Advisory Catalog

Mezzanine CMS vulnerable to Cross-site Scripting

Possible ORM Leak Vulnerability in the Harbor

Harbor repository description page has Cross-site Scripting vulnerability

Ollama vulnerable to Cross-Domain Token Exposure

Dagster Local File Inclusion vulnerability

Femanager extension for TYPO3 allows Insecure Direct Object Reference

Powermail extension for TYPO3 allows Insecure Direct Object Reference

HAX CMS application pages vulnerable to clickjacking

Starlette has possible denial-of-service vector when parsing large files in multipart forms

melange's world-writable permissions expose SBOM files to potential image tampering

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.6.6, an IDOR vulnerability in the GrapQL `NotificationLineNotificationMarkReadMutation` and `NotificationLineNotificationDeleteMutation` mutations of OpenCTI allows an authenticate

Filemanager is vulnerable to Relative Path Traversal through filemanager.php

Mattermost Path Traversal vulnerability

Mattermost Missing Authentication for Critical Function

OpenZeppelin Contracts Bytes's lastIndexOf function with position argument performs out-of-bound memory access on empty buffers

DiracX-Web is vulnerable to attack through an Open Redirect on its login page

Grafana's insecure DingDing Alert integration exposes sensitive information

This module enables you to analyze the content that you're authoring for a website. It shows you a preview of what a search result might look like. The module doesn't sufficiently escape the metadata from content while rendering the preview, opening up the possibility of a XSS attack. This vulnera

This module allows you to define custom attributes for a block. You can specify an attribute name to be added to the block in a predefined format. The module does not sufficiently validate the provided attributes, which makes it possible to insert JavaScript event attributes such as `onmouseover`,

vue-i18n's escapeParameterHtml does not prevent DOM-based XSS through its tag attributes

Measured is vulnerable to Path Traversal attacks during class initialization

resolv vulnerable to DoS via insufficient DNS domain name length validation

Directus' insufficient permission checks can enable unauthenticated users to manually trigger Flows

Directus' exact version number is exposed by the OpenAPI Spec

Directus tokens are not redacted in flow logs, exposing session credentials to all admin

Directus is vulnerable to sensitive data exposure as user data is not being redacted when logged

Indico vulnerability allows attackers to bulk dump user details

py-libp2p is vulnerable to DoS attacks through use of large RSA keys

Roundup is vulnerable to XSS through interactions between URLs and issue tracker templates

Better Call routing bug can lead to Cache Deception

phpThumb is vulnerable to Command Injection through its gif_outputAsJpeg function

Transformers is vulnerable to ReDoS attack through its DonutProcessor class

@pdfme/common vulnerable to to XSS and Prototype Pollution through its expression evaluation

Wing FTP Server Information Disclosure Vulnerability

Parse Server exposes the data schema via GraphQL API

LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class

This module provides a format filter, which allows you to "disable" iframes (e.g. remove their src attribute) specified by the user. These elements will be enabled again, once the Cookies banner is accepted. The module doesn't sufficiently filter user-supplied content when their value might contain

Juju vulnerable to sensitive log retrieval via authenticated endpoint without authorization

Cloudflare Vite plugin exposes secrets over the built-in dev server

Microsoft SharePoint Improper Authentication Vulnerability

fastapi-guard is vulnerable to ReDoS through inefficient regex

LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit

LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing

Transformers vulnerable to ReDoS attack through its get_imports() function

Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking

LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions

Cockpit - Content Platform vulnerable to XSS through name or email argument names

n8n is vulnerable to Improper Authorization through its `/stop` endpoint

tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript

n8n Vulnerable to Denial of Service via Malformed Binary Data Requests