OrangeHRM is Vulnerable to Improper Authorization Allowing Unauthorized Access to Candidate Attachments

orangehrm orangehrm orangehrm orangehrm

OrangeHRM is Vulnerable to Persistent Session Access Due to Missing Invalidation After User Disable and Password Change

orangehrm orangehrm orangehrm orangehrm

OrangeHRM is Vulnerable to Account Takeover Through Unvalidated Username in Password Reset Workflow

orangehrm orangehrm orangehrm orangehrm

OrangeHRM is Vulnerable to Code Execution Through Arbitrary File Write from Sendmail Parameter Injection

orangehrm orangehrm orangehrm orangehrm

OpenObserve's Invite Token Lifecycle Misconfiguration

openobserve openobserve

Werkzeug safe_join() allows Windows special device names

pallets werkzeug palletsprojects werkzeug

Kiteworks Core is vulnerable to Improper Input Validation

kiteworks security-advisories accellion kiteworks

Kiteworks MFT has a Privilege Defined With Unsafe Actions

kiteworks security-advisories accellion kiteworks_managed_file_transfer

Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel

kiteworks security-advisories accellion kiteworks_managed_file_transfer

Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerability

kiteworks security-advisories accellion kiteworks_managed_file_transfer

Kiteworks MFT is vulnerable to Insufficient Session Expiration

kiteworks security-advisories accellion kiteworks_managed_file_transfer

OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack

OpenPrinting cups openprinting cups

OpenPrinting CUPS vulnerable to stack based out-of-bound write

OpenPrinting cups openprinting cups

AIS-catcher has a Buffer Overflow vulnerability in `AIS::Message` leading to DoS/RCE

jvde-github AIS-catcher aiscatcher ais-catcher

AIS-catcher Integer Underflow in MQTT Packet Parsing leading to Heap Buffer Overflow

jvde-github AIS-catcher aiscatcher ais-catcher

willitmerge has a command Injection vulnerability

shama willitmerge dontkry willitmerge

LibreChat is Vulnerable to Server-Side Request Forgery (SSRF) in Actions Capability

danny-avila LibreChat librechat librechat +1个

Retro is vulnerable to XSS vulnerability in input handling component

Anjaliavv51 Retro

fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

fonttools fonttools fonttools fonttools

Rallly Information Disclosure Vulnerability in Participant API Leaks Names and Emails Despite Pro Privacy Settings

lukevella rallly rallly rallly