漏洞公告

Duplicate Advisory: jQuery Cross Site Scripting vulnerability

Duplicate Advisory: Cosmos "Barberry" vulnerability in github.com/cosmos/cosmos-sdk

Withdrawn Advisory: urlnorm vulnerable to Regular Expression Denial of Service

Duplicate Advisory: elFinder vulnerable to path traversal in LocalVolumeDriver connector

Withdrawn Advisory: CraftCMS Server-Side Template Injection vulnerability

Duplicate Advisory: Grafana Improper Access Control vulnerability

Duplicate Advisory: Starlette vulnerable to directory traversal

Duplicate Advisory: Keycloak vulnerable to untrusted certificate validation

Duplicate Advisory: PrestaShop Cross-site Scripting vulnerability

Duplicate Advisory: Cross-site Scripting (XSS) in Predefined Properties delete

Duplicate Advisory: Cross-site Scripting (XSS) in name field of Custom Reports

Duplicate Advisory: Pimcore Cross-site Scripting (XSS) in Static Routes name field

Duplicate Advisory: Arbitrary code execution in jfinal CMS

Withdrawn Advisory: Access control issues in blackbox_exporter

Duplicate Advisory: AVideo contains Command injection when embedding a video link

Duplicate Advisory: Starlette allows an unauthenticated and remote attacker to specify any number of form fields or files

Duplicate Advisory: Lemur subject to insecure random generation

Withdrawn: SQL injection in Yii 2

Duplicate Advisory: pimcore is vulnerable to cross-site scripting in translate module

Duplicate Advisory: pimcore is vulnerable to cross-site scripting in classes module

Duplicate Advisory: Pimcore vulnerable to Reflected XSS in Predefined Properties module in Settings

Duplicate Advisory: Pimcore Cross-site scripting in Predefined Asset Metadata module in Settings

Duplicate Advisory: pullit Command Injection vulnerability