Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
The conformance validation endpoint is public so everybody can verify the conformance of onboarded services. The response could contain specific info…
In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executi…
In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executi…
Dragonfly
CRITICAL 9.8
Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation (CNCF) a…
Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog b…
Backstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDocs it is possible to access co…
Backstage is an open framework for building developer portals. An attacker with control of the contents of the TechDocs storage buckets is able to in…
In wlan, there is a possible denial of service due to incorrect error handling. This could lead to remote denial of service with no additional execut…
In gnss service, there is a possible escalation of privilege due to improper certificate validation. This could lead to remote escalation of privileg…
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with Syst…
SQL-Injection in Harbor allows priviledge users to leak the task IDs
Open Redirect in Harbor <=v2.8.4, <=v2.9.2, and <=v2.10.0 may redirect a user to a malicious site.
A vulnerability in the `download_model_with_test_data` function of the onnx/onnx framework, version 1.16.0, allows for arbitrary file overwrite due t…
In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of privilege with no additional ex…
Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function.
Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits.
Open Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel within the Start function of the monitoring package.
Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error (in the Subscribe function imp…
Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString.
O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message.
Pytorch
MEDIUM 5.5
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.
Pytorch
HIGH 7.8
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.
In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege with System executi…
In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System exec…
In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System exec…
Fluid is an open source Kubernetes-native Distributed Dataset Orchestrator and Accelerator for data-intensive applications. An OS command injection v…
Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability
In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execut…
In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution …
`@backstage/backend-common` is a common functionality library for backends for Backstage, an open platform for building developer portals. In `@backs…