Security advisories

critical2022-05-24

CVE-2020-23653-ThinkAdmin insecure unserialize vulnerability

View chart →

zoujingli/thinkadmin · GHSA-4vp2-mj4m-69m4

high2022-05-24

CVE-2020-35459-ClusterLabs crmsh vulnerable to shell code injection

View chart →

clusterlabs/crmsh · GHSA-99xx-83jm-h24m

medium2022-05-24

CVE-2020-25476-Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via User Name Parameter

View chart →

liferay/liferay-portal · GHSA-pvpg-9553-f979

medium2022-05-24

CVE-2020-5809-Umbraco CMS vulnerable to stored XSS

View chart →

umbraco/umbraco-cms · GHSA-95qr-67rx-9pgh

medium2022-05-24

CVE-2020-35905-MutexGuard::map can cause a data race in safe code

View chart →

rust-lang/futures-rs · GHSA-rh4w-94hh-9943

high2022-05-24

CVE-2020-35906-futures_task::waker may cause a use-after-free if used on a type that isn't 'static

View chart →

rust-lang/futures-rs · GHSA-r93v-9p5q-vhpf

medium2022-05-24

CVE-2020-35907-futures_task::noop_waker_ref can segfault due to dereferencing a NULL pointer

View chart →

rust-lang/futures-rs · GHSA-p9m5-3hj7-cp5r

medium2022-05-24

CVE-2020-35919-`net2` invalidly assumes the memory layout of std::net::SocketAddr

View chart →

deprecrated/net2-rs · GHSA-c79c-gwph-gqfm

medium2022-05-24

CVE-2020-35908-Improper `Sync` implementation on `FuturesUnordered` in futures-utils can cause data corruption

View chart →

rust-lang/futures-rs · GHSA-5r9g-j7jj-hw6c

high2022-05-24

CVE-2020-35849-MantisBT Incorrect Authorization for bug_revision_view_page.php check

View chart →

mantisbt/mantisbt · GHSA-7j8m-fm49-xgmg

medium2022-05-24

CVE-2020-28413-MantisBT SQL Injection via mc_project_get_users function

View chart →

mantisbt/mantisbt · GHSA-49w9-82cj-xr48

medium2022-05-24

CVE-2020-29245-dhowden tag panic due to out-of-bounds read

View chart →

dhowden/tag · GHSA-wg79-2cgp-qrjm

medium2022-05-24

CVE-2020-29244-dhowden tag panic due to out-of-bounds read

View chart →

dhowden/tag · GHSA-27mh-3343-6hg5

medium2022-05-24

CVE-2020-29156-WooCommerce Incorrect Authorization

View chart →

woocommerce/woocommerce · GHSA-wwh8-v3j3-gxfw

medium2022-05-24

CVE-2020-29243-dhowden tag panic due to out-of-bounds read

View chart →

dhowden/tag · GHSA-9wm7-rc47-g56m

critical2022-05-24

CVE-2020-28276-Prototype pollution vulnerability in 'deep-set'

View chart →

klaemo/deep-set · GHSA-wgxm-rg53-h2c6

high2022-05-24

CVE-2020-35711-Dangling reference in `access::Map` with Constant

View chart →

vorner/arc-swap · GHSA-9pqx-g3jh-qpqq

medium2022-05-24

CVE-2020-35669-http before 0.13.3 vulnerable to header injection

View chart →

dart-lang/http · GHSA-4rgh-jx4f-qfcq

high2022-05-24

CVE-2020-35136-Dolibarr authenticated Remote Code Execution

View chart →

dolibarr/dolibarr · GHSA-7x8g-h246-gvx3

critical2022-05-24

CVE-2020-22083-jsonpickle unsafe deserialization

View chart →

jsonpickle/jsonpickle · GHSA-j66q-qmrc-89rx