Latest CVE and advisory summaries, rewritten for quick scanning with credit to the original sources.
When using the "configparser" module to write configuration files containing multi-line text...
In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X...
GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode...
CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS...
motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read
motionEye's missing authentication on ActionHandler allows unauthenticated camera action execution
IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from memory. Attacker can use the same keys to decrypt password,...
IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to HTTP request smuggling. A remote attacker could smuggle a specially crafted request...
Mattermost versions 11.7.x
IBM i 7.6, 7.5, 7.4, and 7.3, IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution and denial of service in the WebSphere Web Server Plug-in component. Thi...
A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from othe...
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy configured. This may allow an attacker to send unauthorized requests from the system, resulting in a s...