Security advisories

critical2022-11-26

CVE-2022-45908-PaddlePaddle vulnerable to code injection via winstr

View chart →

paddlepaddle/paddle · GHSA-83g7-8fch-p37m

critical2022-11-26

CVE-2022-45907-PyTorch vulnerable to arbitrary code execution

View chart →

pytorch/pytorch · GHSA-47fc-vmwq-366v

critical2022-11-25

CVE-2022-45152-Moodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider library

View chart →

moodle/moodle · GHSA-xqcf-vgqc-pcmg

medium2022-11-25

CVE-2022-45210-Jeecg-boot vulnerable to SQL Injection

View chart →

jeecgboot/jeecg-boot-starter · GHSA-v87q-rpwp-qr7q

critical2022-11-25

CVE-2022-45206-Jeecg-boot vulnerable to SQL Injection

View chart →

jeecgboot/jeecg-boot · GHSA-g5cj-5h58-j93w

critical2022-11-25

CVE-2022-41705-Badaso vulnerable to Remote Code Execution (RCE)

View chart →

uasoft-indonesia/badaso · GHSA-g389-rf5p-fg56

critical2022-11-25

CVE-2022-37721-PyroCMS vulnerable to stored Cross Site Scripting

View chart →

pyrocms/pyrocms · GHSA-cm7f-hf2g-ghrp

high2022-11-25

CVE-2022-41706-Browsershot does not validate URL protocols passed to Browsershot URL method

View chart →

spatie/browsershot · GHSA-8c2c-jxwj-jqgf

medium2022-11-25

CVE-2022-43983-Browsershot vulnerable to Cross-Site Scripting (XSS)

View chart →

spatie/browsershot · GHSA-82h9-v8vh-mfpq

medium2022-11-25

CVE-2022-0698-Microweber vulnerable to cross-site scripting (XSS)

View chart →

microweber/microweber · GHSA-79gx-3fm8-qxqq

medium2022-11-25

CVE-2022-43984-Browsershot version 3.57.3 vulnerable to improper input validation

View chart →

spatie/browsershot · GHSA-6q49-35h6-rq2p

critical2022-11-25

CVE-2022-45207-Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString

View chart →

jeecgboot/jeecg-boot · GHSA-4j2x-v3mr-467m

medium2022-11-25

CVE-2022-45208-Jeecg-boot vulnerable to SQL injection via /sys/user/putRecycleBin

View chart →

jeecgboot/jeecg-boot · GHSA-25gv-mvm7-5h3h

high2022-11-24

CVE-2022-26885-Apache Dolphin Scheduler has insufficiently protected credentials

View chart →

apache/dolphinscheduler · GHSA-jvc3-wjf6-7c6c

critical2022-11-24

CVE-2022-2650-wger vulnerable to brute force attempts

View chart →

wger-project/wger · GHSA-gr58-76rp-mmg4

medium2022-11-23

CVE-2022-41946-TemporaryFolder on unix-like systems does not limit access to created files

View chart →

pgjdbc/pgjdbc · GHSA-562r-vg33-8x8h

high2022-11-23

CVE-2022-45868-Password exposure in H2 Database

View chart →

h2database/h2database · GHSA-22wj-vf5f-wrvj

low2022-11-23

sweetalert2 v8.19.1 and above contains hidden functionality

View chart →

sweetalert2/sweetalert2 · GHSA-8jh9-wqpf-q52c

low2022-11-23

sweetalert2 v9.17.4 and above contains hidden functionality

View chart →

sweetalert2/sweetalert2 · GHSA-pg98-6v7f-2xfv

low2022-11-23

sweetalert2 v10.16.10 and above contains hidden functionality

View chart →

sweetalert2/sweetalert2 · GHSA-457r-cqc8-9vj9