Security Advisories | GitStock

high2022-12-30

CVE-2022-43396-Apache Kylin vulnerable to Command injection by Useless configuration

apache/kylin · GHSA-f5q9-j9r2-34gq

medium2022-12-30

CVE-2018-25059-pastebinit Path Traversal vulnerability

jessfraz/pastebinit · GHSA-cwh7-28vg-jmpr

medium2022-12-30

CVE-2022-46181-gotify/server vulnerable to Cross-site Scripting in the application image file upload

gotify/server · GHSA-xv6x-456v-24xh

medium2022-12-29

CVE-2022-4848-usememos/memos vulnerable to Improper Verification of Source of a Communication Channel

usememos/memos · GHSA-vh43-cc6x-prpr

medium2022-12-29

CVE-2022-4841-usememos/memos vulnerable to stored Cross-site Scripting

usememos/memos · GHSA-rmhx-9h5h-3xh3

medium2022-12-29

CVE-2022-4847-usememos/memos has Incorrectly Specified Destination in a Communication Channel

usememos/memos · GHSA-r7hg-2cpp-8wqq

medium2022-12-29

CVE-2022-4840-usememos/memos vulnerable to stored Cross-site Scripting

usememos/memos · GHSA-pwhr-p68w-296x

medium2022-12-29

CVE-2022-4839-usememos/memos vulnerable to stored Cross-site Scripting

usememos/memos · GHSA-gxqf-4g4p-q3hc

medium2022-12-29

CVE-2022-4845-usememos/memos Cross-Site Request Forgery vulnerability

usememos/memos · GHSA-gw9m-2m5v-c6x5

medium2022-12-29

CVE-2022-4846-usememos/memos Cross-Site Request Forgery vulnerability

usememos/memos · GHSA-cwrm-33qq-4w2x

medium2022-12-29

CVE-2022-4850-usememos/memos Cross-Site Request Forgery vulnerability

usememos/memos · GHSA-c5hq-35h7-r9x4

medium2022-12-29

CVE-2022-4849-usememos/memos Cross-Site Request Forgery vulnerability

usememos/memos · GHSA-642q-2q68-9j3p

high2022-12-29

CVE-2022-4844-usememos/memos Cross-Site Request Forgery vulnerability

usememos/memos · GHSA-5jqp-wmhj-g33f

medium2022-12-29

CVE-2022-4851-sememos/memos vulnerable to Improper Handling of Values

usememos/memos · GHSA-42q2-m54f-jh95

medium2022-12-29

CVE-2018-25058-Twitter-Post-Fetcher vulnerable to Use of Web Link to Untrusted Target with window.opener Access

jasonmayes/twitter-post-fetcher · GHSA-m688-cx2p-rgq9

high2022-12-29

CVE-2022-46175-Prototype Pollution in JSON5 via Parse Method

json5/json5 · GHSA-9c47-m6qq-7p4h

high2022-12-29

Yapscan's report receiver server vulnerable to path traversal and log injection

fkie-cad/yapscan · GHSA-9h6h-9g78-86f7

medium2022-12-29

CVE-2022-4318-CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation

cri-o/cri-o · GHSA-cm9x-c3rh-7rc4

high2022-12-29

CVE-2022-41966-XStream can cause Denial of Service via stack overflow

x-stream/xstream · GHSA-j563-grx4-pjpv

medium2022-12-28

CVE-2021-4294-OpenShift OSIN vulnerable to Observable Timing Discrepancy

openshift/osin · GHSA-m7qp-cj9p-gj85