Security advisories

high2022-11-02

CVE-2022-39381-Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp

View chart →

julianhille/muhammarajs · GHSA-rcrx-fpjp-mfrw

medium2022-11-01

CVE-2022-3788-TablePress Plugin vulnerable to Cross-site Scripting

View chart →

tablepress/tablepress · GHSA-9mf2-hpj4-rw3r

high2022-11-01

CVE-2022-3800-IBAX go-ibax vulnerable to SQL injection

View chart →

ibax-io/go-ibax · GHSA-rwcf-gq22-ph83

high2022-11-01

CVE-2022-3798-IBAX go-ibax vulnerable to SQL injection

View chart →

ibax-io/go-ibax · GHSA-mgqh-3qm7-gx82

high2022-11-01

CVE-2022-3801-IBAX go-ibax vulnerable to SQL injection

View chart →

ibax-io/go-ibax · GHSA-m738-584h-26p6

high2022-11-01

CVE-2022-3802-IBAX go-ibax vulnerable to SQL injection

View chart →

ibax-io/go-ibax · GHSA-g23g-mw97-65c8

medium2022-11-01

CVE-2022-34662-Apache DolphinScheduler vulnerable to Path Traversal

View chart →

apache/dolphinscheduler · GHSA-fp35-xrrr-3gph

high2022-11-01

CVE-2022-3799-IBAX go-ibax vulnerable to SQL injection

View chart →

ibax-io/go-ibax · GHSA-fcgf-j8cf-h2rm

medium2022-11-01

CVE-2022-31777-Apache Spark vulnerable to Log Injection

View chart →

apache/spark · GHSA-43xg-8wmj-cw8h

high2022-11-01

CVE-2022-39369-phpCAS vulnerable to Service Hostname Discovery Exploitation

View chart →

apereo/phpcas · GHSA-8q72-6qq8-xv64

critical2022-11-01

CVE-2022-3602-X.509 Email Address 4-byte Buffer Overflow

View chart →

alexcrichton/openssl-src-rs · GHSA-8rwr-x37p-mx23

high2022-11-01

CVE-2022-3786-X.509 Email Address Variable Length Buffer Overflow

View chart →

alexcrichton/openssl-src-rs · GHSA-h8jm-2x53-xhp5

critical2022-11-01

CVE-2022-39353-xmldom allows multiple root nodes in a DOM

View chart →

xmldom/xmldom · GHSA-crh6-fp67-6883

critical2022-11-01

CVE-2022-31692-Spring Security authorization rules can be bypassed via forward or include dispatcher types

View chart →

spring-projects/spring-security · GHSA-mmmh-wcxm-2wr4

medium2022-11-01

CVE-2022-3783-node-red-dashboard vulnerable to Cross-site Scripting

View chart →

node-red/node-red-dashboard · GHSA-vrv9-3x3w-ffxw

high2022-11-01

CVE-2022-42252-Apache Tomcat may reject request containing invalid Content-Length header

View chart →

apache/tomcat · GHSA-p22x-g9px-3945

high2022-11-01

CVE-2022-25885-muhammara and hummus vulnerable to null pointer dereference on bad response object

View chart →

julianhille/muhammarajs · GHSA-frp9-2v6r-gj97

high2022-11-01

CVE-2022-25892-muhammara and hummus vulnerable to denial of service by NULL pointer dereference

View chart →

julianhille/muhammarajs · GHSA-9cv5-4wqv-9w94

critical2022-10-31

CVE-2022-39366-acryl-datahub missing JWT signature check

View chart →

datahub-project/datahub · GHSA-r8gm-v65f-c973

medium2022-10-31

CVE-2022-40488-ProcessWire vulnerable to Cross-Site Request Forgery

View chart →

processwire/processwire · GHSA-vpwh-qmwc-2phg