Security Advisories

high2022-08-06

CVE-2022-2053-Undertow vulnerable to Dos via Large AJP request

undertow-io/undertow · GHSA-95rf-557x-44g5

medium2022-08-06

CVE-2022-37450-Go Ethereum allows attackers to use manipulation of time-difference values to achieve replacement of main-chain blocks

View chart

ethereum/go-ethereum · GHSA-rqmg-hrg4-fm69

high2022-08-05

CVE-2022-34158-Apache JSPWiki CSRF due to crafted invocation on the Image plugin

View chart

apache/jspwiki · GHSA-jp3m-p26h-mm7v

medium2022-08-05

CVE-2022-27166-Apache JSPWiki XSS due to crafted request on XHRHtml2Markup.jsp

View chart

apache/jspwiki · GHSA-2fxf-qj94-3f83

medium2022-08-05

CVE-2022-28732-Apache JSPWiki XSS due to crafted request in WeblogPlugin

View chart

apache/jspwiki · GHSA-hph8-29xw-qfxx

medium2022-08-05

CVE-2022-28730-Apache JSPWiki XSS due to incomplete patch for CVE-2021-40369

View chart

apache/jspwiki · GHSA-ggjq-8c4c-68r5

medium2022-08-05

CVE-2022-28731-Apache JSPWiki CSRF due to crafted request on UserPreferences.jsp

View chart

apache/jspwiki · GHSA-9x9j-vrhj-v364

critical2022-08-05

CVE-2022-25168-Apache Hadoop argument injection vulnerability

View chart

apache/hadoop · GHSA-8wm5-8h9c-47pc

high2022-08-05

CVE-2022-35142-Raneto Denial of Service via crafted payload injected into `Search` parameter

View chart

ryanlelek/raneto · GHSA-xxc2-j7jj-6g5m

medium2022-08-05

CVE-2022-35144-Raneto vulnerable to Cross-site Scripting

View chart

ryanlelek/raneto · GHSA-vc68-6x72-w22f

critical2022-08-05

CVE-2022-35143-Raneto v0.17.0 employs weak password complexity requirements

View chart

ryanlelek/raneto · GHSA-7942-2fx8-qhpf

low2022-08-04

CVE-2022-37394-OpenStack Nova Changing vnic_type breaks compute service restart

View chart

openstack/nova · GHSA-v725-c588-h936

high2022-08-04

CVE-2022-35737-`libsqlite3-sys` via C SQLite improperly validates array index

View chart

rusqlite/rusqlite · GHSA-jw36-hf63-69r9

critical2022-08-03

CVE-2020-28451-image-tiler susceptible to command injection

View chart

mrp/image-tiler · GHSA-mrxv-pr4h-963q

critical2022-08-03

CVE-2020-28453-npos-tesseract Command Injection vulnerability

View chart

taoyuan/npos-tesseract · GHSA-mpwp-pf96-9g4r

critical2022-08-03

CVE-2020-28437-heroku-env susceptible to command injection

View chart

brianc/node-heroku-env · GHSA-jp45-65jw-94mj

high2022-08-03

CVE-2022-25867-Socket.IO-client Java before 2.0.1 vulnerable to NULL Pointer Dereference

View chart

socketio/socket.io-client-java · GHSA-85xx-xhjm-rhrw

critical2022-08-03

CVE-2020-7795-get-npm-package-version Command Injection vulnerability

View chart

hoperyy/get-npm-package-version · GHSA-4h66-vghf-xg5x

critical2022-08-03

CVE-2020-28434-gitblame susceptible to command injection

View chart

xjamundx/gitblame · GHSA-3486-rvxc-hrrj

critical2022-08-03

CVE-2020-28433-node-latex-pdf is susceptible to command injection

View chart

toolbuddy/node-latex-pdf · GHSA-32fw-9wq8-9x9c