Advisory Catalog

Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode expressionInterpeter

Directus `search` query parameter allows enumeration of non permitted fields

Suspended Directus user can continue to use session token to access API

Directus's S3 assets become unavailable after a burst of HEAD requests

Directus's S3 assets become unavailable after a burst of malformed transformations

Frappe has possibility of SQL injection due to improper validations

wp-svg-upload WordPress plugin vulnerable to Stored Cross-site Scripting

Pixelfed may allow unauthorized actor to view private posts and private users

NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.

Frappe has Possibility of Remote Code Execution due to improper validation

Frappe has possibility of SQL injection due to improper validations

A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AI_MD5_PARSE_STRING_IN_QUOTATION of the file code/AssetLib/MD5/MD5Parser.cpp of the component MD5 File Handler. The manipulation of the argument data leads to heap-base

A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument tmp leads to heap-based

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as critical. Affected by this issue is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument src.ent

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as critical. Affected by this vulnerability is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argum

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as critical. Affected is the function SceneCombiner::MergeScenes of the file code/AssetLib/LWS/LWSLoader.cpp of the component LWS File Handler. The manipulation leads to out-of-bounds read. It is possible to

A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function fast_atoreal_move in the library include/assimp/fast_atof.h of the component CSM File Handler. The manipulation leads to out-of-bounds read. The attack may be initiated

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation of the argument na leads

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation leads to out-of-bounds write. It is po

API Platform Core does not call GraphQl securityAfterResolver

GetmeUK ContentTools Cross-Site Scripting (XSS)

yiisoft Yii2 Deserialization of Untrusted Data

Parse Server has an OAuth login vulnerability

AWS CDK CLI prints AWS credentials retrieved by custom credential plugins

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp. The manipulation leads to heap-based buffer overflow. The attack may be initiated remo

A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function MDLImporter::InternReadFile_Quake1 of the file code/AssetLib/MDL/MDLLoader.cpp. The manipulation of the argument skinwidth/skinheight leads to divide by zero. The at

Open WebUI Has Improper Access Control Leading to Arbitrary Prompt Read

Open WebUI Allows Viewing of Admin Details

BentoML Open Redirect vulnerability

MLflow has Weak Password Requirements

SageMaker Workflow component allows possibility of MD5 hash collisions

A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large filename, the server b

A Server-Side Request Forgery (SSRF) vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows an attacker to construct a response link by saving the response in a folder named after the SHA-1 hash of the target URL. This enables the attacker to access the

An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availability. The issue arises because the function responsible for restarting the server is not properly

A stored cross-site scripting (XSS) vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, affecting version git 20b2e02. The vulnerability arises from improper sanitization of HTML tags in chat history uploads. Specifically, the sanitization logic fails to handle HTML tags within code b

AgentScope stored cross-site scripting (XSS) vulnerability

Gradio Vulnerable to Open Redirect

Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF)

H2O Vulnerable to Execution of Arbitrary Files

Flask-CORS allows for inconsistent CORS matching

Flask-CORS improper regex path matching vulnerability

MLflow Uncontrolled Resource Consumption vulnerability

TorchServe script references S3 bucket without ensuring ownership or confirming accessibility

Aim Relative Path Traversal vulnerability

LlamaIndex Uncontrolled Resource Consumption vulnerability

Aim vulnerable to Synchronous Access of Remote Resource without Timeout

Gradio Path Traversal vulnerability

A Regular Expression Denial of Service (ReDoS) vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pattern `r'<[^>]+>'` to parse user input. In Python's default regex engine, this pattern can take polynomial time to match certain crafted inputs. An att

langchain-core allows unauthorized users to read arbitrary files from the host file system

FastChat open redirect vulnerability