Security advisories

medium2022-05-24

CVE-2022-29214-URL Redirection to Untrusted Site ('Open Redirect') in next-auth

View chart →

nextauthjs/next-auth · GHSA-q2mx-j4x2-2h74

medium2022-05-24

CVE-2021-29049-Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the currentURL Parameter

View chart →

liferay/liferay-portal · GHSA-w28v-87g6-cjr6

medium2022-05-24

CVE-2021-21662-Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows enumerating credentials IDs

View chart →

jenkinsci/xldeploy-plugin · GHSA-h246-g39x-7vmx

high2022-05-24

CVE-2021-20088-mootools-more vulnerable to prototype pollution

View chart →

mootools/mootools-more · GHSA-fw45-938v-p26j

medium2022-05-24

CVE-2021-29002-Plone XSS Vulnerability

View chart →

plone/plone · GHSA-38g6-x6jv-jwff

critical2022-05-24

CVE-2020-25816-Token leases could outlive their TTL in HashiCorp Vault

View chart →

hashicorp/vault · GHSA-57gg-cj55-q5g2

medium2022-05-24

CVE-2014-0083-net-ldap has weak salt when generating passwords

View chart →

ruby-ldap/ruby-net-ldap · GHSA-qwgm-mxm4-3q2c

high2022-05-24

CVE-2019-19729-bson-objectid contains Improper input validation

View chart →

cabinjs/bson-objectid · GHSA-p84x-5xx8-hff9

medium2022-05-24

CVE-2019-20366-XSS in Ignite Realtime Openfire via isTrustStore

View chart →

igniterealtime/openfire · GHSA-m6pr-xcrm-4qqp

critical2022-05-24

CVE-2019-19899-Pebble Templates Improper Input Validation vulnerability

View chart →

pebbletemplates/pebble · GHSA-83m8-7hj8-ff5w

high2022-05-24

CVE-2019-18817-Istio vulnerable to denial of service

View chart →

istio/istio · GHSA-vc7h-cmp3-4hw5

critical2022-05-24

CVE-2019-18658-Helm Unsafe Link Following

View chart →

helm/helm · GHSA-p5pc-m4q7-7qm9

medium2022-05-24

CVE-2014-3599-HornetQ REST vulnerable to Improper Restriction of XML External Entity Reference

View chart →

hornetq/hornetq · GHSA-xrh2-c3rm-35jr

high2022-05-24

CVE-2019-18835-Improper Verification of Cryptographic Signature in matrix-synapse

View chart →

matrix-org/synapse · GHSA-cppw-2mf8-qpm5

critical2022-05-24

CVE-2019-8149-Magento Broken authentication and session managememt

View chart →

magento/magento2 · GHSA-8mwx-wpp4-5xh4

high2022-05-24

CVE-2019-8154-Magento remote code execution vulnerability

View chart →

magento/magento2 · GHSA-4v2q-hjx3-c4vr

high2022-05-24

CVE-2019-17221-PhantomJS Arbitrary File Read

View chart →

medium/phantomjs · GHSA-x43g-gj9x-838x

critical2022-05-24

CVE-2019-17626-XML Injection in ReportLab

View chart →

mrbitbucket/reportlab-mirror · GHSA-qpg2-vx7j-3869

critical2022-05-24

CVE-2019-6446-Numpy Deserialization of Untrusted Data

View chart →

numpy/numpy · GHSA-9fq2-x9r6-wfmf

medium2022-05-24

CVE-2019-10215-Cross-site Scripting in Bootstrap-3-Typeahead

View chart →

bassjobsen/bootstrap-3-typeahead · GHSA-m2hm-hrr2-6p2q