← 返回地图破甲

浏览报告

仅含 CVE

203 份报告 · 本页赏金 $14,855 · 2024 年 · 仅含 CVE · 清除筛选

CVE-2024-11053: netrc + redirect credential leak信息泄露curl低危—2024-12-11 Apache Airflow: Sensitive Information Exposure in DAG Run Logs信息泄露Internet Bug Bounty低危—2024-12-30 Secrets not masked in UI when sensitive variables are set via Airflow cli信息泄露Internet Bug Bounty低危—2024-12-30 CVE-2024-49761: ReDoS vulnerability in REXML拒绝服务Internet Bug Bounty低危—2024-11-30 CVE-2024-41990: Potential denial-of-service in django.utils.html.urlize()拒绝服务Internet Bug Bounty低危$2,1622024-11-30 CVE-2020-5902错误配置AWS VDP高危—2024-12-24 [CVE-2024-47888] Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action Text拒绝服务Internet Bug Bounty低危$5052024-11-28 Reflected XSS on Amazon EC2 Instance跨站脚本AWS VDP中危—2024-12-24 [ CVE-2018-1000129 ] RXSS At `https://███████` via the URI跨站脚本U.S. Dept Of Defense低危—2024-12-18 CVE-2024-9681: HSTS subdomain overwrites parent cache entry业务逻辑curl低危—2024-11-06 CVE-2017-9822 DotNetNuke Cookie Deserialization Remote Code Execution (RCE) on lonidoor.mtn.ci代码执行MTN Group高危—2024-11-16 CVE-2020-7961 RCE Liferay Portal Unauthenticated via https://████████/代码执行U.S. Dept Of Defense高危—2024-10-25 `std::process::Command` batch files argument escaping could be bypassed with trailing whitespace or periods业务逻辑Internet Bug Bounty低危$5052024-11-22 Open redirect when logging in with user_oidc开放重定向Nextcloud未评级—2024-11-15 CVE-2024-45498: Apache Airflow Command injection in read_dataset_event_from_classic DAG代码执行Internet Bug Bounty低危—2024-12-07 Share information of Tables app is not limited to affected users不安全的直接对象引用Nextcloud低危—2024-11-18 CVE-2024-41937: Apache Airflow: Stored XSS Vulnerability on provider link跨站脚本Internet Bug Bounty低危$4972024-09-07 Nextcloud Tables app - inserting rows to an arbitrary table possible其他弱点Nextcloud低危—2024-11-17 CVE-2024-8096: OCSP stapling bypass with GnuTLS密码学缺陷curl低危—2024-09-11 CVE-2024-7347: Buffer overread in the ngx_http_mp4_module内存破坏Internet Bug Bounty低危$2,1422024-08-27 CVE-2024-42005: Potential SQL injection in QuerySet.values() and values_list()SQL 注入Internet Bug Bounty中危$4,2632024-08-24 [CVE-2024-35176] DoS vulnerability in REXML拒绝服务Internet Bug Bounty低危$2,1422024-08-23 CVE-2024-41989: Denial-Of-Service vulnerability in the floatformat template filter when input string contains a big exponent in scientific notation拒绝服务Internet Bug Bounty低危$2,1422024-09-22 CVE-2024-7264: ASN.1 date parser overread内存破坏curl低危—2024-08-01 Unbounded memory growth with session handling in TLSv1.3拒绝服务Internet Bug Bounty低危$4972024-09-22