Security advisories

medium2022-12-12

CVE-2022-46688-Jenkins Sonar Gerrit Plugin vulnerable to Cross-Site Request Forgery

View chart →

jenkinsci/sonar-gerrit-plugin · GHSA-m82g-fv7v-h64m

high2022-12-12

CVE-2022-46686-Jenkins Custom Build Properties Plugin vulnerable to Cross-site Scripting

View chart →

jenkinsci/custom-build-properties-plugin · GHSA-5g2c-j6v9-vf94

high2022-12-12

CVE-2022-46687-Cross-site Scripting in Jenkins Spring Config Plugin

View chart →

jenkinsci/spring-config-plugin · GHSA-3rrx-364r-6wf6

medium2022-12-11

CVE-2022-4408-phpMyFAQ vulnerable to Cross-site Scripting

View chart →

thorsten/phpmyfaq · GHSA-rjf6-wj7r-5fj2

medium2022-12-11

CVE-2022-4407-phpMyFAQ vulnerable to Cross-site Scripting

View chart →

thorsten/phpmyfaq · GHSA-cp9c-phxx-55xm

high2022-12-11

CVE-2022-4409-phpMyFAQ has insecure HTTP cookies

View chart →

thorsten/phpmyfaq · GHSA-wpgc-5cr5-h9gg

medium2022-12-10

CVE-2022-4396-pyRdfa3 Cross-site Scripting vulnerability

View chart →

rdflib/pyrdfa3 · GHSA-894q-wpg5-mf2h

high2022-12-09

CVE-2022-46166-Spring Boot Admins integrated notifier support allows arbitrary code execution

View chart →

codecentric/spring-boot-admin · GHSA-w3x5-427h-wfq6

high2022-12-09

CVE-2022-46157-Akeneo PIM Community Edition vulnerable to remote php code execution

View chart →

akeneo/pim-community-dev · GHSA-w9wc-4xcq-8gr6

critical2022-12-09

CVE-2022-4375-Mingsoft MCMS vulnerable to SQL Injection

View chart →

ming-soft/mcms · GHSA-hc5g-xf64-j49j

medium2022-12-08

CVE-2022-23494-Cross-site scripting vulnerability in TinyMCE alerts

View chart →

tinymce/tinymce · GHSA-gg8r-xjwq-4w92

low2022-12-08

CVE-2022-4123-Buildah (as part of Podman) vulnerable to Path Traversal

View chart →

containers/podman · GHSA-rprg-4v7q-87v7

high2022-12-08

CVE-2022-23495-go-merkledag's ProtoNode may be modified such that common method calls may panic

View chart →

ipfs/go-merkledag · GHSA-x39j-h85h-3f46

medium2022-12-08

CVE-2022-46158-PrestaShop has potential Information exposure in the upload directory

View chart →

prestashop/prestashop · GHSA-9qgp-9wwc-v29r

low2022-12-08

CVE-2022-23469-Traefik may display authorization header in the debug logs

View chart →

traefik/traefik · GHSA-h2ph-vhm7-g4hp

medium2022-12-08

CVE-2022-46153-Traefik routes exposed with an empty TLSOption

View chart →

traefik/traefik · GHSA-468w-8x39-gj5v

medium2022-12-08

Unsound API in `secp256k1` allows use-after-free and invalid deallocation from safe code

View chart →

rust-bitcoin/rust-secp256k1 · GHSA-969w-q74q-9j8v

high2022-12-08

CVE-2022-23496-Yauaa vulnerable to ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List

View chart →

nielsbasjes/yauaa · GHSA-c4pm-63cg-9j7h

medium2022-12-08

CVE-2022-4350-Mingsoft MCMS vulnerable to Cross-site Scripting

View chart →

ming-soft/mcms · GHSA-p46c-m4j7-mjvq

high2022-12-08

CVE-2022-23476-Unchecked return value from xmlTextReaderExpand

View chart →

sparklemotion/nokogiri · GHSA-qv4q-mr5r-qprj