آخرین آسیب‌پذیری‌ها

Solanum before commit 2ce64de Heap Buffer Overflow via JOIN and SJOIN

TeXlyre from 0.11.0 before 0.13.5 Stored XSS via Recipe Icon Import

Coolify before 4.1.1 Application Name Enumeration via Manual Webhook Endpoints

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

SolarWinds Dameware Command Injection Vulnerability

SolarWinds Dameware Buffer Overflow Vulnerability

mongorestore may restore encoded collection names into an unintended collection

SolarWinds Dameware DLL Hijacking Vulnerability

Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory

mongofiles may write outside the working directory through a symlink

mongofiles may disclose GridFS content to standard output through a stored filename

mongorestore may bypass collection guards through a system.buckets prefix

AshAuthentication brute_force_strategy does not limit sign-in and request actions defined on the resource

AshAuthentication TOTP setup lets a user install their own authenticator secret on another user's account

Server-side request forgery via SpatialReference string input

Password hash disclosure to "view only" admin users with custom user models

Potential exposure of private data via empty and missing Vary headers

Server-side request forgery via crs member of GeoJSON geometries

Potential log injection via unescaped geometry form values

Potential memory exhaustion in MultiPartParser via base64-encoded file upload

NULL Pointer Dereference in H5HL_unprotect via Corrupted File

NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code.

NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary option to gain access to compute nodes outside of the current job allocation.

NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained together in a way that would permit an Operator to make themselves an Administrator.

NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution.