Security advisories

critical2022-04-08

CVE-2022-26612-Path traversal in Hadoop

View chart →

apache/hadoop · GHSA-gx2c-fvhc-ph4j

medium2022-04-07

CVE-2021-43177-Improper one time password handling in devise-two-factor

View chart →

tinfoil/devise-two-factor · GHSA-jm35-h8q2-73mp

high2022-04-07

CVE-2022-24815-SQL Injection when creating an application with Reactive SQL backend

View chart →

jhipster/generator-jhipster · GHSA-qjmq-8hjr-qcv6

high2022-04-07

CVE-2021-43138-Prototype Pollution in async

View chart →

caolan/async · GHSA-fwr7-v2mv-hh25

high2022-04-06

CVE-2021-43008-Files or Directories Accessible to External Parties in Adminer

View chart →

vrana/adminer · GHSA-rxfq-3vpc-vv72

high2022-04-06

CVE-2022-1213-Server side request forgery in LiveHelperChat

View chart →

livehelperchat/livehelperchat · GHSA-hhr9-7xvh-8xgc

high2022-04-06

CVE-2022-1235-Weak password hash in LiveHelperChat

View chart →

livehelperchat/livehelperchat · GHSA-vx8v-g3p3-88vg

high2022-04-06

CVE-2022-1243-Incorrect protocol extraction via \r, \n and \t characters

View chart →

medialize/uri.js · GHSA-3vjf-82ff-p4r3

high2022-04-06

CVE-2021-27116-Privilege escalation in beego

View chart →

beego/beego · GHSA-ffjp-66mx-3qpj

high2022-04-06

CVE-2022-26986-SQL injection in ImpressCMS

View chart →

impresscms/impresscms · GHSA-f99r-jjgr-f373

high2022-04-06

CVE-2021-27117-Privilege escalation in beego

View chart →

beego/beego · GHSA-2v6v-q994-xvxx

high2022-04-06

CVE-2021-30080-Access control bypass in Beego

View chart →

beego/beego · GHSA-28r6-jm5h-mrgg

high2022-04-06

CVE-2022-0602-Cross-site Scripting in TastyIgniter

View chart →

tastyigniter/tastyigniter · GHSA-cjw5-f2x5-r4q5

medium2022-04-06

CVE-2020-28847-Cross site scripting in valine

View chart →

xcss/valine · GHSA-6xvq-2gj8-4276

medium2022-04-06

CVE-2022-27463-Open redirect in wwbn/avideo

View chart →

wwbn/avideo · GHSA-34hv-f45p-4qfq

high2022-04-06

CVE-2022-23974-Logic error in Apache Pinot

View chart →

apache/pinot · GHSA-29f8-q7mf-7cqj

low2022-04-05

XSS Injection Vulnerability

View chart →

craftcms/cms · GHSA-wf98-vxv9-jqfv

critical2022-04-05

CVE-2022-26969-Insecure default value for CORS configuration

View chart →

directus/directus · GHSA-g27j-74fp-xfpr

high2022-04-05

CVE-2022-24814-Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in directus

View chart →

directus/directus · GHSA-xmjj-3c76-5w84

high2022-04-05

Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown

View chart →

pmmp/bedrockprotocol · GHSA-5jfw-35xp-5m42