Security Advisories

critical2022-05-17

CVE-2022-30765-SQL injection in calibreweb

View chart

janeczku/calibre-web · GHSA-8ppf-x4gr-2x7g

high2022-05-17

CVE-2022-29623-Connect-Multiparty allows arbitrary file upload

View chart

expressjs/connect-multiparty · GHSA-w2xw-44r3-4v9g

medium2022-05-17

CVE-2022-1726-Cross-site Scripting in bootstrap-table

View chart

wenzhixin/bootstrap-table · GHSA-grw5-g9h2-wpg8

medium2022-05-17

CVE-2022-1553-Publify exposes article metadata

View chart

publify/publify · GHSA-5jm7-g527-m694

medium2022-05-17

CVE-2022-0578-Publify vulnerable to code injection

View chart

publify/publify · GHSA-w78q-4w34-jrjx

medium2022-05-17

CVE-2022-0574-Publify Incorrect Authorization

View chart

publify/publify · GHSA-79m3-q3wh-c3qm

medium2022-05-17

CVE-2022-30126-Regular expression denial of service in apache tika

View chart

apache/tika · GHSA-rpjm-422r-95mh

medium2022-05-17

CVE-2022-25169-Apache Tika vulnerable to uncontrolled memory consumption

View chart

apache/tika · GHSA-7qcq-xp2f-56f6

critical2022-05-17

CVE-2021-33318-Improper Input Validation in IpMatcher

View chart

jchristn/ipmatcher · GHSA-qj93-37f5-mr29

high2022-05-17

CVE-2021-23267-Crafter CMS Crafter Studio vulnerable to Improper Control of Dynamically-Managed Code Resources

View chart

craftercms/studio · GHSA-r6fx-55x3-f9x6

medium2022-05-17

CVE-2021-23265-Improper Privilege Management in craftercms

View chart

craftercms/craftercms · GHSA-fj9v-g8fw-vxmf

critical2022-05-16

CVE-2022-24817-Improper kubeconfig validation allows arbitrary code execution

View chart

fluxcd/flux2 · GHSA-vvmq-fwmg-2gjc

medium2022-05-14

CVE-2014-3146-lxml Cross-site Scripting Via Control Characters

View chart

lxml/lxml · GHSA-57qw-cc2g-pv5p

high2022-05-14

CVE-2014-3942-TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code

View chart

typo3/typo3 · GHSA-55g3-fjwm-w2c8

high2022-05-14

CVE-2017-17516-Reddit Terminal Viewer (RTV) vulnerable to argument injection attacks

View chart

michael-lazar/rtv · GHSA-336h-q7mh-8vf8

high2022-05-14

CVE-2014-3530-XML External Entity Reference in org.picketlink:picketlink-common

View chart

picketlink/picketlink · GHSA-2c9q-qwrc-f486

medium2022-05-14

CVE-2015-1856-OpenStack Swift Unauthorized delete of versioned Swift object

View chart

openstack/swift · GHSA-cc77-5vw4-7pwg

medium2022-05-14

CVE-2015-5223-OpenStack Object Storage (Swift) Sensitive Data Exposure

View chart

openstack/swift · GHSA-q45h-chc8-hvp6

critical2022-05-14

CVE-2016-0788-Jenkins allows Execution of Code by Opening a JRMP Listener

View chart

jenkinsci/jenkins · GHSA-j7q5-h445-f7pc

medium2022-05-14

CVE-2016-0789-Jenkins has CRLF Injection Vulnerability in the CLI

View chart

jenkinsci/jenkins · GHSA-8p3c-m625-wh83