Security Advisories | GitStock

high2022-11-22

CVE-2022-43685-CKAN contains Improper Authentication leading to account takeover

ckan/ckan · GHSA-m2xp-jxfg-qq6g

medium2022-11-22

CVE-2022-4111-ToolJet is vulnerable to Denial of Service (DoS)

tooljet/tooljet · GHSA-hgp8-w8fj-r4cm

medium2022-11-22

Remote code execution vulnerability in dependency System.Drawing.Common

akkadotnet/akka.net · GHSA-gpv5-rp6w-58r8

medium2022-11-22

CVE-2022-41880-Tensorflow vulnerable to Out-of-Bounds Read

tensorflow/tensorflow · GHSA-8w5g-3wcv-9g2j

medium2022-11-21

CVE-2022-41940-Uncaught exception in engine.io

socketio/engine.io · GHSA-r7qp-cfhv-p84w

critical2022-11-21

CVE-2022-41938-Cross site scripting vulnerability with discussion titles

flarum/framework · GHSA-7x4w-j98p-854x

low2022-11-21

`CHECK` failure in `SobolSample` via missing validation

tensorflow/tensorflow · GHSA-cqvq-fvhr-v6hc

low2022-11-21

`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager mode

tensorflow/tensorflow · GHSA-xf83-q765-xm6m

critical2022-11-21

CVE-2022-41937-Missing Authorization in Filter Stream Converter Application of XWiki-platform

xwiki/xwiki-platform · GHSA-q6jp-gcww-8v2j

medium2022-11-21

CVE-2022-41936-Exposure of Private Personal Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-rest-server

xwiki/xwiki-platform · GHSA-p88w-fhxw-xvcc

medium2022-11-21

CVE-2022-41935-Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui

xwiki/xwiki-platform · GHSA-p2x4-6ghr-6vmq

critical2022-11-21

CVE-2022-41934-Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in org.xwiki.platform:xwiki-platform-menu-ui

xwiki/xwiki-platform · GHSA-6w8h-26xx-cf8q

medium2022-11-21

CVE-2022-41933-Plaintext storage of password after a reset in org.xwiki.platform:xwiki-platform-security-authentication-default

xwiki/xwiki-platform · GHSA-q2hm-2h45-v5g3

high2022-11-21

CVE-2022-41932-Creation of new database tables through login form on PostgreSQL

xwiki/xwiki-platform · GHSA-4x5r-6v26-7j4v

critical2022-11-21

CVE-2022-41931-Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in xwiki-platform-icon-ui

xwiki/xwiki-platform · GHSA-5j7g-cf6r-g2h7

critical2022-11-21

CVE-2022-41930-Missing Authorization to enable or disable users in org.xwiki.platform:xwiki-platform-user-profile-ui

xwiki/xwiki-platform · GHSA-p5v9-g8w8-5q4v

medium2022-11-21

CVE-2022-41929-Missing Authorization in User#setDisabledStatus in org.xwiki.platform:xwiki-platform-oldcore

xwiki/xwiki-platform · GHSA-2gj2-vj98-j2qq

critical2022-11-21

CVE-2022-41928-Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml

xwiki/xwiki-platform · GHSA-9hqh-fmhg-vq2j

high2022-11-21

CVE-2022-41927-Cross-Site Request Forgery (CSRF) allowing to delete or rename tags

xwiki/xwiki-platform · GHSA-mq7h-5574-hw9f

low2022-11-21

CVE-2022-41925-Tailscale daemon is vulnerable to information disclosure via CSRF

tailscale/tailscale · GHSA-qccm-wmcq-pwr6