漏洞公告

Cross-site scripting in Jenkins Kiuwan Plugin

elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE

Server-Side Request Forgery in Plone

Server-Side Request Forgery in Plone

Incorrect Permission Assignment for Critical Resource in Plone

Duplicate Advisory: Path Traversal in Zope

Insufficiently random values in Ansible

go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSON

Cross-site scripting in RESTEasy

Cross-Site Scripting

Open redirect in Flask-Unchained

Uncontrolled memory consumption

Infinite Loop in Apache PDFBox

elFinder unsafe upload filtering leading to remote code execution

The Fuck Arbitrary File Deletion via Path Traversal

Observable Timing Discrepancy in aaugustin websockets library

Uncontrolled Resource Consumption in locutus

Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone

Duplicate Advisory: Reflected cross-site scripting issue in Datasette

Duplicate Advisory: Path Traversal in Zope

Authentication bypass in SilverStripe GraphQL

Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks

Path Traversal in Django