Security advisories

high2022-05-14

CVE-2017-15696-Apache Geode configuration request authorization vulnerability

View chart →

apache/geode · GHSA-g569-49wg-jx5f

medium2022-05-14

CVE-2017-6929-Drupal cross site scripting vulnerability

View chart →

drupal/core · GHSA-5vpr-v24w-mmjj

medium2022-05-14

CVE-2017-6932-Drupal external link injection vulnerability

View chart →

drupal/core · GHSA-wm86-w3cf-h6vm

medium2022-05-14

CVE-2017-6927-Drupal cross-site scripting vulnerability

View chart →

drupal/core · GHSA-585j-5449-mf5m

high2022-05-14

CVE-2017-6926-Drupal Comment reply form allows access to restricted content

View chart →

drupal/core · GHSA-2p28-5mvp-2j2r

high2022-05-14

CVE-2018-7490-uWSGI Directory Traversal vulnerability

View chart →

unbit/uwsgi · GHSA-h2vm-c85r-5vh5

high2022-05-14

CVE-2018-1316-Apache ODE Path Traversal vulnerability

View chart →

apache/ode · GHSA-jf7g-5q92-4hp2

medium2022-05-14

CVE-2017-1000425-Liferay Portal XSS vulnerability via movie parameter in the /html/portal/flash.jsp page

View chart →

liferay/liferay-portal · GHSA-2ggw-8gmc-r2gq

critical2022-05-14

CVE-2018-1000089-django-anymail Includes Sensitive Information in Log Files

View chart →

anymail/django-anymail · GHSA-qh9x-mc42-vg4g

medium2022-05-14

CVE-2018-5233-Grav CMS Cross-site scripting (XSS) vulnerability

View chart →

getgrav/grav · GHSA-977g-93f5-rqjx

critical2022-05-14

CVE-2018-8073-yii2-redis Potential Remote code execution

View chart →

yiisoft/yii2-redis · GHSA-4hx3-m8w5-g5qh

high2022-05-14

CVE-2013-1768-Deserialization of Untrusted Data in Apache OpenJPA

View chart →

apache/openjpa · GHSA-j65f-mvgw-prp2

high2022-05-14

CVE-2018-9108-QuickAppsCMS Cross-Site Request Forgery (CSRF)

View chart →

quickapps/cms · GHSA-62g2-8p9f-ghjp

critical2022-05-14

CVE-2018-9057- HashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG

View chart →

hashicorp/terraform-provider-aws · GHSA-r48h-jr2j-9g78

medium2022-05-14

CVE-2018-7035-Gleez CMS Stored XSS

View chart →

gleez/cms · GHSA-m2r2-qc49-gqw4

high2022-05-14

CVE-2016-0793-WildFly has incomplete blacklist vulnerability

View chart →

wildfly/wildfly · GHSA-9q87-22gr-r8qf

medium2022-05-14

CVE-2012-5604-ldap_fluff authentication bypass

View chart →

theforeman/ldap_fluff · GHSA-9whh-582r-589h

medium2022-05-14

CVE-2018-1000144-Jenkins Cucumber Living Documentation Plugin Cross-site Scripting vulnerability

View chart →

jenkinsci/cucumber-living-documentation-plugin · GHSA-q7jx-r75r-hgj2

medium2022-05-14

CVE-2018-1000151-Jenkins vSphere Plugin disables SSL/TLS certificate validation by default

View chart →

jenkinsci/vsphere-cloud-plugin · GHSA-vq7p-f4fv-rr5x

low2022-05-14

CVE-2018-1000150-Jenkins Reverse Proxy Auth Plugin allows attackers with local file system access to obtain a list of authorities for logged in users

View chart →

jenkinsci/reverse-proxy-auth-plugin · GHSA-m9j2-grqf-fg26