Security advisories

medium2022-05-24

CVE-2021-39864-Magento Open Source allows Cross-Site Request Forgery (CSRF)

View chart →

magento/magento2 · GHSA-94wq-87g6-8h77

critical2022-05-24

CVE-2021-42325-Froxlor SQL injection vulnerability

View chart →

froxlor/froxlor · GHSA-6fvw-x6gw-4wv8

medium2022-05-24

CVE-2021-21684-Stored XSS vulnerability in Jenkins Git Plugin

View chart →

jenkinsci/git-plugin · GHSA-gghc-g8cj-4vfv

medium2022-05-24

CVE-2021-21683-Path traversal vulnerability on Windows in Jenkins

View chart →

jenkinsci/jenkins · GHSA-4pw5-r58h-fv24

medium2022-05-24

CVE-2021-39880-apollo_upload_server has Denial of Service vulnerability

View chart →

jetruby/apollo_upload_server-ruby · GHSA-w6pv-c757-6rgr

medium2022-05-24

CVE-2021-31604-furlongm openvpn-monitor allows CSRF to disconnect an arbitrary client

View chart →

furlongm/openvpn-monitor · GHSA-vw35-c8hf-fwmq

high2022-05-24

CVE-2021-31606-furlongm openvpn-monitor allows Authorization Bypass to disconnect arbitrary clients

View chart →

furlongm/openvpn-monitor · GHSA-5w5c-3g26-8mmc

high2022-05-24

CVE-2021-31605-furlongm openvpn-monitor command injection

View chart →

furlongm/openvpn-monitor · GHSA-4258-vcjw-wwxx

high2022-05-24

CVE-2021-32297-LIEF heap-buffer-overflow

View chart →

lief-project/lief · GHSA-22x7-vwh9-5w4g

critical2022-05-24

CVE-2021-38540-Missing Authentication for Critical Function in Apache Airflow

View chart →

apache/airflow · GHSA-h88f-r7cw-8fv3

high2022-05-24

CVE-2021-22004-Improper Authentication in SaltStack Salt

View chart →

saltstack/salt · GHSA-xf37-qcvf-7m57

low2022-05-24

CVE-2021-28566-Magento Information Disclosure vulnerability

View chart →

magento/magento2 · GHSA-w942-fw92-mqm2

medium2022-05-24

CVE-2021-28567-Magento Improper Authorization vulnerability in the customers module

View chart →

magento/magento2 · GHSA-cc3w-r3w8-hfh7

high2022-05-24

CVE-2021-40797-OpenStack Neutron Denial of Service vulnerability

View chart →

openstack/neutron · GHSA-cpx3-696p-3cw9

critical2022-05-24

CVE-2021-40494-AdaptiveScale LXDUI Hardcoded JWT Secret Key

View chart →

adaptivescale/lxdui · GHSA-p4xh-4869-8vrg

high2022-05-24

CVE-2021-36020-Magento XML Injection vulnerability in the 'City' field

View chart →

magento/magento2 · GHSA-xvpx-6hh8-7h72

high2022-05-24

CVE-2021-36022-Magento XML Injection vulnerability in the Widgets Update Layout

View chart →

magento/magento2 · GHSA-3x9x-vhqj-cv27

medium2022-05-24

CVE-2021-36012-Magento affected by a business logic error in the placeOrder graphql mutation

View chart →

magento/magento2 · GHSA-3f97-7pgv-gmgr

high2022-05-24

CVE-2021-36030-Magento allows attackers to alter the price of items

View chart →

magento/magento2 · GHSA-rhff-65hp-55rw

high2022-05-24

CVE-2021-36024-Magento is affected by an os command injection via the Data collection endpoint

View chart →

magento/magento2 · GHSA-qmq6-jpvg-j547