Security advisories

medium2022-08-23

CVE-2022-2890-Cross site scripting in yetiforce/yetiforce-crm

View chart →

yetiforcecompany/yetiforcecrm · GHSA-jhxh-68jj-68c7

medium2022-08-23

CVE-2022-2932-Cross site scripting in mobiledoc-kit

View chart →

bustle/mobiledoc-kit · GHSA-hw2p-xqhq-3mjf

medium2022-08-23

CVE-2022-1930-Regular expression denial of service in eth-account

View chart →

ethereum/eth-account · GHSA-v65g-f3cj-fjp4

high2022-08-22

CVE-2022-2921-Exposure of password hashes in notrinos/notrinos-erp

View chart →

notrinos/notrinoserp · GHSA-44w5-q257-8428

medium2022-08-22

CVE-2022-2885-Cross site scripting in yetiforce/yetiforce-crm

View chart →

yetiforcecompany/yetiforcecrm · GHSA-rjvc-mf7r-ch7r

critical2022-08-22

CVE-2022-34916-Remote code execution in Apache Flume

View chart →

apache/flume · GHSA-h9mh-mgpv-gqmv

high2022-08-20

CVE-2022-35909-Incorrect Access Control and Cross Site Scripting in Jellyfin

View chart →

jellyfin/jellyfin · GHSA-qwp3-5fw3-5wgv

high2022-08-20

CVE-2022-36157-Improper Privilege Management in com.xuxueli:xxl-job

View chart →

xuxueli/xxl-job · GHSA-7qq9-9g2w-56f9

high2022-08-19

CVE-2022-35204-Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service

View chart →

vitejs/vite · GHSA-mv48-hcvh-8jj8

medium2022-08-19

CVE-2022-35174-Cross site scripting in getkirby/starterkit

View chart →

getkirby/starterkit · GHSA-4m2g-668v-jwjx

critical2022-08-19

CVE-2020-36599-OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value

View chart →

omniauth/omniauth · GHSA-pm55-qfxr-h247

critical2022-08-19

CVE-2022-35540-Use of Hard-coded Credentials in AgileConfig.Client

View chart →

dotnetcore/agileconfig · GHSA-mj5w-w588-j6xg

high2022-08-18

PocketMine-MP invalid skin geometry JSON data leading to server crash

View chart →

pmmp/pocketmine-mp · GHSA-8cwq-4cmf-px73

medium2022-08-18

CVE-2022-36008-Incorrect parsing of EVM reversion exit reason in RPC

View chart →

paritytech/frontier · GHSA-mjvm-mhgc-q4gp

critical2022-08-18

CVE-2022-36010-React Editable Json Tree vulnerable to arbitrary code execution via function parsing

View chart →

oxyno-zeta/react-editable-json-tree · GHSA-j3rv-w43q-f9x2

medium2022-08-18

CVE-2022-36007-Venice vulnerable to Partial Path Traversal issue within the functions `load-file` and `load-resource`

View chart →

jlangch/venice · GHSA-4mmh-5vw7-rgvj

high2022-08-18

oqs's Post-Quantum Signature scheme Rainbow level I parametersets broken

View chart →

open-quantum-safe/liboqs-rust · GHSA-h864-m8vm-3xvj

high2022-08-18

CVE-2022-35936-Ethermint vulnerable to DoS through unintended Contract Selfdestruct

View chart →

evmos/ethermint · GHSA-f92v-grc2-w2fg

medium2022-08-18

CVE-2022-35943-CodeIgniter Shield Vulnerable to SameSite Attackers Bypassing the CSRF Protection

View chart →

codeigniter4/shield · GHSA-5hm8-vh6r-2cjq

medium2022-08-18

CVE-2022-35948-Nodejs ‘undici’ vulnerable to CRLF Injection via Content-Type

View chart →

nodejs/undici · GHSA-f772-66g8-q5h3