Security advisories

medium2022-10-06

CVE-2020-15112-etcd's WAL `ReadAll` method vulnerable to an entry with large index causing panic

View chart →

etcd-io/etcd · GHSA-m332-53r6-2w93

critical2022-10-06

CVE-2018-21246-Caddy vulnerable to Authentication Bypass due to mishandling of TLS client authentication

View chart →

caddyserver/caddy · GHSA-gr7w-x2jp-3xgw

high2022-10-06

generator-jhipster vulnerable to login check Regular Expression Denial of Service

View chart →

jhipster/generator-jhipster · GHSA-8w7w-67mw-r5p7

high2022-10-06

CVE-2012-0796-PHPMailer vulnerable to email header injection

View chart →

phpmailer/phpmailer · GHSA-398j-f7m7-795j

low2022-10-06

CVE-2022-39284-Codeigniter4's Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued

View chart →

codeigniter4/codeigniter4 · GHSA-745p-r637-7vvp

medium2022-10-06

CVE-2022-39237-SIF's Digital Signature Hash Algorithms Not Validated

View chart →

sylabs/sif · GHSA-m5m3-46gj-wch8

medium2022-10-06

CVE-2021-21235-kamadak-exif vulnerable to Infinite loop when parsing PNG files

View chart →

kamadak/exif-rs · GHSA-px9g-8hgv-jvg2

critical2022-10-06

CVE-2018-17057-TCPDF vulnerable to attackers triggering deserialization of arbitrary data

View chart →

tecnickcom/tcpdf · GHSA-5hw4-m7f3-hhx8

high2022-10-06

CVE-2022-3389-rdiffweb Path Traversal vulnerability

View chart →

ikus060/rdiffweb · GHSA-hrrm-895h-xh34

high2022-10-06

CVE-2022-3273-rdiffweb does not have a rate limit on incorrect password attempts to prevent brute force attacks

View chart →

ikus060/rdiffweb · GHSA-9g3v-v24q-jj5p

medium2022-10-06

CVE-2022-3376-rdiffweb allows a new password to be the same as the previous password

View chart →

ikus060/rdiffweb · GHSA-7wr6-fj4x-893v

high2022-10-06

CVE-2022-2986-Moodle Cross-Site Request Forgery (CSRF)

View chart →

moodle/moodle · GHSA-xjr3-fwp9-9g96

medium2022-10-06

CVE-2022-3002-YetiForce CRM vulnerable to stored Cross-site Scripting

View chart →

yetiforcecompany/yetiforcecrm · GHSA-v9fj-h8g6-4w9q

high2022-10-05

CVE-2022-39273-FlyteAdmin's Default OAuth Authorization Server secret must be rotated

View chart →

flyteorg/flyteadmin · GHSA-67x4-qr35-qvrm

medium2022-10-04

CVE-2022-3171-protobuf-java has a potential Denial of Service issue

View chart →

protocolbuffers/protobuf · GHSA-h4h5-3hr4-j3g2

high2022-10-04

CVE-2022-36551-Heartex - Label Studio Community Edition vulnerable to SSRF in the Data Import module

View chart →

heartexlabs/label-studio · GHSA-pc6f-259w-w3j6

high2022-10-04

CVE-2022-40922-LIEF vulnerable to denial of service through segmentation fault

View chart →

lief-project/lief · GHSA-38hf-c37x-32hv

high2022-10-04

CVE-2022-38817-Dapr Dashboard vulnerable to Incorrect Access Control

View chart →

dapr/dashboard · GHSA-2w6m-q946-399r

high2022-10-04

CVE-2022-40764-Snyk CLI affected by Command Injection vulnerability

View chart →

snyk/cli · GHSA-hpqj-7cj6-hfj8

medium2022-10-04

CVE-2022-32173-OrchardCore vulnerable to HTML injection

View chart →

orchardcms/orchardcore · GHSA-5gg9-gwj4-mqmj