Security advisories

high2022-03-14

CVE-2022-24743-Insufficient Session Expiration in Sylius

View chart →

sylius/sylius · GHSA-mf3v-f2qq-pf9g

medium2022-03-14

CVE-2022-24742-Sensitive Information Exposure in Sylius

View chart →

sylius/sylius · GHSA-7563-75j9-6h5p

medium2022-03-14

CVE-2022-24740-Sudden swap of user auth tokens in Volto

View chart →

plone/volto · GHSA-cfhh-xgwq-5r67

medium2022-03-14

CVE-2022-24733-Improper Restriction of Rendered UI Layers or Frames in Sylius

View chart →

sylius/sylius · GHSA-4jp3-q2qm-9fmw

medium2022-03-13

CVE-2022-26533-Cross-site Scripting in Alist

View chart →

xhofe/alist · GHSA-jpj5-hg26-6jgc

medium2022-03-13

CVE-2022-0880-Cross-site Scripting in ShowDoc

View chart →

star7th/showdoc · GHSA-gq77-3r6x-383w

medium2022-03-13

CVE-2022-0929-Cross-site Scripting in microweber

View chart →

microweber/microweber · GHSA-5fxf-x22x-5q38

medium2022-03-13

CVE-2022-0926-Cross-site Scripting in microweber

View chart →

microweber/microweber · GHSA-3q55-66g3-p8xq

high2022-03-13

CVE-2022-0930-Cross-site Scripting in microweber

View chart →

microweber/microweber · GHSA-2cv6-6437-39p2

medium2022-03-12

CVE-2022-25506-SQL Injection in FreeTAKServer-UI

View chart →

freetakteam/ui · GHSA-jr2m-29wj-w9qc

high2022-03-12

CVE-2022-25508-Improper Authentication in FreeTAKServer

View chart →

freetakteam/freetakserver · GHSA-hggv-mcp4-vxc5

medium2022-03-12

CVE-2022-25507-Cross-site Scripting in FreeTAKServer-UI

View chart →

freetakteam/ui · GHSA-gjh6-wvhq-h4qx

high2022-03-12

CVE-2022-25510-Hard coded credentials in FreeTAKServer

View chart →

freetakteam/freetakserver · GHSA-f897-875p-23x7

high2022-03-12

CVE-2022-25512-Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI

View chart →

freetakteam/ui · GHSA-9988-f88m-mr42

medium2022-03-12

CVE-2022-25511-Path traversal in FreeTAKServer-UI

View chart →

freetakteam/ui · GHSA-7cr9-rmqr-fpqp

medium2022-03-12

CVE-2018-25031-Spoofing attack in swagger-ui

View chart →

swagger-api/swagger-ui · GHSA-cr3q-pqgq-m8c2

high2022-03-12

CVE-2022-0913-Integer Overflow or Wraparound in Microweber

View chart →

microweber/microweber · GHSA-c383-q5vf-hx55

medium2022-03-12

CVE-2021-46708-Spoofing attack in swagger-ui-dist

View chart →

swagger-api/swagger-ui · GHSA-6c9x-mj3g-h47x

high2022-03-12

CVE-2020-36518-Deeply nested json in jackson-databind

View chart →

fasterxml/jackson-databind · GHSA-57j2-w4cx-62h2

medium2022-03-12

CVE-2022-0912-Unrestricted Upload of File with Dangerous Type in microweber

View chart →

microweber/microweber · GHSA-6vx5-cg2p-7g5v