Werkzeug safe_join() allows Windows special device names

pallets werkzeug palletsprojects werkzeug

Kiteworks Core is vulnerable to Improper Input Validation

kiteworks security-advisories accellion kiteworks

Kiteworks MFT has a Privilege Defined With Unsafe Actions

kiteworks security-advisories accellion kiteworks_managed_file_transfer

Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel

kiteworks security-advisories accellion kiteworks_managed_file_transfer

Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerability

kiteworks security-advisories accellion kiteworks_managed_file_transfer

Kiteworks MFT is vulnerable to Insufficient Session Expiration

kiteworks security-advisories accellion kiteworks_managed_file_transfer

OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack

OpenPrinting cups openprinting cups

OpenPrinting CUPS vulnerable to stack based out-of-bound write

OpenPrinting cups openprinting cups

AIS-catcher has a Buffer Overflow vulnerability in `AIS::Message` leading to DoS/RCE

jvde-github AIS-catcher aiscatcher ais-catcher

AIS-catcher Integer Underflow in MQTT Packet Parsing leading to Heap Buffer Overflow

jvde-github AIS-catcher aiscatcher ais-catcher

willitmerge has a command Injection vulnerability

shama willitmerge dontkry willitmerge

LibreChat is Vulnerable to Server-Side Request Forgery (SSRF) in Actions Capability

danny-avila LibreChat librechat librechat +1个

Retro is vulnerable to XSS vulnerability in input handling component

Anjaliavv51 Retro

fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

fonttools fonttools fonttools fonttools

Rallly Information Disclosure Vulnerability in Participant API Leaks Names and Emails Despite Pro Privacy Settings

lukevella rallly rallly rallly

PubNet Critical Authentication Bypass Allows Unauthenticated Package Upload and Identity Spoofing

ricardoboss PubNet ricardoboss pubnet

ClipBucket v5 Unauthenticated Object Flagging Vulnerability

MacWarrior clipbucket-v5 oxygenz clipbucket

Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

cilium cilium cilium cilium +2个

Multiple Cross-Site Scripting (XSS) vulnerabilities exist in xmall v1.1 due to improper handling of ...

exrick xmall

Reflected Cross-Site Scripting (rXSS) in krpano before version 1.23.2 allows a remote unauthenticate...

krpano krpano