Security Advisories

medium2022-11-15

CVE-2022-42118-Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module

View chart

liferay/liferay-portal · GHSA-mr77-4pm4-x9vm

critical2022-11-15

CVE-2022-42122-Liferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL Module

View chart

liferay/liferay-portal · GHSA-hw56-7xj4-7gx6

high2022-11-15

CVE-2022-42121-Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Layout Module

View chart

liferay/liferay-portal · GHSA-gxxj-fhmr-37j9

medium2022-11-15

CVE-2022-42132-Liferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL

View chart

liferay/liferay-portal · GHSA-f43m-hhj4-q3jg

medium2022-11-15

CVE-2022-42110-Liferay Portal and Liferay DXP Vulnerable to XSS via the Announcements Module

View chart

liferay/liferay-portal · GHSA-2qwm-9mg5-jwq8

medium2022-11-15

CVE-2022-45402-Apache Airflow Contains Open Redirect

View chart

apache/airflow · GHSA-rg94-84xj-7gq3

high2022-11-14

CVE-2022-43693-Concrete CMS vulnerable to Cross-site Request Forgery

View chart

concretecms/concretecms · GHSA-w8fp-3gwq-gxpw

critical2022-11-14

CVE-2022-45136-Apache Jena vulnerable to Deserialization of Untrusted Data

View chart

apache/jena · GHSA-g2qw-6vrr-v6pq

high2022-11-14

CVE-2022-45199-Pillow subject to DoS via SAMPLESPERPIXEL tag

View chart

python-pillow/pillow · GHSA-q4mp-jvh2-76fj

high2022-11-14

CVE-2022-45198-Pillow vulnerable to Data Amplification attack.

View chart

python-pillow/pillow · GHSA-m2vv-5vj5-2hm7

high2022-11-14

CVE-2022-27949-Apache Airflow subject to Exposure of Sensitive Information

View chart

apache/airflow · GHSA-fvw2-2pf7-77vw

high2022-11-14

CVE-2022-40127-Apache Airflow vulnerable to OS Command Injection via example DAGs

View chart

apache/airflow · GHSA-6pw3-8h9w-32gc

medium2022-11-13

CVE-2022-3975-NukeView CMS vulnerable to Cross-site Scripting

View chart

nukeviet/nukeviet · GHSA-x45f-j34v-75xm

medium2022-11-13

CVE-2022-3971-Matrix-appservice-irc vulnerable to sql injection via roomIds argument

View chart

matrix-org/matrix-appservice-irc · GHSA-ffwf-47x2-jpr8

high2022-11-11

CVE-2022-3952-ManyDesigns Portofino subject to creation of insecure temporary file

View chart

manydesigns/portofino · GHSA-925r-r6rp-2jj7

high2022-11-11

CVE-2022-41719-MessagePack for Golang subject to DoS via Unmarshal panic

View chart

shamaton/msgpack · GHSA-jr77-8gx4-h5qh

high2022-11-11

CVE-2022-41892-Arches vulnerable to execution of arbitrary SQL

View chart

archesproject/arches · GHSA-gmpq-xrxj-xh8m

low2022-11-11

Container build can leak any path on the host into the container

View chart

moby/moby · GHSA-vp35-85q5-9f25

critical2022-11-10

eZ Platform users with the Company admin role can assign any role to any user

View chart

ezsystems/ezpublish-kernel · GHSA-99r3-xmmq-7q7g

critical2022-11-10

eZ Platform users with the Company admin role can assign any role to any user

View chart

ezsystems/ezplatform-kernel · GHSA-8h83-chh2-fchp