Security advisories

low2022-12-05

CVE-2022-23530-GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package

View chart →

datadog/guarddog · GHSA-78m5-jpmf-ch7v

high2022-12-05

CVE-2022-46167-Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace

View chart →

clastix/capsule · GHSA-x45c-cvp8-q4fm

critical2022-12-05

CVE-2022-46164-NodeBB vulnerable to account takeover via prototype vulnerability

View chart →

nodebb/nodebb · GHSA-rf3g-v8p5-p675

medium2022-12-05

hyper-staticfile's improper validation of Windows paths could lead to directory traversal attack

View chart →

stephank/hyper-staticfile · GHSA-7p7c-pvvx-2vx3

high2022-12-05

CVE-2022-37783-Craft CMS discloses password hashes

View chart →

craftcms/cms · GHSA-h972-v458-m892

medium2022-12-05

CVE-2022-46149-Cap'n Proto and its Rust implementation vulnerable to out-of-bounds read due to logic error handling list-of-list

View chart →

capnproto/capnproto · GHSA-qqff-4vw4-f6hx

high2022-12-05

CVE-2022-41957-muhammara and hummus vulnerable to Unchecked Return Value to NULL Pointer Dereference

View chart →

julianhille/muhammarajs · GHSA-2r7v-cmch-5x26

critical2022-12-05

CVE-2022-45046-camel-ldap component allows LDAP Injection when using the filter option

View chart →

apache/camel · GHSA-w66j-xc7r-m2jv

medium2022-12-05

CVE-2022-41777-nadesiko3 allows remote attacker to inject invalid value to decodeURIComponent of nako3edit

View chart →

kujirahand/nadesiko3 · GHSA-x2jx-w3wm-9p3p

critical2022-12-05

CVE-2022-41642-Nadesiko3 OS Command Injection vulnerability

View chart →

kujirahand/nadesiko3 · GHSA-m8r5-7wf4-63mw

critical2022-12-05

CVE-2022-42496-nadesiko3 vulnerable to OS Command Injection

View chart →

kujirahand/nadesiko3 · GHSA-7249-8x22-4rg4

high2022-12-05

CVE-2022-43484-TERASOLUNA Server Framework vulnerable to ClassLoader manipulation

View chart →

terasolunaorg/terasoluna-gfw · GHSA-q5j9-f95w-f4pr

medium2022-12-03

CVE-2021-37533-Apache Commons Net vulnerable to information leakage via malicious server

View chart →

apache/commons-net · GHSA-cgp8-4m63-fhh5

medium2022-12-02

phpxmlrpc vulnerable to argument injection

View chart →

gggeek/phpxmlrpc · GHSA-q7qq-9gx2-ggxv

high2022-12-02

CVE-2022-46147-XBlock vulnerable to Cross-Site Scripting (XSS)

View chart →

openedx/xblock-drag-and-drop-v2 · GHSA-qv6c-367r-3w6q

medium2022-12-02

CVE-2022-46146-Prometheus Exporter-Toolkit is vulnerable to authentication bypass

View chart →

prometheus/exporter-toolkit · GHSA-7rg2-cxvp-9p7p

low2022-12-02

CVE-2022-23531-GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package

View chart →

datadog/guarddog · GHSA-rp2v-v467-q9vq

medium2022-12-02

kube-httpcache is vulnerable to Cross-Site Request Forgery (CSRF)

View chart →

mittwald/kube-httpcache · GHSA-47xh-qxqv-mgvg

high2022-12-01

CVE-2022-40489-ThinkCMF Cross Site Request Forgery (CSRF) vulnerability

View chart →

thinkcmf/thinkcmf · GHSA-6xw3-cpqj-8mxr

critical2022-12-01

CVE-2022-44262-ff4j is vulnerable to Remote Code Execution (RCE)

View chart →

ff4j/ff4j · GHSA-65hj-9ppw-77xc