Security advisories

critical2022-11-16

CVE-2022-45047-Unsafe deserialization in Apache MINA SSHD

View chart →

apache/mina-sshd · GHSA-fhw8-8j55-vwgq

medium2022-11-16

CVE-2022-4014-Cross-Site Request Forgery in feehi/feehicms

View chart →

liufee/feehicms · GHSA-cjp8-vv38-p3g2

high2022-11-16

CVE-2022-41905-Cross Site Scripting vulnerability in wsgidav when directory browsing is enabled

View chart →

mar10/wsgidav · GHSA-xx6g-jj35-pxjv

high2022-11-15

CVE-2020-7731-github.com/russellhaering/gosaml2 is vulnerable to NULL Pointer Dereference

View chart →

russellhaering/gosaml2 · GHSA-prjq-f4q3-fvfr

medium2022-11-15

CVE-2022-40309-Apache Archiva subject to arbitrary directory deletion by users.

View chart →

apache/archiva · GHSA-xgq8-jq9w-77r5

high2022-11-15

CVE-2022-40308-Apache Archiva vulnerable to Sensitive Information Disclosure via anonymous user

View chart →

apache/archiva · GHSA-463w-hxfv-g9f6

medium2022-11-15

CVE-2022-43692-Concrete CMS vulnerable to Reflected Cross-site Scripting

View chart →

concretecms/concretecms · GHSA-rg6w-c352-p8pg

medium2022-11-15

CVE-2022-43694-Concrete CMS vulnerable to Reflected Cross-site Scripting via image manipulation library

View chart →

concretecms/concretecms · GHSA-jfmc-3975-fv5f

medium2022-11-15

CVE-2022-43967-Concrete CMS vulnerable to Cross-site Scripting via multilingual report

View chart →

concretecms/concretecms · GHSA-vq39-q549-g786

medium2022-11-15

CVE-2022-43691-Concrete CMS vulnerable to Cleartext Transmission of Sensitive Information

View chart →

concretecms/concretecms · GHSA-q3hq-hm5h-qrx3

medium2022-11-15

CVE-2022-43687-Concrete CMS vulnerable to Session Fixation

View chart →

concretecms/concretecms · GHSA-m53v-5x5x-5m2p

medium2022-11-15

CVE-2022-43688-Concrete CMS vulnerable to Cross-site Scripting

View chart →

concretecms/concretecms · GHSA-9jc5-9wh5-mc36

high2022-11-15

CVE-2022-3362-rdiffweb vulnerable to Insufficient Session Expiration

View chart →

ikus060/rdiffweb · GHSA-94qm-99qc-qwqj

medium2022-11-15

CVE-2022-43968-Concrete CMS vulnerable to Reflected Cross-Site Scripting via dashboard icons

View chart →

concretecms/concretecms · GHSA-8782-xgh5-r7mv

medium2022-11-15

CVE-2022-43686-Concrete CMS vulnerable to Uncontrolled Resource Consumption leading to DoS

View chart →

concretecms/concretecms · GHSA-3cxx-3f53-m92c

medium2022-11-15

CVE-2022-42119-Liferay Portal and Liferay DXP Vulnerable to XSS via the Commerce Module

View chart →

liferay/liferay-portal · GHSA-wjfm-qxg2-q679

critical2022-11-15

CVE-2022-42120-Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module

View chart →

liferay/liferay-portal · GHSA-r5fj-j449-vqw2

medium2022-11-15

CVE-2022-43690-Concrete CMS vulnerable to Improper Authentication

View chart →

concretecms/concretecms · GHSA-q56r-mw39-944g

medium2022-11-15

CVE-2022-43689-Concrete CMS vulnerable to XML External Entity

View chart →

concretecms/concretecms · GHSA-q48r-xg9h-78m8

medium2022-11-15

CVE-2022-42111-Liferay Portal and Liferay DXP Vulnerable to XSS via the Sharing Module

View chart →

liferay/liferay-portal · GHSA-p768-r2m2-8vjr