Security Advisories | GitStock

medium2022-05-24

CVE-2022-29172-Cross-site Scripting in Auth0 Lock

auth0/lock · GHSA-7ww6-75fj-jcj7

medium2022-05-24

CVE-2022-1464-Cross-site Scripting in Gogs

gogs/gogs · GHSA-ff28-f46g-r9g8

medium2022-05-24

CVE-2021-20842-EC-CUBE Cross-site request forgery (CSRF) vulnerability

ec-cube/ec-cube · GHSA-m9hv-qmqh-33qh

medium2022-05-24

CVE-2021-43560-Moodle Insecure direct object reference (IDOR) in a calendar web service

moodle/moodle · GHSA-g39c-mccf-rxjv

high2022-05-24

CVE-2021-44144-Asterix Heap-based Buffer Overflow

croatiacontrolltd/asterix · GHSA-6mmf-v5q7-vw2w

high2022-05-24

CVE-2021-42250-Improper Encoding or Escaping of Output in Apache Superset

apache/superset · GHSA-5fp8-c45m-256p

medium2022-05-24

CVE-2021-43576-XXE vulnerability in Jenkins pom2config Plugin

jenkinsci/pom2config-plugin · GHSA-ppv9-v43c-xqpp

medium2022-05-24

CVE-2021-21700-Stored XSS vulnerability in Jenkins Scriptler Plugin

jenkinsci/scriptler-plugin · GHSA-f9gf-2q87-5m44

medium2022-05-24

CVE-2021-21699-Stored XSS vulnerability in Jenkins Active Choices Plugin

jenkinsci/active-choices-plugin · GHSA-rp4x-h577-chvq

high2022-05-24

CVE-2021-43577-XXE vulnerability in Jenkins OWASP Dependency-Check Plugin

jenkinsci/dependency-check-plugin · GHSA-mj5v-ggjc-48p5

medium2022-05-24

CVE-2021-21701-XXE vulnerability in Jenkins Performance Plugin

jenkinsci/performance-plugin · GHSA-hr8p-76q8-fxwq

high2022-05-24

CVE-2021-43578-Agent-to-controller security bypass in Jenkins Squash TM Publisher (Squash4Jenkins) Plugin allows writing arbitrary files

jenkinsci/squashtm-publisher-plugin · GHSA-h648-gj34-5x4r

high2022-05-24

CVE-2021-41972-Apache Superset allowed for database connections password leak for authenticated users

apache/superset · GHSA-42q4-9xf9-f67x

critical2022-05-24

CVE-2021-33816-Dolibarr remote PHP code execution

dolibarr/dolibarr · GHSA-vxr9-p2xw-m8cf

critical2022-05-24

CVE-2021-43350-Apache Traffic Control Traffic Ops Vulnerable to LDAP Injection

apache/trafficcontrol · GHSA-mg2c-rc36-p594

critical2022-05-24

CVE-2021-43568-ecdsa-elixir fails to check signatures, vulnerable to message forging

starkbank/ecdsa-elixir · GHSA-xx36-6rv4-gj8r

critical2022-05-24

CVE-2021-21686-Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins

jenkinsci/jenkins · GHSA-4g38-hrm4-rg94

critical2022-05-24

CVE-2021-21688-Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins

jenkinsci/jenkins · GHSA-m9hr-259f-2v23

critical2022-05-24

CVE-2021-21689-Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins

jenkinsci/jenkins · GHSA-j3cq-h6vh-gx7f

critical2022-05-24

CVE-2021-21693-Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins

jenkinsci/jenkins · GHSA-929w-q433-4h9x