Security advisories

medium2022-09-16

CVE-2018-25047-Smarty Cross-site Scripting vulnerability in pages that use smarty_function_mailto

View chart →

smarty-php/smarty · GHSA-hwq7-5vv9-c6cf

critical2022-09-16

CVE-2022-37257-steal vulnerable to Prototype Pollution via requestedVersion variable

View chart →

stealjs/steal · GHSA-93q5-3xpc-8vg3

medium2022-09-16

CVE-2022-3211-Pimcore vulnerable to stored stored Cross-site Scripting via`properties` when creating new users

View chart →

pimcore/pimcore · GHSA-4849-x3jx-45qr

critical2022-09-16

CVE-2022-37264-steal vulnerable to Prototype Pollution via optionName variable

View chart →

stealjs/steal · GHSA-8f8g-9j73-7p82

high2022-09-16

CVE-2022-37262-steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments

View chart →

stealjs/steal · GHSA-28v4-jf82-jvj8

high2022-09-16

CVE-2022-37260-steal vulnerable to Regular Expression Denial of Service via input variable

View chart →

stealjs/steal · GHSA-7f3x-2wcx-hww8

high2022-09-15

CVE-2022-25897-Eclipse Milo vulnerable to Resource Exhaustion (Denial of Service)

View chart →

eclipse/milo · GHSA-fph9-f5r6-vhqf

low2022-09-15

Python-TUF vulnerable to incorrect threshold signature computation for new root metadata

View chart →

theupdateframework/python-tuf · GHSA-r7vq-6425-j94w

high2022-09-15

CVE-2022-36110-Netmaker vulnerable to Insufficient Granularity of Access Control

View chart →

gravitl/netmaker · GHSA-ggf6-638m-vqmg

high2022-09-15

CVE-2022-39200-Dendrite signature checks not applied to some retrieved missing events

View chart →

matrix-org/dendrite · GHSA-pfw4-xjgm-267c

medium2022-09-15

TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection

View chart →

typo3/typo3 · GHSA-gqqf-g5r7-84vf

medium2022-09-15

CVE-2022-39202-matrix-appservice-irc vulnerable to IRC mode parameter confusion

View chart →

matrix-org/matrix-appservice-irc · GHSA-cq7q-5c67-w39w

high2022-09-15

CVE-2022-39203-Parsing issue in matrix-org/node-irc leading to room takeovers

View chart →

matrix-org/matrix-appservice-irc · GHSA-xvqg-mv25-rwvw

high2022-09-15

CVE-2022-38013-.NET Denial of Service Vulnerability

View chart →

dotnet/aspnetcore · GHSA-r8m2-4x37-6592

high2022-09-15

CVE-2022-3212-axum-core has no default limit put on request bodies

View chart →

tokio-rs/axum · GHSA-m77f-652q-wwp4

high2022-09-15

Pageflow vulnerable to insecure direct object reference in membership update endpoint

View chart →

codevise/pageflow · GHSA-qcqv-38jg-2r43

high2022-09-15

Pageflow vulnerable to sensitive user data extraction via Ransack query injection

View chart →

codevise/pageflow · GHSA-wrrw-crp8-979q

high2022-09-15

KubeVirt vulnerable to arbitrary file read on host

View chart →

kubevirt/kubevirt · GHSA-qv98-3369-g364

critical2022-09-15

CVE-2022-2900-Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url

View chart →

ionicabizau/parse-url · GHSA-j9fq-vwqv-2fm2

medium2022-09-15

CVE-2022-38796-Feehi CMS host header injection vulnerability

View chart →

liufee/cms · GHSA-4r4f-jrvw-h727