Security advisories

high2022-08-06

CVE-2022-25277-Drupal core arbitrary PHP code execution

View chart →

drupal/core · GHSA-6955-67hm-vjjq

medium2022-08-06

CVE-2022-35918-Streamlit directory traversal vulnerability

View chart →

streamlit/streamlit · GHSA-v4hr-4jpx-56gc

high2022-08-06

CVE-2022-31197-PostgreSQL JDBC Driver SQL Injection in ResultSet.refreshRow() with malicious column names

View chart →

pgjdbc/pgjdbc · GHSA-r38f-c4h4-hqq2

high2022-08-06

CVE-2022-31195-DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import

View chart →

dspace/dspace · GHSA-8rmh-55h4-93h5

high2022-08-06

CVE-2022-31194-JSPUI vulnerable to path traversal in submission (resumable) upload

View chart →

dspace/dspace · GHSA-qp5m-c3m9-8q2p

high2022-08-06

CVE-2022-31193-JSPUI's controlled vocabulary feature vulnerable to Open Redirect before v6.4 and v5.11

View chart →

dspace/dspace · GHSA-763j-q7wv-vf3m

high2022-08-06

CVE-2022-31192-JSPUI Possible Cross Site Scripting in "Request a Copy" Feature

View chart →

dspace/dspace · GHSA-4wm8-c2vv-xrpq

high2022-08-06

CVE-2022-31191-JSPUI spellcheck and autocomplete tools vulnerable to Cross Site Scripting

View chart →

dspace/dspace · GHSA-c558-5gfm-p2r8

medium2022-08-06

CVE-2022-31190-XMLUI's metadata of withdrawn Items is exposed to anonymous users

View chart →

dspace/dspace · GHSA-7w85-pp86-p4pq

medium2022-08-06

CVE-2022-31189-JSPUI's "Internal System Error" page prints exceptions and stack traces without sanitization

View chart →

dspace/dspace · GHSA-c2j7-66m3-r4ff

medium2022-08-06

CVE-2022-35917-Solana Pay Vulnerable to Weakness in Transfer Validation Logic

View chart →

solana-labs/solana-pay · GHSA-j47c-j42c-mwqq

high2022-08-06

CVE-2022-25275-Drupal core Information Disclosure vulnerability

View chart →

drupal/core · GHSA-xh3v-6f9j-wxw3

high2022-08-06

CVE-2022-33977-untangle vulnerable to XML Entity Expansion

View chart →

stchris/untangle · GHSA-7xr3-6ggc-wc9p

high2022-08-06

CVE-2022-31471-untangle vulnerable to Improper Restriction of XML External Entity Reference

View chart →

stchris/untangle · GHSA-f83q-2cp7-qrjg

low2022-08-06

CVE-2022-31186-next-auth before v4.10.2 and v3.29.9 leaks excessive information into log

View chart →

nextauthjs/next-auth · GHSA-p6mm-27gq-9v3p

high2022-08-06

CVE-2022-35920-sanic vulnerable to Path Traversal when using `app.static` if using encoded `%2F` URLs

View chart →

sanic-org/sanic · GHSA-8cw9-5hmv-77w6

low2022-08-06

CVE-2022-35921-Byobu user preference to prevent private discussions being started are not respected

View chart →

friendsofflarum/byobu · GHSA-6gjm-6wj6-4px5

high2022-08-06

CVE-2022-35922-Rust-WebSocket memory allocation based on untrusted length

View chart →

websockets-rs/rust-websocket · GHSA-qrjv-rf5q-qpxc

critical2022-08-06

CVE-2022-21186-@acrontum/filesystem-template vulnerable to Command Injection due to fetchRepo API missing sanitization

View chart →

acrontum/filesystem-template · GHSA-m2fc-9h5m-29cm

medium2022-08-06

CVE-2016-3098-administrate vulnerable to Cross-Site Request Forgery

View chart →

thoughtbot/administrate · GHSA-cc8c-26rj-v2vx