Security advisories

high2022-05-24

CVE-2020-5840-HashBrown CMS Directory Traversal

View chart →

hashbrowncms/hashbrown-cms · GHSA-q7hx-mrv5-6mrp

critical2022-05-24

CVE-2020-5311-Buffer Copy without Checking Size of Input in Pillow

View chart →

python-pillow/pillow · GHSA-r7rm-8j6h-r933

critical2022-05-24

CVE-2016-1000027-Pivotal Spring Framework contains unsafe Java deserialization methods

View chart →

spring-projects/spring-framework · GHSA-4wrc-f8pq-fpqp

medium2022-05-24

CVE-2019-9553-Bolt Cross-site Scripting via the slug, teaser or title parameters

View chart →

bolt/bolt · GHSA-2g23-qmmp-fvmr

critical2022-05-24

CVE-2019-10774-php-shellcommand command injection vulnerability

View chart →

mikehaertl/php-shellcommand · GHSA-c7fv-wv9f-cgjw

medium2022-05-24

CVE-2019-6035-Athenz vulnerable to Open Redirect

View chart →

athenz/athenz · GHSA-9hg5-7hwc-v434

medium2022-05-24

CVE-2016-1000229-Improper Neutralization of Input During Web Page Generation in swagger-ui

View chart →

swagger-api/swagger-ui · GHSA-h8wp-wgcq-qhrf

critical2022-05-24

CVE-2019-8849-SwiftNIO SSL arbitrary code execution vulnerability

View chart →

apple/swift-nio-ssl · GHSA-frg3-gpcx-968f

high2022-05-24

CVE-2019-19724-Singularity insecure permissions

View chart →

sylabs/singularity · GHSA-mj73-5x75-9phh

critical2022-05-24

CVE-2019-15598-Treekill Enables OS Command Injection

View chart →

pkrumins/node-tree-kill · GHSA-j7fq-p9q7-5wfv

medium2022-05-24

CVE-2019-19850-TYPO3 SQL Injection in low-level Query Generator

View chart →

typo3/typo3 · GHSA-59pj-7mjh-4465

high2022-05-24

CVE-2019-16550-Cross-site request forgery (CSRF) vulnerability in Jenkins Maven Release Plugin

View chart →

jenkinsci/m2release-plugin · GHSA-g2x8-xw86-vpq3

high2022-05-24

CVE-2019-5815-Nokogiri implementation of libxslt vulnerable to heap corruption

View chart →

sparklemotion/nokogiri · GHSA-vmfx-gcfq-wvm2

medium2022-05-24

CVE-2019-19709-Possible to circumvent title-blacklist

View chart →

wikimedia/mediawiki · GHSA-pjv5-vv93-p648

high2022-05-24

CVE-2019-19702-Modoboa is vulnerable to an XML External Entity Injection (XXE)

View chart →

modoboa/modoboa-dmarc · GHSA-vc42-mgr2-w34r

high2022-05-24

CVE-2019-19687-OpenStack Keystone Credential Leakage

View chart →

openstack/keystone · GHSA-2j23-fwqm-mgwr

critical2022-05-24

CVE-2019-19617-phpMyAdmin unsanitized Git information

View chart →

phpmyadmin/composer · GHSA-pgph-mc4p-f8c3

critical2022-05-24

CVE-2019-14910-Keycloak Authentication Error

View chart →

keycloak/keycloak · GHSA-jf86-9434-f8c2

high2022-05-24

CVE-2019-14909-Keycloak Authentication Error

View chart →

keycloak/keycloak · GHSA-fv4q-wm8c-wjg4

medium2022-05-24

CVE-2019-10195-FreeIPA logs passwords embedded in commands in calls using batch

View chart →

hatchetation/freeipa · GHSA-w4q7-f34x-vpgc