漏洞公告

SQL Injection in Django

Sensitive data written to disk unencrypted in Spark

Allocation of Resources Without Limits or Throttling in Apache Tika

Allocation of Resources Without Limits or Throttling in Apache Tika

Allocation of Resources Without Limits or Throttling in Apache Tika

Django Denial-of-service in strip_tags()

Uncontrolled Recursion in Django

Django Denial-of-service in django.utils.text.Truncator

Undertow Missing Authorization when requesting a protected directory without trailing slash

Deserialization of untrusted data in FasterXML jackson-databind

Deserialization of untrusted data in FasterXML jackson-databind

Deserialization of Untrusted Data in Apache Storm

Improper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQ

XML External Entity (XXE) Injection in Apache Solr

Exposure of Sensitive Information to an Unauthorized Actor in ansible

Cross-Site Scripting in http-file-server

Cross-Site Scripting in min-http-server

Missing Encryption of Sensitive Data in yarn

samlr XML nodes comment attack

datagrid contains code Injection backdoor

Code backdoor in simple_captcha2

python-engineio vulnerable to Cross-Site Request Forgery (CSRF)

Deserialization of Untrusted Data in EthereumJ