Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability

Sante DICOM Viewer Pro santesoft dicom_viewer_pro

MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability

MLflow MLflow

Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability

Xmind Xmind

GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP GIMP gimp gimp

Liquid Prompt arbitrary command injection via crafted Git branch names in gitstatusd backend

liquidprompt liquidprompt

wren-lang wren Source File wren_compiler.c peekChar out-of-bounds

wren-lang wren wren-lang wren +3个

Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster

vapor leaf-kit vapor leafkit

Cache poisoning in @sveltejs/adapter-vercel

sveltejs kit

Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints

akuity kargo akuity kargo +2个

Kargo has Missing Authorization Vulnerabilities in Approval & Promotion REST API Endpoints

akuity kargo akuity kargo

pypdf possibly has long runtimes for malformed FlateDecode streams

py-pdf pypdf pypdf_project pypdf

pypdf has possible long runtimes/large memory usage for large /ToUnicode streams

py-pdf pypdf pypdf_project pypdf

pypdf has a possible infinite loop when processing TreeObject

py-pdf pypdf pypdf_project pypdf

RediSearch Query Injection in @langchain/langgraph-checkpoint-redis

langchain-ai langgraphjs

Photobooth has a XSS vulnerability in user input

lukas12000 photobooth

D-Link DWR-M960 Port Forwarding Configuration Endpoint formPortFw sub_423E00 stack-based overflow

D-Link DWR-M960 dlink dwr-m960_firmware

fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names

NaturalIntelligence fast-xml-parser naturalintelligence fast-xml-parser

openITCOCKPIT has Unsafe Deserialization in openITCOCKPIT Changelog Handling

openITCOCKPIT openITCOCKPIT it-novum openitcockpit

Deno has a Command Injection via Incomplete shell metacharacter blocklist in node:child_process

denoland deno deno deno

D-Link DWR-M960 Filter Configuration Endpoint formFilter sub_424AFC stack-based overflow

D-Link DWR-M960 dlink dwr-m960_firmware