Open Source Vulnerabilities

org.xwiki.platform:xwiki-platform-notifications-ui, org.xwiki.platform:xwiki-platform-notifications-ui

XWiki Platform vulnerable to Code injection through NotificationRSSService

org.xwiki.platform:xwiki-platform-icon-default, org.xwiki.platform:xwiki-platform-icon-script, org.xwiki.platform:xwiki-platform-icon-script, org.xwiki.platform:xwiki-platform-icon-default, org.xwiki.platform:xwiki-platform-icon-ui, org.xwiki.platform:xwiki-platform-icon-ui

XWiki Platform vulnerable to Code Injection in icon themes

org.xwiki.commons:xwiki-commons-xml, org.xwiki.commons:xwiki-commons-xml

org.xwiki.commons:xwiki-commons-xml's HTML sanitizer allows form elements in restricted

parse-server, parse-server

Parse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution

org.xwiki.platform:xwiki-platform-ckeditor-ui, org.xwiki.contrib:application-ckeditor-ui, org.xwiki.platform:xwiki-platform-ckeditor-ui

XWiki Platform vulnerable to persistent Cross-site Scripting through CKEditor Configuration pages

github.com/labring/sealos

Sealos billing system permission control defect

wp-graphql/wp-graphql

WPGraphQL Plugin vulnerable to Server Side Request Forgery (SSRF)

pypdf, pypdf2

pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character

org.keycloak:keycloak-services

Keycloak vulnerable to Improper Client Certificate Validation for OAuth/OpenID clients

org.keycloak:keycloak-services

Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC

org.keycloak:keycloak-core

Keycloak Untrusted Certificate Validation vulnerability

org.keycloak:keycloak-services, org.keycloak:keycloak-server-spi-private

Client Spoofing within the Keycloak Device Authorisation Grant

github.com/labring/sealos

Improper configuration of RBAC permissions obtaining cluster control permissions

atty

atty potential unaligned read

Dependency cache path traversal in Gradle

Path traversal vulnerabilities in handling of Tar archives in Gradle

pipreqs

hnswlib, hnswlib, hnswlib

pypdf2

pypdf2

pypdf2, pypdf2, pypdf2, pypdf2, pypdf2, pypdf2

pypdf2, pypdf2, pypdf2, pypdf2

hnswlib, hnswlib, hnswlib, hnswlib

, ,

Persistent Cross-site Scripting (XSS) through CKEditor Configuration pages in XWiki Platform

Quadratic runtime with malformed PDF missing xref marker in pypdf

Infinite Loop when reading malformed objects in pypdf

go.temporal.io/server

Temporal Server vulnerable to Incorrect Authorization and Insecure Default Initialization of Resource

wikibase/wikibase

MediaWiki Cross-site Scripting vulnerability

angular-ui-notification

angular-ui-notification Cross-site Scripting vulnerability

pacparser, pacparser, pacparser

pacparser

pacparser, pacparser, pacparser, pacparser

Insecure Default Authorization in Temporal Server

mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

joplin

Joplin Cross-site Scripting vulnerability

joplin

Joplin Cross-site Scripting vulnerability

ghostscript

Memcpy-param-overlap in pdfi_copy_truetype_font