Open Source Vulnerabilities
DMTF-2023-0001: SPDM mutual authentication bypass
effectindex/tripreporter vulnerable to improper password verification on POST `/api/v1/account/login`
effectindex/tripreporter vulnerable to improper password verification on POST `/api/v1/account/login`
jsreport
jsreport vulnerable to code injection
WWBN/AVideo stored XSS vulnerability leads to takeover of any user's account, including admin's account
WWBN/AVideo stored XSS vulnerability leads to takeover of any user's account, including admin's account
Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php
Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php
Mutagen list and monitor operations do not neutralize control characters in text controlled by remote endpoints
Mutagen list and monitor operations do not neutralize control characters in text controlled by remote endpoints
On a compromised node, the fluid-csi service account can be used to modify node specs
On a compromised node, the fluid-csi service account can be used to modify node specs
Auth bypass in Web Stories for WordPress plugin
Rekor's compressed archives can result in OOM conditions
github.com/imgproxy/imgproxy/v3
imgproxy is vulnerable to Server-Side Request Forgery
github.com/imgproxy/imgproxy/v3
imgproxy is vulnerable to Server-Side Request Forgery
net.mingsoft:ms-mcms
MCMS vulnerable to arbitrary code execution via crafted thumbnail
net.mingsoft:ms-mcms
MCMS vulnerable to arbitrary code execution via crafted thumbnail
go1.19, go1.19, go1.19, go1.19, go1.19, go1.19, go1.19, go1.19
Security update for go1.19
go1.19/ go1.19/ go1.19/ go1.19/ go1.19/ go1.19/ go1.19/ go1.19
Security update for go1.19
