https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 08 Jul 2026 18:39:45 +0000 https://vulnerability.circl.lu/vuln/cve-2022-23481 Out-of-Bound Read in xrdp Out-of-Bound Read in xrdp https://vulnerability.circl.lu/vuln/cve-2022-23481 Fri, 09 Dec 2022 17:50:24 +0000 https://vulnerability.circl.lu/vuln/cve-2022-23482 Out-of-Bound Read in xrdp Out-of-Bound Read in xrdp https://vulnerability.circl.lu/vuln/cve-2022-23482 Fri, 09 Dec 2022 17:50:39 +0000 https://vulnerability.circl.lu/vuln/cve-2023-20057 https://vulnerability.circl.lu/vuln/cve-2023-20057 Thu, 19 Jan 2023 01:32:32 +0000 https://vulnerability.circl.lu/vuln/cve-2023-23608 spotipy Path traversal vulnerability that may lead to type confusion in URI handling code spotipy Path traversal vulnerability that may lead to type confusion in URI handling code https://vulnerability.circl.lu/vuln/cve-2023-23608 Tue, 24 Jan 2023 02:39:32 +0000 https://vulnerability.circl.lu/vuln/cve-2023-31007 Apache Pulsar: Broker does not always disconnect client when authentication data expires Apache Pulsar: Broker does not always disconnect client when authentication data expires https://vulnerability.circl.lu/vuln/cve-2023-31007 Wed, 12 Jul 2023 09:07:03 +0000 https://vulnerability.circl.lu/vuln/cve-2023-33182 Nextcloud Contacts photos only sanitized if mime type is all lower case Nextcloud Contacts photos only sanitized if mime type is all lower case https://vulnerability.circl.lu/vuln/cve-2023-33182 Tue, 30 May 2023 04:58:07 +0000 https://vulnerability.circl.lu/vuln/cve-2024-22213 Cross-site Scripting when sending HTML as a comment in the Nextcloud Deck app Cross-site Scripting when sending HTML as a comment in the Nextcloud Deck app https://vulnerability.circl.lu/vuln/cve-2024-22213 Thu, 18 Jan 2024 19:11:40 +0000 https://vulnerability.circl.lu/vuln/cve-2024-27088 es5-ext Regular Expression Denial of Service in `function#copy` and `function#toStringTokens` es5-ext Regular Expression Denial of Service in `function#copy` and `function#toStringTokens` https://vulnerability.circl.lu/vuln/cve-2024-27088 Mon, 26 Feb 2024 16:50:05 +0000 https://vulnerability.circl.lu/vuln/cve-2024-32037 GeoNetwork vulnerable to search end-point information disclosure in response headers GeoNetwork vulnerable to search end-point information disclosure in response headers https://vulnerability.circl.lu/vuln/cve-2024-32037 Tue, 11 Feb 2025 21:50:29 +0000 https://vulnerability.circl.lu/vuln/cve-2024-3570 Stored XSS leading to Admin Account Takeover in mintplex-labs/anything-llm Stored XSS leading to Admin Account Takeover in mintplex-labs/anything-llm https://vulnerability.circl.lu/vuln/cve-2024-3570 Wed, 10 Apr 2024 17:08:15 +0000