Security advisories

medium2023-01-05

CVE-2019-25095-LdapCherry Cross-site Scripting vulnerbaility

View chart →

kakwa/ldapcherry · GHSA-vq8w-x8v7-f88m

high2023-01-05

CVE-2023-22626-PgHero Allows Information Disclosure Through EXPLAIN Feature

View chart →

ankane/pghero · GHSA-vf99-xw26-86g5

medium2023-01-05

CVE-2016-15010-django-ucamlookup Cross-site Scripting vulnerability

View chart →

uisautomation/django-ucamlookup · GHSA-pjx4-3f3p-29v3

medium2023-01-05

CVE-2021-4303-Xataface vulnerable to Cross-site Scripting

View chart →

shannah/xataface · GHSA-64wv-c7jw-jw2q

medium2023-01-05

CVE-2023-0057-pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames

View chart →

pyload/pyload · GHSA-h8r9-467r-vjjf

medium2023-01-05

CVE-2023-0055-Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

View chart →

pyload/pyload · GHSA-m3g7-wrrq-v5c8

high2023-01-04

CVE-2022-48216-Uniswap Universal Router Incorrect Authorization vulnerability

View chart →

uniswap/universal-router · GHSA-7m37-cx35-qgmr

high2023-01-04

CVE-2022-25926-window-control vulnerable to Command Injection due to improper input sanitization

View chart →

bruno-robert/window-control · GHSA-9mjx-wfqp-j5ph

critical2023-01-04

CVE-2022-45875-Apache DolphinScheduler vulnerable to Improper Input Validation

View chart →

apache/dolphinscheduler · GHSA-3xh5-8hvq-rc8x

medium2023-01-04

CVE-2019-25094-typo3-appointments vulnerable to Cross-site Scripting

View chart →

innologi/typo3-appointments · GHSA-cf5r-3pvm-w64w

high2023-01-04

CVE-2022-38723-Gravitee API Management contains Path Traversal

View chart →

gravitee-io/gravitee-api-management · GHSA-vp62-m958-qj8c

high2023-01-03

CVE-2022-45143-Apache Tomcat improperly escapes input from JsonErrorReportValve

View chart →

apache/tomcat · GHSA-rq2w-37h9-vg94

high2023-01-03

CVE-2021-32821-MooTools Regular Expression Denial of Service

View chart →

vsviridov/mootools-node · GHSA-v63q-hgqc-qvpg

critical2023-01-03

CVE-2021-32824-Apache Dubbo vulnerable to remote code execution via Telnet Handler

View chart →

apache/dubbo · GHSA-fprr-rrm8-4534

medium2023-01-03

CVE-2024-22049-httparty has multipart/form-data request tampering vulnerability

View chart →

jnunemaker/httparty · GHSA-5pq7-52mg-hr42

high2023-01-03

CVE-2022-47551-Apiman has potential permissions bypass

View chart →

apiman/apiman · GHSA-j94p-hv25-rm5g

high2023-01-03

CVE-2015-10012-FrameworkUserBundle Generates Error Message Containing Sensitive Information

View chart →

sumocoders/frameworkuserbundle · GHSA-6m7c-45ff-3328

critical2023-01-02

CVE-2015-10009-nterchange Code Injection vulnerability

View chart →

nonfiction/nterchange_backend · GHSA-cp2p-6xh4-jmcp

high2023-01-02

CVE-2021-4299-string-kit Inefficient Regular Expression Complexity vulnerability

View chart →

cronvel/string-kit · GHSA-pfrm-4rjw-g9q5

medium2023-01-01

CVE-2010-10002-SimpleSAMLphp simplesamlphp-module-openid

View chart →

simplesamlphp/simplesamlphp-module-openid · GHSA-ggj9-6x8j-49w9