Security advisories

medium2022-08-25

CVE-2018-14520-Kirby CMS 2.5.12 Cross-site Scripting

View chart →

getkirby/kirby · GHSA-h3w2-qg2r-c7mf

medium2022-08-25

CVE-2018-14519-Kirby CMS 2.5.12 Cross-site Request Forgery

View chart →

getkirby/kirby · GHSA-c7x2-7h8r-jq4m

medium2022-08-24

CVE-2022-33916-Exposure of Sensitive Information in OPCFoundation.NetStandard.Opc.Ua.Server

View chart →

opcfoundation/ua-.netstandard · GHSA-mw9h-hcp7-fgc6

medium2022-08-24

CVE-2019-25075-Path Traversal in Gravitee API Management

View chart →

gravitee-io/gravitee-api-management · GHSA-xc4w-28g8-vqm5

high2022-08-24

CVE-2022-25231-node-opcua DoS vulnerability via message with memory allocation that exceeds v8's memory limit

View chart →

node-opcua/node-opcua · GHSA-qpgc-xh7j-52q8

medium2022-08-24

CVE-2022-2796-Pimcore Cross-site Scripting (XSS)

View chart →

pimcore/pimcore · GHSA-pr4f-4pcx-2r3h

high2022-08-24

CVE-2022-25304-Uncontrolled Resource Consumption in asyncua and opcua

View chart →

freeopcua/opcua-asyncio · GHSA-mfpj-3qhm-976m

high2022-08-24

CVE-2022-25888-Uncontrolled Resource Consumption in opcua

View chart →

locka99/opcua · GHSA-8mx2-gqx9-rm7f

high2022-08-24

CVE-2022-21208-Uncontrolled Resource Consumption in node-opcua

View chart →

node-opcua/node-opcua · GHSA-4hr4-pjjh-2q2w

medium2022-08-24

CVE-2021-3701-ansible-runner has default temporary files written to world R/W locations

View chart →

ansible/ansible-runner · GHSA-wwch-cmqr-hhrm

critical2022-08-24

CVE-2022-37223-SQL injection in jflyfox jfinal

View chart →

jflyfox/jfinal_cms · GHSA-wv39-f3vx-3v6q

medium2022-08-24

CVE-2020-35509-Keycloak vulnerable to Improper Certificate Validation

View chart →

keycloak/keycloak · GHSA-rpj2-w6fr-79hc

medium2022-08-24

CVE-2021-3702-ansible-runner vulnerable to Race Condition

View chart →

ansible/ansible-runner · GHSA-772j-xvf9-qpf5

critical2022-08-24

CVE-2022-37199-SQL injection in jflyfox jfinal

View chart →

jflyfox/jfinal_cms · GHSA-5rf4-f24c-hpvh

low2022-08-24

CVE-2022-38665-RabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin

View chart →

jenkinsci/collabnet-plugin · GHSA-qh87-2qvh-5jf8

medium2022-08-24

CVE-2022-38663-Improper masking of credentials Jenkins in Git Plugin

View chart →

jenkinsci/git-plugin · GHSA-jxmw-3gxf-fprh

medium2022-08-24

CVE-2022-38664-Cross-site Scripting in Jenkins Job Configuration History Plugin

View chart →

jenkinsci/job-config-history-plugin · GHSA-28w4-h56g-grg7

medium2022-08-23

CVE-2022-1340-Cross site scripting in yetiforce/yetiforce-crm

View chart →

yetiforcecompany/yetiforcecrm · GHSA-w83m-rghh-frxj

high2022-08-23

CVE-2022-2927-Missing password strength check in notrinos/notrinos-erp

View chart →

notrinos/notrinoserp · GHSA-qhm8-69qh-g76j

medium2022-08-23

CVE-2022-2930-Unverified Password Change in OctoPrint

View chart →

octoprint/octoprint · GHSA-39gf-864w-pxw4