Security advisories

high2022-05-24

CVE-2021-40085-OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value

View chart →

openstack/neutron · GHSA-fh73-gjvg-349c

medium2022-05-24

CVE-2020-19002-Mezzanine Cross Site Scripting (XSS) vulnerability

View chart →

stephenmcd/mezzanine · GHSA-fpv7-hx6r-9vcx

high2022-05-24

CVE-2021-38598-OpenStack Neutron vulnerable to hardware address impersonation

View chart →

openstack/neutron · GHSA-hvm4-mc7m-22w4

high2022-05-24

CVE-2021-28490-Cross-Site Request Forgery in OWASP CSRFGuard

View chart →

owasp/www-project-csrfguard · GHSA-jx66-5ww9-m6q4

medium2022-05-24

CVE-2020-18699-Lin-CMS-Flask Cross Site Scripting (XSS) vulnerability

View chart →

talelin/lin-cms-flask · GHSA-rvf8-c35m-8289

critical2022-05-24

CVE-2020-18698-Lin-CMS-Flask vulnerable to Improper Authentication

View chart →

talelin/lin-cms-flask · GHSA-h6r2-pgvx-683c

critical2022-05-24

CVE-2020-28088-Jeecg-Boot CMS arbitrary file upload vulnerability

View chart →

jeecgboot/jeecg-boot · GHSA-jf7x-57g8-9hm5

critical2022-05-24

CVE-2021-38148-Obsidian does not require user confirmation for non-http/https URLs.

View chart →

obsidianmd/obsidian-api · GHSA-45mx-g85m-wwm3

medium2022-05-24

CVE-2020-22330-Subrion Cross-Site Scripting (XSS) vulnerability

View chart →

intelliants/subrion · GHSA-jj94-j4r3-5gr4

high2022-05-24

CVE-2021-38155-OpenStack Keystone allows information disclosure during account locking

View chart →

openstack/keystone · GHSA-4225-97pr-rr52

high2022-05-24

CVE-2021-33335-Liferay Portal and Liferay DXP Has Company Administrator Accounts Vulnerable to Takeovers

View chart →

liferay/liferay-portal · GHSA-5gh9-g62h-f35m

medium2022-05-24

CVE-2021-33336-Liferay Portal Journal Module and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)

View chart →

liferay/liferay-portal · GHSA-fvg6-9r88-7w85

medium2022-05-24

CVE-2021-33339-Liferay Portal Fragment Module and Liferay DXP Vulnerable to Cross-Site Scripting

View chart →

liferay/liferay-portal · GHSA-7pxh-q6jw-6xj8

high2022-05-24

CVE-2021-33338-Liferay Portal Layout Module and Liferay DXP Exposes the Cross-Site Request Forgery (CSRF) Token in URLs

View chart →

liferay/liferay-portal · GHSA-4frg-rpx6-96qh

medium2022-05-24

CVE-2021-33337-Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Document Library module

View chart →

liferay/liferay-portal · GHSA-v88g-7fx4-9q7f

medium2022-05-24

CVE-2021-35463-Liferay Portal cross-site scripting (XSS) vulnerability in the Frontend Taglib module

View chart →

liferay/liferay-portal · GHSA-9h7f-5hc8-cj5f

medium2022-05-24

CVE-2021-37916-Joplin vulnerable to Cross-site Scripting in notes

View chart →

laurent22/joplin · GHSA-mrmf-755g-w2vw

high2022-05-24

CVE-2021-30560-Nokogiri has vulnerable dependencies on libxml2 and libxslt

View chart →

sparklemotion/nokogiri · GHSA-59gp-qqm7-cw4j

medium2022-05-24

CVE-2021-33320-Liferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rate

View chart →

liferay/liferay-portal · GHSA-wg4x-hf94-fj5v

medium2022-05-24

CVE-2021-33328-Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Edit Vocabulary Page

View chart →

liferay/liferay-portal · GHSA-vpvm-3wfw-5f5c