漏洞公告

无摘要

无摘要

无摘要

无摘要

MariaDB has possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets

RestrictedPython guard hooks can be shadowed via positional-only arguments

org.mariadb:r2dbc-mariadb vulnerable to cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)

org.mariadb:r2dbc-mariadb has Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output

org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context

org.mariadb.jdbc:mariadb-java-client has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

MariaDB has cleartext password disclosure to a MITM on the initial-handshake

Snipe-IT has an Improper Privilege Management issue

MapFish Print has XXE that allows reading arbitrary files of certain types

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

silverstripe/versioned has XSS in archive admin restore

SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read

SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets

Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens

Fortigate syslog message parser can be exploited to modify or delete fields from the original message

klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply

MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

无摘要