Open Source Vulnerabilities

laravel/laravel

Remote Code Execution in Laravel

kevinpapst/kimai2

Improper Neutralization of Formula Elements in a CSV File in Kimai 2

grok

Stack-use-after-scope in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<g

lwan

Heap-buffer-overflow in lwan_h2_huffman_decode_for_fuzzing

com.yahoo.elide:elide-datastore-aggregation

SQL Injection in elide-datastore-aggregation

github.com/ipld/go-ipfs, github.com/ipld/go-ipfs

Daemon panics when processing certain blocks

github.com/ipld/go-codec-dagpb

ipld/go-codec-dagpb panics when processing certain blocks

org.xwiki.platform:xwiki-platform-web, org.xwiki.platform:xwiki-platform-web, org.xwiki.platform:xwiki-platform-web

Unauthenticated user can list hidden document from multiple velocity templates in XWiki

org.xwiki.platform:xwiki-platform-skin-skinx, org.xwiki.platform:xwiki-platform-skin-skinx, org.xwiki.platform:xwiki-platform-skin-skinx

Incorrect Use of Privileged APIs in org.xwiki.platform.skin.skinx

org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web-templates

Unauthenticated user can retrieve the list of users through uorgsuggest.vm

,

Unauthenticated user can list hidden document from multiple velocity templates

Unauthenticated user can retrieve the list of users through uorgsuggest.vm

radare2, radare2, radare2, radare2, radare2, radare2

Incorrect Use of Privileged APIs in org.xwiki.platform.skin.skinx

heap-use-after-free in radareorg/radare2

php-mockery

radare2, radare2, radare2, radare2, radare2, radare2

Bond.Core.CSharp

Infinite loop in .Net Bond

NULL Pointer Dereference in r_bin_ne_get_entrypoints function in radareorg/radare2

gpac

gpac

libsixel, libsixel, libsixel

gpac, gpac, gpac, gpac, gpac, gpac

gpac, gpac, gpac, gpac, gpac, gpac

gpac, gpac, gpac, gpac, gpac, gpac

gpac, gpac, gpac, gpac, gpac, gpac

libsixel, libsixel, libsixel, libsixel, libsixel, libsixel, libsixel