. The module does not sufficiently validate the provided attributes, which makes it possible to insert JavaScript event attributes such as `onmouseover`,

vue-i18n's escapeParameterHtml does not prevent DOM-based XSS through its tag attributes

Directus' insufficient permission checks can enable unauthenticated users to manually trigger Flows

Directus' exact version number is exposed by the OpenAPI Spec

Directus tokens are not redacted in flow logs, exposing session credentials to all admin

Directus is vulnerable to sensitive data exposure as user data is not being redacted when logged

Indico vulnerability allows attackers to bulk dump user details

py-libp2p is vulnerable to DoS attacks through use of large RSA keys

Roundup is vulnerable to XSS through interactions between URLs and issue tracker templates

Better Call routing bug can lead to Cache Deception

phpThumb is vulnerable to Command Injection through its gif_outputAsJpeg function

Transformers is vulnerable to ReDoS attack through its DonutProcessor class

@pdfme/common vulnerable to to XSS and Prototype Pollution through its expression evaluation

Wing FTP Server Information Disclosure Vulnerability

Parse Server exposes the data schema via GraphQL API

LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class

This module provides a format filter, which allows you to "disable" iframes (e.g. remove their src attribute) specified by the user. These elements will be enabled again, once the Cookies banner is accepted. The module doesn't sufficiently filter user-supplied content when their value might contain

Cloudflare Vite plugin exposes secrets over the built-in dev server

Microsoft SharePoint Improper Authentication Vulnerability

fastapi-guard is vulnerable to ReDoS through inefficient regex

LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit

LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing

Transformers vulnerable to ReDoS attack through its get_imports() function

Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking

LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions