Security advisories

medium2022-05-24

CVE-2019-16904-TeamPass Cross-site Scripting (XSS) vulnerability

View chart →

nilsteampassnet/teampass · GHSA-rpmr-fwh5-24fm

medium2022-05-24

CVE-2019-10426-Jenkins Gem Publisher Plugin stores credentials as plaintext

View chart →

jenkinsci/gem-publisher-plugin · GHSA-6pqm-pp65-mc26

medium2022-05-24

CVE-2019-10429-Jenkins GitLab Logo Plugin stores credentials unencrypted

View chart →

jenkinsci/gitlab-logo-plugin · GHSA-22rj-q66g-2jg3

critical2022-05-24

CVE-2019-7139-Magento 2 Community Edition SQLi Vulnerability

View chart →

magento/magento2 · GHSA-4j6w-9rf8-hg7r

critical2022-05-24

CVE-2019-16227-py-lmdb Invalid write operation

View chart →

jnwatson/py-lmdb · GHSA-pf3p-v9xp-mrvf

medium2022-05-24

CVE-2019-15489-laracom Cross-site Scripting

View chart →

jsdecena/laracom · GHSA-qc2p-6qrf-25j2

medium2022-05-24

CVE-2019-15484-Bolt Cross-site Scripting (XSS) via an image's alt or title field

View chart →

bolt/bolt · GHSA-fp8m-xw3f-6h7x

medium2022-05-24

CVE-2019-1010199-Cross site scripting attack in ServiceStack Framework

View chart →

servicestack/servicestack · GHSA-vcfc-9wcp-j623

medium2022-05-24

CVE-2019-12748-Typo3 Cross-Site Scripting in Link Handling

View chart →

typo3-cms/core · GHSA-r6fv-56gp-j3r4

high2022-05-24

CVE-2019-12747-TYPO3 Vulnerable to Insecure Deserialization

View chart →

typo3-cms/core · GHSA-86hp-xrhj-fhpq

high2022-05-24

CVE-2019-1052-Chakra Scripting Engine RCE via Out-of-bounds write

View chart →

chakra-core/chakracore · GHSA-v8jw-x9wq-hw4v

high2022-05-24

CVE-2019-1024-Chakra Scripting Engine RCE Vulnerability

View chart →

chakra-core/chakracore · GHSA-g8q3-rcf9-qx4q

critical2022-05-24

CVE-2019-10328-Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin

View chart →

jenkinsci/workflow-remote-loader-plugin · GHSA-v558-fhw2-v46w

high2022-05-24

CVE-2019-10329-Plaintext password storage in Jenkins InfluxDB Plugin

View chart →

jenkinsci/influxdb-plugin · GHSA-rv97-r8f7-8wmg

high2022-05-24

CVE-2019-10327-XML External Entity processing vulnerability in Pipeline Maven Integration Jenkins Plugin

View chart →

jenkinsci/pipeline-maven-plugin · GHSA-6755-jgp4-8q7h

high2022-05-24

CVE-2019-11832-TYPO3 Image Processing susceptible to Code Execution

View chart →

typo3/typo3 · GHSA-3w4h-r27h-4r2w

low2022-05-24

CVE-2019-11818-Alkacon OpenCMS XSS via New User module

View chart →

alkacon/opencms-core · GHSA-c8j6-gqq8-4prj

medium2022-05-24

CVE-2022-29185-Observable Timing Discrepancy in totp-rs

View chart →

constantoine/totp-rs · GHSA-8vxv-2g8p-2249

critical2022-05-24

CVE-2022-29180-Server-Side Request Forgery in charm

View chart →

charmbracelet/charm · GHSA-4wpp-w5r4-7v5v

high2022-05-24

CVE-2022-29173-Improper Validation of Integrity Check Value in go-tuf

View chart →

theupdateframework/go-tuf · GHSA-66x3-6cw3-v5gj