Security Advisories

high2022-11-10

CVE-2022-45129-Payara, when deployed to the root context, allows attackers to visit META-INF and WEB-INF

View chart

payara/payara · GHSA-q35w-85pq-rv3x

low2022-11-10

CVE-2022-3867-HashiCorp Nomad vulnerable to Insufficient Session Expiration

View chart

hashicorp/nomad · GHSA-9fmc-5fq4-5jwh

medium2022-11-10

CVE-2022-3866-HashiCorp Nomad vulnerable to non-sensitive metadata exposure

View chart

hashicorp/nomad · GHSA-7wg4-8m5p-hrfg

high2022-11-09

CVE-2022-39388-Istio may allow identity impersonation if user has localhost access

View chart

istio/istio · GHSA-6c6p-h79f-g6p4

high2022-11-09

CVE-2022-41878-Parse Server vulnerable to Prototype Pollution via Cloud Code Webhooks or Cloud Code Triggers

View chart

parse-community/parse-server · GHSA-xprv-wvh7-qqqx

medium2022-11-09

CVE-2022-43121-Subrion CMS is vulnerable to Cross-Site Scripting (XSS)

View chart

intelliants/subrion · GHSA-jrvr-gmqv-hgrh

medium2022-11-09

CVE-2022-43120-Subrion CMS is vulnerable to Cross-Site Scripting (XSS)

View chart

intelliants/subrion · GHSA-3wmg-28v9-8hf6

medium2022-11-09

CVE-2022-43320-FeehiCMS is vulnerable to Cross-Site Scripting (XSS)

View chart

liufee/cms · GHSA-3ppm-fwhm-qqg6

high2022-11-09

CVE-2022-39368-Failing DTLS handshakes may cause throttling to block processing of records

View chart

eclipse-californium/californium · GHSA-p72g-cgh9-ghjg

medium2022-11-08

CVE-2022-41064-.NET Information Disclosure Vulnerability

View chart

dotnet/corefx · GHSA-8g2p-5pqh-5jmc

medium2022-11-08

CVE-2022-39352-OpenFGA Authorization Bypass

View chart

openfga/openfga · GHSA-3gfj-fxx4-f22w

medium2022-11-08

Invalid use of `mem::uninitialized` causes `use-of-uninitialized-value`

View chart

badboy/lzf-rs · GHSA-5m39-wx2q-mxg3

low2022-11-08

CVE-2022-41874-Tauri Filesystem Scope can be Partially Bypassed

View chart

tauri-apps/tauri · GHSA-q9wv-22m9-vhqh

critical2022-11-08

CVE-2022-39396-Remote code execution via MongoDB BSON parser through prototype pollution

View chart

parse-community/parse-server · GHSA-prm5-8g2m-24gg

high2022-11-07

CVE-2022-39386-fastify/websocket vulnerable to uncaught exception via crash on malformed packet

View chart

fastify/fastify-websocket · GHSA-4pcg-wr6c-h9cq

critical2022-11-07

CVE-2022-42920-Apache Commons BCEL vulnerable to out-of-bounds write

View chart

apache/commons-bcel · GHSA-97xg-phpr-rg8q

critical2022-11-07

CVE-2022-44797-btcd mishandles witness size checking

View chart

btcsuite/btcd · GHSA-2chg-86hq-7w38

medium2022-11-05

CVE-2022-3869-Froxlor vulnerable to code injection

View chart

froxlor/froxlor · GHSA-6rjv-xxgr-v57x

critical2022-11-04

CVE-2022-3023-TiDB vulnerable to Use of Externally-Controlled Format String

View chart

pingcap/tidb · GHSA-7fxj-fr3v-r9gj

high2022-11-04

CVE-2022-33684-Apache Pulsar Disabled Certificate Validation for OAuth Client Credential Requests makes C++/Python Clients vulnerable to MITM attack

View chart

apache/pulsar-client-cpp · GHSA-5r3h-c3r7-9w4h