漏洞公告

Authorization header is not sanitized in an error object in auth0

Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS

Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS

Potential Remote Code Execution in TYPO3 with mediace extension

Command Injection in git-tags-remote

SQL Injection in Kylin

Command Injection in Kylin

SQL Injection in Kylin

Command Injection in Kylin

Out-of-bounds reads in Pillow

Buffer overflow in Pillow

Out-of-bounds reads in Pillow

Out-of-bounds read in Pillow

Remote Code Execution in scratch-vm

Unsafe object creation in json RubyGem

Authorization Bypass in I hate money

Stored XSS in Apache Airflow

Remote code execution (RCE) in Apache Airflow

Insecure default config of Celery worker in Apache Airflow

Command injection via Celery broker in Apache Airflow

Multiple stored XSS in RBAC Admin screens in Apache Airflow

Directory traversal in fast-http

Uncontrolled resource consumption in jpeg-js