Security advisories

medium2022-10-15

CVE-2022-35689-Magento Open Source allows Improper Access Control

View chart →

magento/magento2 · GHSA-5fxx-jwjm-x9hj

high2022-10-15

CVE-2022-35698-Magento Open Source allows Stored Cross-Site Scripting (Stored XSS)

View chart →

magento/magento2 · GHSA-4vj2-426r-jm3g

critical2022-10-14

CVE-2022-3439-Missing rate limit on rdiffweb

View chart →

ikus060/rdiffweb · GHSA-x8x2-wc2h-wc48

high2022-10-14

CVE-2022-32149-golang.org/x/text/language Denial of service via crafted Accept-Language header

View chart →

golang/text · GHSA-69ch-w2m2-3vjp

high2022-10-14

CVE-2022-37603-loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable

View chart →

webpack/loader-utils · GHSA-3rfm-jhwj-7488

medium2022-10-14

CVE-2022-3456-Missing rate limit on rdiffweb

View chart →

ikus060/rdiffweb · GHSA-92gf-p376-6r9r

critical2022-10-14

CVE-2022-3457-Origin Validation Error in rdiffweb

View chart →

ikus060/rdiffweb · GHSA-824x-jcxf-hpfg

critical2022-10-14

CVE-2022-37602-Grunt-karma vulnerable to prototype pollution

View chart →

karma-runner/grunt-karma · GHSA-hcj4-xf6x-63wj

high2022-10-13

CVE-2022-36023-Remote denial of service in Hyperledger Fabric Gateway

View chart →

hyperledger/fabric · GHSA-qj6r-fhrc-jj5r

high2022-10-13

CVE-2022-35944-October CMS Safe Mode bypass leads to authenticated Remote Code Execution

View chart →

octobercms/october · GHSA-x4q7-m6fp-4v9v

critical2022-10-13

CVE-2022-42889-Arbitrary code execution in Apache Commons Text

View chart →

apache/commons-text · GHSA-599f-7c49-w659

critical2022-10-13

CVE-2022-37601-Prototype pollution in webpack loader-utils

View chart →

webpack/loader-utils · GHSA-76p3-8jx3-jpfq

high2022-10-13

CVE-2022-42906-Powerline Gitstatus vulnerable to arbitrary code execution

View chart →

jaspernbrouwer/powerline-gitstatus · GHSA-w67g-6gjv-c599

high2022-10-12

CVE-2022-39300-Signature bypass via multiple root elements

View chart →

node-saml/node-saml · GHSA-5p8w-2mvw-38pv

high2022-10-12

CVE-2022-39299-Signature bypass via multiple root elements

View chart →

node-saml/passport-saml · GHSA-m974-647v-whv7

critical2022-10-12

CVE-2024-23679-com.enonic.xp:lib-auth vulnerable to Session Fixation

View chart →

enonic/xp · GHSA-4m5p-5w5w-3jcf

critical2022-10-12

CVE-2022-40871-Dolibarr vulnerable to Eval Injection

View chart →

dolibarr/dolibarr · GHSA-7cm4-vmf2-8wf2

critical2022-10-12

CVE-2022-37614-mockery is vulnerable to prototype pollution

View chart →

mfncooper/mockery · GHSA-gmwp-3pwc-3j3g

high2022-10-12

CVE-2022-41828-com.amazon.redshift:redshift-jdbc42 vulnerable to remote command execution

View chart →

aws/amazon-redshift-jdbc-driver · GHSA-jc69-hjw2-fm86

medium2022-10-12

The graphql-upload library included in Apollo Server 2 is vulnerable to CSRF mutations

View chart →

apollographql/apollo-server · GHSA-2p3c-p3qw-69r4