Missing Authorization check in SAP NetWeaver Application Server for ABAP

SAP_SE SAP NetWeaver Application Server for ABAP SAP_SE SAP NetWeaver Application Server for ABAP +13个

An issue in Agnitum Outpost Security Suite 7.5.3 (3942.608.1810) and 7.6 (3984.693.1842) allows a lo...

未知

Pre-Receive Hook Path Collision Vulnerability in GitHub Enterprise Server Allowing Privilege Escalation

GitHub Enterprise Server

DOM-based Cross-Site Scripting was identified in GitHub Enterprise Server Issues search allows privilege escalation and unauthorized workflow triggers

GitHub Enterprise Server

Employee Records System v1.0 Arbitrary File Upload RCE

Employee Records System Employee Records System

PacsOne Server 6.6.2 DICOM Web Viewer Directory Traversal LFI

RainbowFish Software PacsOne Server

SpiceDB's WriteRelationships fails silently if payload is too big

authzed spicedb

TorrentPier is Vulnerable to Authenticated SQL Injection through Moderator Control Panel's topic_id parameter

torrentpier torrentpier

Soft Serve is vulnerable to SSRF through its Webhooks

charmbracelet soft-serve

CycloneDX Core (Java): BOM validation is vulnerable to XML External Entity injection

CycloneDX cyclonedx-core-java

Milvus Proxy has Critical Authentication Bypass Vulnerability

milvus-io milvus milvus-io milvus +1个

pdfminer.six vulnerable to Arbitrary Code Execution via Crafted PDF Input

pdfminer pdfminer.six

Incus vulnerable to local privilege escalation through custom storage volumes

lxc incus lxc incus

Langfuse vulnerable to cross‑organization enumeration of member & invitation lists via project membership APIs

langfuse langfuse langfuse langfuse

Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input (via CPU)

bugsink bugsink

Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input

bugsink bugsink

Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details

parse-community parse-server

ProsemirrorToHtml: Cross-Site Scripting vulnerability through unescaped HTML attribute values

etaminstudio prosemirror_to_html

OAuth2-Proxy vulnerable to header smuggling via underscore, leading to potential privilege escalation

oauth2-proxy oauth2-proxy

OpenEXR has use after free in PyObject_StealAttrString

AcademySoftwareFoundation openexr AcademySoftwareFoundation openexr +1个