漏洞公告

Duplicate Advisory: Privilege escalation in sap/cloud-security-client-go

Duplicate Advisory: phpseclib vulnerable to denial of service

Duplicate Advisory: Apache Superset - Elevation of Privilege

Duplicate Advisory: CKEditor Cross-site Scripting vulnerability

Cross-site Scripting in cesium

Duplicate Advisory: Eclipse IDE XXE in eclipse.platform

Duplicate Advisory: NATS.io: Adding accounts for just the system account adds auth bypass

Withdrawn Advisory: dom4j XML Entity Expansion vulnerability

Duplicate Advisory: Denial of Service in JSON-Java

Duplicate Advisory: Bundled libwebp in Pillow vulnerable

Withdrawn Advisory: Netty-handler does not validate host names by default

Withdrawn Advisory: October Cross-site Scripting vulnerability

Duplicate Advisory: Consensys gnark-crypto allows Signature Malleability

Foreman Transpilation Enables OS Command Injection

Withdrawn Advisory: Mobile Security Framework (MobSF) Vulnerable to Insecure Permissions

Duplicate Advisory: EVE Freely Allocates Buffer on The Stack With Data From Socket

Duplicate Advisory: EVE Has Partially Predetermined Vault Key

Duplicate Advisory: EVE: SSH as Root Unlockable Without Triggering Measured Boot

Duplicate Advisory: EVE's Debug Functions Unlockable Without Triggering Measured Boot

Duplicate Advisory: EVE Doesn't Protect Config Partition with Measured Boot

Duplicate Advisory: EVE Doesn't Protect Rootfs

Duplicate Advisory: EVE Seals Vault Key With SHA1 PCRs

Duplicate Advisory: EVE Doesn't Measure Config Partition From 2 Fronts