Security advisories

medium2022-11-25

CVE-2022-43984-Browsershot version 3.57.3 vulnerable to improper input validation

View chart →

spatie/browsershot · GHSA-6q49-35h6-rq2p

critical2022-11-25

CVE-2022-45207-Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString

View chart →

jeecgboot/jeecg-boot · GHSA-4j2x-v3mr-467m

medium2022-11-25

CVE-2022-45208-Jeecg-boot vulnerable to SQL injection via /sys/user/putRecycleBin

View chart →

jeecgboot/jeecg-boot · GHSA-25gv-mvm7-5h3h

high2022-11-24

CVE-2022-26885-Apache Dolphin Scheduler has insufficiently protected credentials

View chart →

apache/dolphinscheduler · GHSA-jvc3-wjf6-7c6c

critical2022-11-24

CVE-2022-2650-wger vulnerable to brute force attempts

View chart →

wger-project/wger · GHSA-gr58-76rp-mmg4

medium2022-11-23

CVE-2022-41946-TemporaryFolder on unix-like systems does not limit access to created files

View chart →

pgjdbc/pgjdbc · GHSA-562r-vg33-8x8h

high2022-11-23

CVE-2022-45868-Password exposure in H2 Database

View chart →

h2database/h2database · GHSA-22wj-vf5f-wrvj

low2022-11-23

sweetalert2 v8.19.1 and above contains hidden functionality

View chart →

sweetalert2/sweetalert2 · GHSA-8jh9-wqpf-q52c

low2022-11-23

sweetalert2 v9.17.4 and above contains hidden functionality

View chart →

sweetalert2/sweetalert2 · GHSA-pg98-6v7f-2xfv

low2022-11-23

sweetalert2 v10.16.10 and above contains hidden functionality

View chart →

sweetalert2/sweetalert2 · GHSA-457r-cqc8-9vj9

medium2022-11-23

CVE-2022-45151-Moodle stored-XSS vulnerability in some "social" user profile fields

View chart →

moodle/moodle · GHSA-xv72-6pgh-cjj8

medium2022-11-23

CVE-2022-45150-Moodle reflected cross-site scripting vulnerability in policy tool

View chart →

moodle/moodle · GHSA-6gx2-g773-hv9h

low2022-11-23

sweetalert2 v11.4.9 and above contains hidden functionality

View chart →

sweetalert2/sweetalert2 · GHSA-qq6h-5g6j-q3cm

critical2022-11-23

CVE-2022-45462-Command injection in Apache DolphinScheduler Alert Plugins

View chart →

apache/dolphinscheduler · GHSA-wqg7-mx6p-2rw3

critical2022-11-22

CVE-2022-4116-Code injection in quarkus dev ui config editor

View chart →

quarkusio/quarkus · GHSA-g56w-cwg4-hxx9

high2022-11-22

CVE-2022-33012-Account Takeover Through Password Reset Poisoning

View chart →

microweber/microweber · GHSA-rp7f-fhm8-9hpf

critical2022-11-22

CVE-2022-40189-OS Command Injection in Apache Airflow

View chart →

apache/airflow · GHSA-rmf2-pwfq-h75j

high2022-11-22

CVE-2022-41131-OS Command Injection in Apache Airflow

View chart →

apache/airflow · GHSA-cm43-f2pv-6v68

critical2022-11-22

CVE-2022-38649-OS Command Injection in Apache Airflow

View chart →

apache/airflow · GHSA-7wqf-h36w-47mc

medium2022-11-22

CVE-2022-40954-OS Command Injection in Apache Airflow

View chart →

apache/airflow · GHSA-45r6-j3cc-6mxx