Security advisories

medium2022-05-14

CVE-2016-1494-Python RSA allows attackers to spoof signatures

View chart →

sybrenstuvel/python-rsa · GHSA-8rjr-6qq5-pj9p

high2022-05-14

CVE-2017-15089-Deserialization of Untrusted Data in Infinispan

View chart →

infinispan/infinispan · GHSA-46r5-59fg-2fjc

high2022-05-14

CVE-2017-7675-Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

View chart →

apache/tomcat · GHSA-68g5-8q7f-m384

high2022-05-14

CVE-2014-4326-Elasticsearch Logstash allows remote attackers to execute arbitrary commands

View chart →

elastic/logstash · GHSA-8qhq-rq4j-8prj

high2022-05-14

CVE-2016-1000221-Logstash Logs Sensitive Information

View chart →

elastic/logstash · GHSA-vcmm-ppqx-95ch

critical2022-05-14

CVE-2018-1000120-curl FTP path confusion leads to NIL byte out of bounds write

View chart →

coapp-packages/curl · GHSA-674j-7m97-j2p9

medium2022-05-14

CVE-2018-11688-Ignite Realtime Openfire vulnerable to cross-site scripting

View chart →

igniterealtime/openfire · GHSA-jphj-5g3m-w7x6

critical2022-05-14

CVE-2016-3953-web2py remote code execution via hardcoded encryption key in session.connect function

View chart →

web2py/web2py · GHSA-q2rq-qgcf-m22w

medium2022-05-14

CVE-2016-3954-web2py exposure of sensitive information

View chart →

web2py/web2py · GHSA-jr83-vr4j-mp6p

critical2022-05-14

CVE-2016-10321-web2py is vulnerable to password brute-force attack

View chart →

web2py/web2py · GHSA-gv85-wgxc-vc56

critical2022-05-14

CVE-2016-7954-Bundler allows attacker to inject arbitrary code via secondary Gem source

View chart →

rubygems/bundler · GHSA-jvgm-pfqv-887x

medium2022-05-14

CVE-2011-3871-Puppet uses predictable filenames, allowing arbitrary file overwrite

View chart →

puppetlabs/puppet · GHSA-mpmx-gm5v-q789

medium2022-05-14

CVE-2011-0528-Puppet does not properly restrict access to node resources

View chart →

puppetlabs/puppet · GHSA-9pvx-fwwh-w289

medium2022-05-14

CVE-2011-3870-Puppet allows local users to modify the permissions of arbitrary files

View chart →

puppetlabs/puppet · GHSA-qh3g-27jf-3j54

medium2022-05-14

CVE-2011-3869-Puppet arbitrary file overwrite

View chart →

puppetlabs/puppet · GHSA-8c56-v25w-f89c

low2022-05-14

CVE-2015-1426-Puppet Labs Facter allows local users to obtain sensitive Amazon EC2 IAM instance metadata

View chart →

puppetlabs/facter · GHSA-j436-h7hm-rx46

low2022-05-14

CVE-2012-1987-Puppet Denial of Service and Arbitrary File Write

View chart →

puppetlabs/puppet · GHSA-v58w-6xc2-w799

medium2022-05-14

CVE-2012-1988-Puppet Arbitrary Command Execution

View chart →

puppetlabs/puppet · GHSA-6xxq-j39w-g3f6

high2022-05-14

CVE-2018-15133-Laravel Framework RCE Vulnerability

View chart →

laravel/framework · GHSA-qvqm-h22r-4cp9

medium2022-05-14

CVE-2014-3578-Improper Limitation of a Pathname to a Restricted Directory in Spring Framework

View chart →

spring-projects/spring-framework · GHSA-rhcg-rwhx-qj3j