Security advisories

high2022-05-24

CVE-2020-10738-Moodle vulnerable to RCE

View chart →

moodle/moodle · GHSA-vr6v-g96p-cjc3

medium2022-05-24

CVE-2020-13239-Dolibarr Stored Cross-site Scripting via file upload

View chart →

dolibarr/dolibarr · GHSA-fvf9-2hjp-w936

high2022-05-24

CVE-2020-13241-Microweber allows Unrestricted File Upload

View chart →

microweber/microweber · GHSA-89fp-j8v7-p82h

critical2022-05-24

CVE-2020-13226-WSO2 API Manager vulnerable to SSRF

View chart →

wso2/product-apim · GHSA-jfgp-q2hg-w285

medium2022-05-24

CVE-2020-13240-Dolibarr Stored Cross-site Scripting

View chart →

dolibarr/dolibarr · GHSA-f848-r5g6-6gpf

critical2022-05-24

CVE-2020-13092-scikit-learn Deserialization of Untrusted Data

View chart →

scikit-learn/scikit-learn · GHSA-jjw5-xxj6-pcv5

critical2022-05-24

CVE-2020-12889-Maltego incorrectly shares a MISP connection across users in a remote-transform use case

View chart →

misp/misp-maltego · GHSA-fj35-m94r-9h4c

medium2022-05-24

CVE-2019-20389-Subrion CMS XSS

View chart →

intelliants/subrion · GHSA-xvgx-668j-f67p

high2022-05-24

CVE-2019-20390-Subrion CMS Cross-Site Request Forgery (CSRF) vulnerability

View chart →

intelliants/subrion · GHSA-c4wx-3x5q-hf4w

medium2022-05-24

CVE-2020-1724-Keycloak Insufficient Session Expiry

View chart →

keycloak/keycloak · GHSA-8xj2-47xw-q78c

high2022-05-24

CVE-2020-12790-SEOmatic for CraftCMS allows Server-Side Template Injection

View chart →

nystudio107/craft-seomatic · GHSA-23q7-59jj-2pj4

high2022-05-24

CVE-2020-12760-OpenNMS Horizon RCE via Unsafe Deserialization

View chart →

opennms/opennms · GHSA-853f-x27w-8r74

medium2022-05-24

CVE-2020-12692-OpenStack Keystone does not check signature TTL of the EC2 credential auth method

View chart →

openstack/keystone · GHSA-rqw2-hhrf-7936

high2022-05-24

CVE-2020-12691-OpenStack Keystone V3 /credentials endpoint policy logic allows to change credentials owner or target project ID

View chart →

openstack/keystone · GHSA-4427-7f3w-mqv6

high2022-05-24

CVE-2020-12689-OpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped context

View chart →

openstack/keystone · GHSA-chgw-36xv-47cw

high2022-05-24

CVE-2020-12669-Incorrect Authorization in Dolibarr

View chart →

dolibarr/dolibarr · GHSA-rg8m-84jf-9367

medium2022-05-24

CVE-2020-2187-Lack of SSL/TLS certificate and hostname validation in Amazon EC2 Plugin

View chart →

jenkinsci/ec2-plugin · GHSA-c89c-pvm7-33wj

low2022-05-24

CVE-2020-2186-CSRF vulnerability in Amazon EC2 Plugin

View chart →

jenkinsci/ec2-plugin · GHSA-w6hw-57jq-h7f5

medium2022-05-24

CVE-2020-2183-Improper permission checks in Jenkins Copy Artifact Plugin

View chart →

jenkinsci/copyartifact-plugin · GHSA-vv89-xggx-qqh2

medium2022-05-24

CVE-2020-2188-Users with Overall/Read access can enumerate credentials IDs in Amazon EC2 Plugin

View chart →

jenkinsci/ec2-plugin · GHSA-rmp9-mc8w-mqf3