Security advisories

medium2022-10-31

CVE-2022-40487-ProcessWire vulnerable to Cross-site Scripting

View chart →

processwire/processwire · GHSA-8g35-prrr-gxxf

high2022-10-31

CVE-2022-37620-kangax html-minifier REDoS vulnerability

View chart →

kangax/html-minifier · GHSA-pfq8-rq6v-vf5m

critical2022-10-31

CVE-2022-37623-thlorenz browserify-shim vulnerable to prototype pollution

View chart →

thlorenz/browserify-shim · GHSA-cfgr-75jx-h88g

critical2022-10-31

CVE-2022-3771-easyii CMS's File Upload Management vulnerable to unrestricted upload

View chart →

noumo/easyii · GHSA-vqvm-qrwh-69h7

medium2022-10-31

CVE-2022-3616-OctoRPKI crashes when max iterations is reached

View chart →

cloudflare/cfrpki · GHSA-pmw9-567p-68pc

high2022-10-31

CVE-2022-39294-conduit-hyper vulnerable to Denial of Service from unchecked request length

View chart →

conduit-rust/conduit-hyper · GHSA-9398-5ghf-7pr6

medium2022-10-31

CVE-2022-3765-phpMyFAQ vulnerable to stored Cross-site Scripting

View chart →

thorsten/phpmyfaq · GHSA-wr74-2v66-57pp

medium2022-10-31

CVE-2022-3766-phpMyFAQ vulnerable to reflected Cross-site Scripting

View chart →

thorsten/phpmyfaq · GHSA-mg5h-rhjq-6v84

medium2022-10-30

CVE-2022-44020-OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions

View chart →

umago/virtualbmc · GHSA-5pj3-6fqm-8m7m

critical2022-10-29

CVE-2022-3754-phpMyFAQ contains Weak Password Requirements

View chart →

thorsten/phpmyfaq · GHSA-2rr3-rv49-p42f

critical2022-10-29

CVE-2022-37621-thlorenz browserify-shim vulnerable to prototype pollution

View chart →

thlorenz/browserify-shim · GHSA-r737-347m-wqc7

critical2022-10-29

CVE-2022-39365-RCE vulnerability in Pimcore/Mail & Dynamic Text Layout

View chart →

pimcore/pimcore · GHSA-5qxq-vgmm-q39m

high2022-10-28

CVE-2022-3500-Keylime: unhandled exceptions could lead to invalid attestation states

View chart →

keylime/keylime · GHSA-hff2-x2j9-gxgv

high2022-10-28

CVE-2022-3697-Ansible leaks password to logs

View chart →

ansible/ansible · GHSA-cpx3-93w7-457x

medium2022-10-28

CVE-2022-26884-Apache DolphinScheduler vulnerable to Path Traversal

View chart →

apache/dolphinscheduler · GHSA-vpgf-fgm8-gxr2

medium2022-10-27

CVE-2022-36182-Hashicorp Boundary vulnerable to clickjacking

View chart →

hashicorp/boundary · GHSA-xqv2-3vvq-qg6r

high2022-10-27

CVE-2022-39357-Prototype pollution in Snowboard framework

View chart →

wintercms/winter · GHSA-3fh5-q6fg-w28q

critical2022-10-27

CVE-2022-3363-Rdiffweb subject to Business Logic Errors

View chart →

ikus060/rdiffweb · GHSA-jw36-mrvg-j5fx

medium2022-10-26

CVE-2022-39348-Twisted vulnerable to NameVirtualHost Host header injection

View chart →

twisted/twisted · GHSA-vg46-2rrj-3647

high2022-10-26

CVE-2022-39286-Execution with Unnecessary Privileges in JupyterApp

View chart →

jupyter/jupyter_core · GHSA-m678-f26j-3hrp