Security Advisories

high2023-01-13

CVE-2022-23532-org.neo4j.procedure:apoc Path Traversal Vulnerability

View chart

neo4j-contrib/neo4j-apoc-procedures · GHSA-5v8v-gwmw-qw97

critical2023-01-13

CVE-2022-21191-global-modules-path Command Injection vulnerability

View chart

rosen-vladimirov/global-modules-path · GHSA-vvj3-85vf-fgmw

high2023-01-13

CVE-2022-3143-Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator

View chart

wildfly-security/wildfly-elytron · GHSA-jmj6-p2j9-68cp

medium2023-01-12

CVE-2023-0091-Keycloak has lack of validation of access token on client registrations endpoint

View chart

keycloak/keycloak · GHSA-v436-q368-hvgg

high2023-01-12

CVE-2023-0247-Bloom Uncontrolled Search Path Element vulnerability

View chart

bits-and-blooms/bloom · GHSA-fgwp-pwqq-g3w4

medium2023-01-12

CVE-2022-24913-Java Merge-sort Insecure Temporary File vulnerability

View chart

cowtowncoder/java-merge-sort · GHSA-qxxc-7mq4-mf79

medium2023-01-12

CVE-2023-0227-Pyload Insufficient Session Expiration vulnerability

View chart

pyload/pyload · GHSA-rv9x-wmw4-44qj

medium2023-01-11

XML-RPC for PHP allows access to local files via malicious argument to the Client::send method

View chart

gggeek/phpxmlrpc · GHSA-m95x-m25c-w9mp

medium2023-01-11

XML-RPC for PHP's `Wrapper::buildClientWrapperCode` method allows code injection via malicious `$client` argument

View chart

gggeek/phpxmlrpc · GHSA-7vcx-v65q-9wpg

medium2023-01-11

XML-RPC for PHP's debugger vulnerable to possible XSS attack

View chart

gggeek/phpxmlrpc · GHSA-pxqj-xrv5-qvjf

medium2023-01-11

dompurify vulnerable to Cross-site Scripting

View chart

cure53/dompurify · GHSA-h6p3-p4vx-wr8q

medium2023-01-11

dompurify vulnerable to Cross-site Scripting

View chart

cure53/dompurify · GHSA-pgjv-jrg2-gq3v

high2023-01-11

CVE-2023-22493-RSSHub SSRF vulnerability

View chart

diygod/rsshub · GHSA-64wp-jh9p-5cg2

high2023-01-11

CVE-2020-36650-gry vulnerable to Command Injection

View chart

ionicabizau/node-gry · GHSA-w5mw-f2hq-5fw8

high2023-01-11

CVE-2022-4885-sviehb/jefferson vulnerable to path traversal

View chart

sviehb/jefferson · GHSA-7jrw-p8jc-v6qw

medium2023-01-11

CVE-2023-22492-Zitadel RefreshToken invalidation vulnerability

View chart

zitadel/zitadel · GHSA-6rrr-78xp-5jp8

high2023-01-11

CVE-2023-22491-gatsby-transformer-remark has possible unsanitized JavaScript code injection

View chart

gatsbyjs/gatsby · GHSA-7ch4-rr99-cqcw

high2023-01-11

CVE-2018-25074-skeemas Inefficient Regular Expression Complexity vulnerability

View chart

prestaul/skeemas · GHSA-qv66-f876-vjvr

medium2023-01-10

Reflected XSS in Gotify's /docs via import of outdated Swagger UI

View chart

gotify/server · GHSA-3244-8mff-w398

high2023-01-10

CVE-2023-21538-.NET Denial of Service Vulnerability

View chart

dotnet/runtime · GHSA-8f7f-vqg5-jrv9