Security advisories

medium2022-05-24

CVE-2016-11072-Mattermost Server's Session ID and Session Token are potentially compromised

View chart →

mattermost/mattermost · GHSA-43m6-wvc8-2m7j

high2022-05-24

CVE-2016-11076-Mattermost Server does not check if cookies are used over SSL

View chart →

mattermost/mattermost · GHSA-379p-37xc-q963

medium2022-05-24

CVE-2016-11063-Mattermost Server vulnerable to Cross-site Scripting through file preview feature

View chart →

mattermost/mattermost · GHSA-cffj-7w5c-jqjh

high2022-05-24

CVE-2020-14443-Dolibarr SQL injection vulnerability in accountancy/customer/card.php

View chart →

dolibarr/dolibarr · GHSA-8v7v-6mmm-xjxm

medium2022-05-24

CVE-2020-7932-OMERO-web Sensitive Data Exposure

View chart →

ome/omero-web · GHSA-vwxv-frj6-fhc9

high2022-05-24

CVE-2020-12827-MJML vulnerable to path traversal

View chart →

mjmlio/mjml · GHSA-4hch-r9xf-6vfr

medium2022-05-24

CVE-2020-14146-KumbiaPHP Cross-site Scripting

View chart →

kumbiaphp/kumbiapp · GHSA-x6gq-vr59-4q5q

high2022-05-24

CVE-2018-16848-OpenStack Mistral DoS

View chart →

openstack/mistral · GHSA-443j-6p7g-6v4w

high2022-05-24

CVE-2020-5411-Deserialization of Untrusted Data in Spring Batch

View chart →

spring-projects/spring-batch · GHSA-4ph4-q9r5-6wm6

high2022-05-24

CVE-2020-13445-Liferay Portal and Liferay DXP Vulnerable to Arbitrary Code Execution

View chart →

liferay/liferay-portal · GHSA-v377-8f8f-532h

medium2022-05-24

CVE-2020-13444-Liferay Portal and Liferay DXP Fails to Sanitize API Data

View chart →

liferay/liferay-portal · GHSA-8j5r-9687-88w5

high2022-05-24

CVE-2020-1073-ChakraCore RCE Vulnerability

View chart →

chakra-core/chakracore · GHSA-g3m9-qrfj-xw4g

medium2022-05-24

CVE-2020-13980-OpenCart Cross-site Scripting

View chart →

myopencart/ocstore · GHSA-p9qw-fh38-x37f

medium2022-05-24

CVE-2020-13869-Comments plugin stored Cross-site Scripting via a guest name

View chart →

verbb/comments · GHSA-jhhf-c849-3rh2

medium2022-05-24

CVE-2020-13870-Comments plugin stored Cross-site Scripting (XSS) via an asset volume name

View chart →

verbb/comments · GHSA-69ww-wv3j-mhg4

medium2022-05-24

CVE-2020-13868-Comments plugin Cross-Site Request Forgery (CSRF)

View chart →

verbb/comments · GHSA-4r8c-pj7x-m5jx

medium2022-05-24

CVE-2020-2199-XSS vulnerability in Jenkins Subversion Partial Release Manager Plugin

View chart →

jenkinsci/svn-partial-release-mgr-plugin · GHSA-qmf3-w5jf-cv54

high2022-05-24

CVE-2020-2200-OS command injection vulnerability in Jenkins Play Framework Plugin

View chart →

jenkinsci/play-plugin · GHSA-h5mv-fv98-gqmq

medium2022-05-24

CVE-2020-2192-CSRF vulnerability in Jenkins Swarm Plugin

View chart →

jenkinsci/swarm-plugin · GHSA-c264-8834-ppj2

medium2022-05-24

CVE-2020-2193-Stored XSS vulnerability in Jenkins ECharts API Plugin

View chart →

jenkinsci/echarts-api-plugin · GHSA-x9rq-9h44-f84v