Open Source Vulnerabilities
grafana
Grafana stored XSS in FileUploader component
mongodb
Denial of Service and Data Integrity vulnerability in features command
mongodb
Denial of Service and Data Integrity vulnerability in features command
moodle
Moodle: auto-populated h5p author name causes a potential information leak
moodle
Moodle: auto-populated h5p author name causes a potential information leak
minio
User privilege escalation in MinIO
dotnet
.NET Spoofing Vulnerability
mlflow
Reflected XSS via Content-Type Header in mlflow/mlflow
mlflow
Reflected XSS via Content-Type Header in mlflow/mlflow
golang
Panic on large handshake records in crypto/tls
gitlab
Incorrect Authorization in GitLab
airflow
Apache Airflow <2.4.0 has an RCE in a bash example
airflow
Apache Airflow <2.4.0 has an RCE in a bash example
discourse
Multisite denial of service through unsanitized dynamic dispatch to SiteSetting in Discourse
discourse
Multisite denial of service through unsanitized dynamic dispatch to SiteSetting in Discourse
magento
Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution
magento
Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution
envoy
Incorrect handling of H2 GOAWAY + SETTINGS frames
dotnet-sdk
.NET Core and Visual Studio Denial of Service Vulnerability
dotnet-sdk
.NET Core and Visual Studio Denial of Service Vulnerability
mongodb
User may trigger invariant when allowed to send commands directly to shards
mongodb
User may trigger invariant when allowed to send commands directly to shards
grafana
FGAC API Key privilege escalation in Grafana
moodle
Moodle: stored xss in quiz grading report via user id number
moodle
Moodle: stored xss in quiz grading report via user id number
mlflow
Improper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow
mlflow
Improper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow
apache
Improper Handling of Insufficient Privileges
minio
Improper Privilege Management in MinIO
golang
Excessive resource consumption in mime/multipart
gitlab
Incorrect Authorization in GitLab
airflow
Apache Airlfow Pig Provider RCE
dotnet
.NET Core and Visual Studio Denial of Service Vulnerability
dotnet
.NET Core and Visual Studio Denial of Service Vulnerability
magento
Magento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code Execution
magento
Magento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code Execution
