Security advisories

medium2022-09-15

CVE-2022-37724-Project Wonder WebObjects vulnerable to Arbitrary HTTP Header Injection and Cross-site Scripting

View chart →

wocommunity/wonder · GHSA-xv7r-9vq4-9wrq

medium2022-09-15

CVE-2022-40365-ouqiang gocron Cross-site scripting vulnerability

View chart →

ouqiang/gocron · GHSA-r947-2crg-xc39

medium2022-09-15

CVE-2022-40734-UniSharp Laravel Filemanager directory traversal vulnerability

View chart →

unisharp/laravel-filemanager · GHSA-5m2h-7rf2-rpx6

high2022-09-14

CVE-2022-3174-rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

View chart →

ikus060/rdiffweb · GHSA-mjw4-xvx6-3grg

medium2022-09-14

CVE-2022-3175-rdiffweb Missing Custom Error Page

View chart →

ikus060/rdiffweb · GHSA-ch4c-278q-5654

high2022-09-14

CVE-2022-1278-WildFly vulnerable to Insecure Default Initialization of Resource

View chart →

wildfly/boms · GHSA-fmq7-gh8v-mjvc

high2022-09-14

CVE-2022-2990-Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification

View chart →

containers/buildah · GHSA-fjm8-m7m6-2fjp

high2022-09-14

CVE-2022-2989-Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification

View chart →

containers/podman · GHSA-4wjj-jwc9-2x96

high2022-09-14

CVE-2022-40635-CrafterCMS OS Command Injection vulnerability

View chart →

craftercms/craftercms · GHSA-j6x3-3jqq-m922

high2022-09-14

CVE-2022-40634-CrafterCMS Crafter Studio Improperly Controls Dynamically-Managed Code Resources

View chart →

craftercms/studio · GHSA-2jv3-v37p-65w3

high2022-09-14

CVE-2022-3179-rdiffweb contains Weak Password Requirements

View chart →

ikus060/rdiffweb · GHSA-mp5p-g2jv-r8qw

high2022-09-14

CVE-2022-3029-NLnet Labs Routinator has Reachable Assertion vulnerability

View chart →

nlnetlabs/routinator · GHSA-m4vx-ccrf-w399

medium2022-09-14

CVE-2022-38306-LIEF vulnerable to heap based buffer overflow

View chart →

lief-project/lief · GHSA-52xx-r3g2-p8jm

high2022-09-14

CVE-2022-38495-LIEF vulnerable to heap based buffer overflow via print_binary function

View chart →

lief-project/lief · GHSA-42vg-2q93-fj6j

medium2022-09-14

CVE-2022-38497-LIEF contains a segmentation violation

View chart →

lief-project/lief · GHSA-2p5h-hpj4-fxgg

medium2022-09-14

CVE-2021-36568-Moodle Cross-site Scripting vulnerability

View chart →

moodle/moodle · GHSA-fm6m-fg23-67jq

high2022-09-13

CVE-2022-37734-graphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources

View chart →

graphql-java/graphql-java · GHSA-v62j-cxhh-fq22

critical2022-09-12

CVE-2022-39135-Apache Calcite before 1.32.0 vulnerable to potential XML External Entity (XXE) attack

View chart →

apache/calcite · GHSA-fj2m-w3wv-x9pr

medium2022-09-12

CVE-2022-25295-Gophish before 0.12.0 vulnerable to Open Redirect

View chart →

gophish/gophish · GHSA-hvw3-p9px-gpc9

critical2022-09-10

CVE-2022-25765-PDFKit vulnerable to Command Injection

View chart →

pdfkit/pdfkit · GHSA-rhwx-hjx2-x4qr