Security advisories

low2022-08-27

CVE-2021-3644-wildfly-core allows user with access to management interface to access vault expression, retrieve item from vault

View chart →

wildfly/wildfly-core · GHSA-w88m-2936-rmxr

high2022-08-27

CVE-2021-3632-Keycloak allows anyone to register new security device or key for any user by using WebAuthn password-less login flow

View chart →

keycloak/keycloak · GHSA-qpq9-jpv4-6gwr

medium2022-08-27

CVE-2021-3856-Keycloak has Files or Directories Accessible to External Parties

View chart →

keycloak/keycloak · GHSA-3w4v-rvc4-2xpw

medium2022-08-27

CVE-2022-0225-Keycloak XSS via use of malicious payload as group name when creating new group from admin console

View chart →

keycloak/keycloak · GHSA-fqc7-5xxc-ph7r

high2022-08-27

CVE-2022-0084-XNIO `notifyReadClosed` method logging message to unexpected end

View chart →

xnio/xnio · GHSA-76fg-mhrg-fmmg

medium2022-08-27

CVE-2021-3427-Deluge Web-UI vulnerable to XSS through a crafted torrent file

View chart →

deluge-torrent/deluge · GHSA-5c8p-qhch-qhx6

high2022-08-27

CVE-2022-36537-ZK Framework vulnerable to malicious POST

View chart →

zkoss/zk · GHSA-6278-2q4m-cmf3

high2022-08-26

CVE-2021-25642-Deserialization of Untrusted Data in Apache Hadoop YARN

View chart →

apache/hadoop · GHSA-rr2m-gffv-mgrj

high2022-08-26

CVE-2022-2255-Incorrect header handling in mod-wsgi

View chart →

grahamdumpleton/mod_wsgi · GHSA-7527-8855-9cf8

medium2022-08-26

CVE-2022-36527-Jfinal Cross-site Scripting vulnerability

View chart →

jflyfox/jflyfox_jfinal · GHSA-34j6-m83c-52x2

medium2022-08-26

CVE-2021-3914-SmallRye Health UI Cross-site Scripting vulnerability

View chart →

smallrye/smallrye-health · GHSA-pvc3-wvxr-7cmf

medium2022-08-26

CVE-2022-2997-Insufficient Session Expiration in snipe/snipe-it

View chart →

snipe/snipe-it · GHSA-cmxc-9ghj-jp87

high2022-08-25

CVE-2022-24375-node-opcua DoS when bypassing limitations for excessive memory consumption

View chart →

node-opcua/node-opcua · GHSA-vh4f-fgpp-x8x2

high2022-08-25

CVE-2022-37333-exceedone/exment and exceedone/laravel-admin SQL Injection vulnerability

View chart →

exceedone/exment · GHSA-p74q-2pf8-j5jx

high2022-08-25

CVE-2022-25903-opcua Vulnerable to Out-of-bounds Write

View chart →

locka99/opcua · GHSA-hgxq-hcrm-c5pm

medium2022-08-25

CVE-2022-38080-exceedone/exment and exceedone/laravel-admin Cross-site Scripting vulnerability

View chart →

exceedone/exment · GHSA-8629-83m5-rj75

high2022-08-25

CVE-2022-36633-Improper token validation leading to code execution in Teleport

View chart →

gravitational/teleport · GHSA-6xf3-5hp7-xqqg

medium2022-08-25

CVE-2021-4040-org.apache.activemq:artemis-core-client Vulnerable to Out-of-Bounds Write

View chart →

apache/activemq-artemis · GHSA-gf8c-j759-86mg

medium2022-08-25

CVE-2021-43309-uri-template-lite Regular Expression Denial of Service

View chart →

litejs/uri-template-lite · GHSA-chw2-6c7r-37p7

high2022-08-25

CVE-2021-4041-ansible-runner vulnerable to shell command injection

View chart →

ansible/ansible-runner · GHSA-6j58-grhv-2769