漏洞公告

Improper use of cryptographic key in wal-g

SQL injection in TYPO3 extension

CSRF token exposure in TYPO3 extension

Insertion of Sensitive Information into Externally-Accessible File or Directory and Exposure of Sensitive Information to an Unauthorized Actor in hbs

Dolibarr vulnerable to Improper Authentication and Improper Access Control

Cross-site scripting in pywb

OS Command Injection in Centreon

Uncontrolled Resource Consumption in trim-off-newlines

Uncontrolled Resource Consumption in ansi-html

XML External Entity Injection in PyWPS

Command Injection in RaspAP 2.6.6

raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions.

Uncontrolled Resource Consumption in transpile

Code Injection in pac-resolver

Directory Traversal in startserver

Prototype Pollution in mootools

Cross-site Request Forgery (CSRF) in joplin

Weak Password Recovery Mechanism for Forgotten Password

Command injection in @diez/generation

Use of Cryptographically Weak Pseudo-Random Number Generator in showdoc

Default CORS config allows any origin with credentials

Parse Server crashes with query parameter

Arbitrary Code Execution in Rdoc