Advisory Catalog

Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin

Strapi allows Server-Side Request Forgery in Webhook function

Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking

Fiber panics when fiber.Ctx.BodyParser parses invalid range index

Grafana Cross-Site-Scripting (XSS) via custom loaded frontend plugin

Drupal Lightgallery Cross-site Scripting vulnerability

Drupal Admin Audit Trail Allocation of Resources Without Limits or Throttling vulnerability

Drupal Commerce Alphabank Redirect Incorrect Authorization vulnerability

Drupal Commerce Eurobank (Redirect) Incorrect Authorization vulnerability

containerd allows host filesystem access on pull

Smartbedded Meteobridge Command Injection Vulnerability

reint_downloadmanager TYPO3 Extension is susceptible to Insecure Direct Object Reference

The Front End User Registration extension for TYPO3 (sr_feuser_register) allows Insecure Direct Object Reference

The Backup Plus extension for TYPO3 (ns_backup) has a Predictable Resource Location

Langroid has a Code Injection vulnerability in LanceDocChatAgent through vector_store

The TYPO3 CMS Backend has Broken Authentication in Backend MFA

TYPO3 Allows Privilege Escalation to System Maintainer

Multer vulnerable to Denial of Service from maliciously crafted requests

Multer vulnerable to Denial of Service via memory leaks from unclosed streams

OpenPGP.js's message signature verification can be spoofed

Hugging Face Transformers Regular Expression Denial of Service

Cocotais Bot has builtin .echo command injection

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Ollama Server Vulnerable to Denial of Service (DoS) Attack

Tornado vulnerable to excessive logging caused by malformed multipart form data

Reflex vulnerable to private state fields modification

Babylon Integer Overflow in Distribution Module CumulativeRewardRatio Calculation Leading to Chain Halt

Babylon Finality Provider `MsgCommitPubRandList` replay attack

label-studio vulnerable to Cross-Site Scripting (Reflected) via the label_config parameter.

The Events Log Track module enables you to log specific events on a Drupal site. The module doesn't sufficiently mitigate resource consumption for certain requests which allows a Denial of Service attack.

Cosmos EVM Allows Partial Precompile State Writes

motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution

Yggdrasil Vulnerable to Local Privilege Escalation

Apache IoTDB Discloses Sensitive Information via Log Files

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Microsoft Windows DWM Core Library Use-After-Free Vulnerability

Microsoft Windows Scripting Engine Type Confusion Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

OXID eShop May Display User Information

LlamaIndex Vulnerable to Denial of Service (DoS)

code-server's session cookie can be extracted by having user visit specially crafted proxy URL

Rack has an Unbounded-Parameter DoS in Rack::QueryParser

The module enables you to add second-factor authentication in addition to the default Drupal login. The module does not sufficiently ensure that known login routes are protected. This vulnerability is mitigated by the fact that an attacker must obtain the user's username and password.

The module enables you to add second-factor authentication in addition to the default Drupal login. The module doesn't sufficiently protect certain routes from Cross Site Request Forgery (CSRF) attacks.

The module enables you to add second-factor authentication in addition to the default Drupal login. The module doesn't invoke two factor authentication (2FA) for the password reset option. This vulnerability is mitigated by the fact that an attacker must have access to the password reset link.

The Restrict route by IP module provides an interface to manage route restriction by IP address. The module doesn't sufficiently protect certain routes from CSRF attacks. This vulnerability is mitigated by the fact that you need to know the route machine name.

SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability