Security Advisories

medium2022-09-10

CVE-2022-2925-Appwrite Vulnerable to Cross-site Scripting

View chart

appwrite/appwrite · GHSA-5ffj-mph5-c5hv

critical2022-09-10

CVE-2022-36376-Rank Math SEO plugin vulnerable to Server-Side Request Forgery

View chart

rankmath/seo-by-rank-math · GHSA-j95r-86hx-xwxg

medium2022-09-10

CVE-2022-38639-Markdown-Nice v1.8.22 vulnerable to Cross-site Scripting

View chart

mdnice/markdown-nice · GHSA-462r-wxvm-jvxh

critical2022-09-10

CVE-2022-38638-Casdoor arbitrary file write vulnerability

View chart

casdoor/casdoor · GHSA-9vm3-r8gq-cr6x

medium2022-09-09

CVE-2022-31671-Harbor fails to validate the user permissions when reading job execution logs through the P2P preheat execution logs

View chart

goharbor/harbor · GHSA-q76q-q8hw-hmpw

high2022-09-09

CVE-2022-28220-Apache James vulnerable to buffering attack

View chart

apache/james-project · GHSA-w45j-f5g5-w94x

critical2022-09-09

CVE-2022-25914-com.google.cloud.tools:jib-core vulnerable to Remote Code Execution (RCE)

View chart

googlecontainertools/jib · GHSA-936v-cg49-m2g5

critical2022-09-09

CVE-2022-3167-rdiffweb vulnerable to Improper Restriction of Rendered UI Layers or Frames

View chart

ikus060/rdiffweb · GHSA-m379-x4xc-38x9

high2022-09-08

CVE-2022-35513-Blink1Control2 uses weak password encryption

View chart

todbot/blink1control2 · GHSA-jqhq-pfg3-fg5p

high2022-09-08

CVE-2022-37189-MEI2Volpiano is vulnerable to XML External Entity (XXE), leading to a Denial of Service (DoS)

View chart

ddmal/mei2volpiano · GHSA-6xm7-3cc5-47f9

high2022-09-07

CVE-2022-2714-RosarioSIS before 10.1 vulnerable to Improper Handling of Length Parameter Inconsistency

View chart

francoisjacquet/rosariosis · GHSA-vh4m-mw8w-g4w8

high2022-09-07

CVE-2022-23451-Barbican authorization flaw before v14.0.0

View chart

openstack/barbican · GHSA-p2jg-q8hw-p7gc

medium2022-09-07

CVE-2022-34867-Unauthenticated Sensitive Information Disclosure vulnerability

View chart

libreform/libreform · GHSA-29qv-hhg4-6x96

critical2022-09-07

CVE-2020-21516-FeehiCMS has an arbitrary file upload vulnerability

View chart

liufee/cms · GHSA-jj62-mc3m-j769

critical2022-09-07

CVE-2022-36663-Gluu Oxauth before v4.4.1 vulnerable to Server-Side Request Forgery attacks via a crafted request_uri parameter

View chart

gluufederation/oxauth · GHSA-hc94-9v26-gxwv

medium2022-09-06

CVE-2022-38369-Apache IoTDB Session Fixation vulnerability

View chart

apache/iotdb · GHSA-g6vm-3ch8-c6jq

high2022-09-06

CVE-2022-38370-Apache IoTDB grafana-connector contains an interface without authorization

View chart

apache/iotdb · GHSA-c86f-9grv-pmqf

medium2022-09-03

CVE-2022-38170-Apache Airflow exposes arbitrary file content

View chart

apache/airflow · GHSA-q8h9-pqcx-59hw

critical2022-09-03

CVE-2022-38054-Apache Airflow Session Fixation vulnerability

View chart

apache/airflow · GHSA-5ff8-7639-6v6g

high2022-09-02

`os_socketaddr` invalidly assumes the memory layout of std::net::SocketAddr

View chart

a-ba/os_socketaddr · GHSA-c439-chv8-8g2j