Security advisories

medium2022-11-21

CVE-2022-39199-Lack of proper validation of server UUID can be used by the server to trick the client to accept invalid proofs

View chart →

codenotary/immudb · GHSA-6cqj-6969-p57x

medium2022-11-21

CVE-2022-36111-Insufficient Verification of Proofs generated by the immudb server in client SDK.

View chart →

codenotary/immudb · GHSA-672p-m5jq-mrh8

high2022-11-20

CVE-2022-4068-Cross-site Scripting in librenms/librenms

View chart →

librenms/librenms · GHSA-f3hw-3h74-wr98

low2022-11-19

CVE-2022-4064-Unsanitized input leading to code injection in Dalli

View chart →

petergoldstein/dalli · GHSA-3xg8-cc8f-9wv2

high2022-11-19

CVE-2022-4065-TestNG is vulnerable to Path Traversal

View chart →

cbeust/testng · GHSA-rc2q-x9mf-w3vf

high2022-11-19

CVE-2022-38871-Free5gc vulnerable to uncontrolled resource consumption

View chart →

free5gc/free5gc · GHSA-m74x-fxjh-3qh9

high2022-11-18

CVE-2022-39389-Witness Block Parsing DoS Vulnerability

View chart →

lightningnetwork/lnd · GHSA-hc82-w9v8-83pr

medium2022-11-18

CVE-2022-39383-KubeVela VelaUX APIserver has SSRF vulnerability

View chart →

kubevela/kubevela · GHSA-m5xf-x7q6-3rm7

high2022-11-18

CVE-2022-43171-LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind

View chart →

lief-project/lief · GHSA-jvp9-phwp-p738

high2022-11-17

CVE-2022-43183-XXL-JOB vulnerable to Server-Side Request Forgery (SSRF)

View chart →

xuxueli/xxl-job · GHSA-83w4-x5w9-hf4h

critical2022-11-17

CVE-2022-43138-Dolibarr vulnerable to privilege escalation

View chart →

dolibarr/dolibarr · GHSA-gh7m-j673-wm97

low2022-11-16

CVE-2022-4018-Rdiffweb vulnerable to Missing Authentication for Critical Function

View chart →

ikus060/rdiffweb · GHSA-4wph-9vrm-6v3w

medium2022-11-16

CVE-2022-45389-Missing Authorization in Jenkins XP-Dev Plugin

View chart →

jenkinsci/xpdev-plugin · GHSA-x9wp-gfrr-p5rp

medium2022-11-16

CVE-2022-45392-Plaintext Storage of a Password in Jenkins NS-ND Integration Performance Publisher Plugin

View chart →

jenkinsci/cavisson-ns-nd-integration-plugin · GHSA-x2w2-5552-fjv6

medium2022-11-16

CVE-2022-45390-Missing permission check in Jenkins loader.io Plugin allows enumerating credentials IDs

View chart →

jenkinsci/loaderio-plugin · GHSA-wg2f-9rf7-48gm

medium2022-11-16

CVE-2022-45384-Jenkins Reverse Proxy Auth Plugin vulnerable due to plaintext storage of passwords

View chart →

jenkinsci/reverse-proxy-auth-plugin · GHSA-wcjj-qm5v-j4pc

medium2022-11-16

CVE-2022-45385-Lack of authentication mechanism for webhook in CloudBees Docker Hub/Registry Notification Plugin

View chart →

jenkinsci/dockerhub-notification-plugin · GHSA-v535-pc6r-77qh

high2022-11-16

CVE-2022-45387-Jenkins BART Plugin vulnerable to cross-site scripting (XSS)

View chart →

jenkinsci/bart-plugin · GHSA-j923-26c2-qq9p

medium2022-11-16

CVE-2022-45394-Missing permission check in Jenkins Delete log Plugin

View chart →

jenkinsci/delete-log-plugin · GHSA-j874-47xx-9xfg

medium2022-11-16

CVE-2022-45393-Cross-Site Request Forgery in Jenkins Delete log Plugin

View chart →

jenkinsci/delete-log-plugin · GHSA-hw4f-g7wh-xp52