Advisory Catalog

Liferay Portal Reflected XSS in CKeditor 4.21.0 endpoint

Dpanel has an arbitrary file read vulnerability

Mattermost Fails to Sanitize File Names

Mattermost has Potential Server Crash due to Unvalidated Import Data

vite-plugin-static-copy files not included in `src` are possible to access with a crafted request

go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data

UnoPim vulnerable to CSRF on Product edit feature and creation of other types

UnoPim has Stored Cross-site Scripting vulnerability in user creation functionality

Mattermost Fails to Sanitize Path Traversal Sequences

Mattermost Fails to Validate File Paths

Mattermost Does Not Sanitize the Team Invite ID

Mattermost Fails to Validate Remote Cluster Upload Sessions

n8n symlink traversal vulnerability in "Read/Write File" node allows access to restricted files

CRI-O has Potential High Memory Consumption from File Read

elysia-cors Origin Validation Error

Withdrawn Advisory: Microsoft Knack ReDoS Vulnerability in the Introspection Module

Withdrawn Advisory: Microsoft Knack ReDoS Vulnerability in the Introspection Module

Default Credentials in nginx-defender Configuration Files

WP Crontrol Authenticated (Administrator+) plugin vulnerable to Blind Server-Side Request Forgery

Mermaid improperly sanitizes sequence diagram labels leading to XSS

Mermaid does not properly sanitize architecture diagram iconText leading to XSS

Astro allows unauthorized third-party images in _image endpoint

MoonShine SQL Injection Vulnerability

MoonShine Arbitrary File Upload Vulnerability

moonshine Stored Cross-Site Scripting Vulnerability in Create Admin

moonshine Stored Cross-Site Scripting Vulnerability in Create Article

OpenFGA Authorization Bypass

LibreNMS allows stored XSS in Alert Template name field

Copier's safe template has filesystem write access outside destination path

ExpressGateway Cross-Site Scripting Vulnerability in lib/rest/routes/apps.js

ExpressGateway Cross-Site Scripting Vulnerability in lib/rest/routes/users.js

@astrojs/node's trailing slash handling causes open redirect issue

Information Disclosure in Amazon ECS Container Agent

Apache Superset allows authenticated users to discover metadata about datasources they don't have permission to access

Apache Superset has bypass of `DISALLOWED_SQL_FUNCTIONS` that allows execution of blocked SQL functions

Apache Superset data query improperly discloses database schema information to low-privileged guest user

Apache Superset's chart visualization has a stored Cross-Site Scripting (XSS) vulnerability

Helm May Panic Due To Incorrect YAML Content

Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

Active Record logging vulnerable to ANSI escape injection

PyPDF's Manipulated FlateDecode streams can exhaust RAM

The Layout Builder Advanced Permissions module enables you to have fine grained control over who can do what in editing pages built with Layout Builder. The module doesn't sufficiently control access for adding sections in the submodule. This vulnerability is mitigated by the fact that an attacker

OMERO.web displays unecessary user information when requesting password reset

Magento vulnerable to path traversal

Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

svg-sanitizer Bypasses Attribute Sanitization

Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions

Mattermost Confluence Plugin has Missing Authorization vulnerability

Mattermost Confluence Plugin has Missing Authorization vulnerability

Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions