-
Notifications
You must be signed in to change notification settings - Fork 410
Security: google/security-research
Security Navigation
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
LibRaw: Out of bounds write in LibRaw::pana_dataGHSA-3m8c-vvxw-r44w published
Oct 22, 2024 by rcorrea35High -
LibRaw: Uninitialized memory disclosure via LibRaw_buffer_datastream::readGHSA-cmhf-chvw-6c7j published
Oct 22, 2024 by rcorrea35High -
OpenTelemetry: AWS Firehose Receiver VulnerabilityGHSA-q9wq-xc9h-xrw9 published
Oct 1, 2024 by rcorrea35Moderate -
Eaton: Hardcoded SSH root password in XC-303 firmwareGHSA-xf7j-4x67-6h93 published
Sep 13, 2024 by rcorrea35Critical -
Pi-hole: Web Authentication ByPassGHSA-3658-w6j3-w42r published
Sep 6, 2024 by rcorrea35High -
Lightdash - Stored Cross-Site ScriptingGHSA-6529-6jv3-66q2 published
Aug 29, 2024 by rcorrea35High -
Lightdash - Server-Side Request Forgery Session TakeoverGHSA-4h7x-6vxh-7hjf published
Aug 29, 2024 by rcorrea35High -
TurboMeeting: Post-Authentication Command InjectionGHSA-gx6g-8mvx-3q5c published
Jul 24, 2024 by rcorrea35High -
TurboMeeting: Insecure Password Reset MechanismGHSA-c84v-4pjw-4mh2 published
Jul 24, 2024 by rcorrea35High -
TurboMeeting: Boolean-based SQL InjectionGHSA-vx5j-8pgx-v42v published
Jul 24, 2024 by rcorrea35Critical