Security advisories

medium2022-01-21

CVE-2022-21704-Incorrect Default Permissions in log4js

View chart →

log4js-node/log4js-node · GHSA-82v2-mx6x-wq7q

medium2022-01-21

CVE-2022-0266-Authorization Bypass Through User-Controlled Key in LiveHelperChat

View chart →

livehelperchat/livehelperchat · GHSA-c7fm-jx59-wjf6

medium2022-01-21

Insufficient Session Expiration in Pterodactyl API

View chart →

pterodactyl/panel · GHSA-7v3x-h7r2-34jv

medium2022-01-21

Invalid URL generation in bitlyshortener

View chart →

impredicative/bitlyshortener · GHSA-rcrv-228c-gprj

medium2022-01-21

CVE-2022-0219-Improper Restriction of XML External Entity Reference in skylot/jadx

View chart →

skylot/jadx · GHSA-r8j4-96mx-rjcc

medium2022-01-21

CVE-2022-0285-Cross-site Scripting in pimcore

View chart →

pimcore/pimcore · GHSA-pm3v-qxf6-fgxv

medium2022-01-21

CVE-2022-0278-Cross-site Scripting in microweber

View chart →

microweber/microweber · GHSA-m8rp-q82r-c5mf

high2022-01-21

CVE-2022-0281-Exposure of Sensitive Information to an Unauthorized Actor in microweber

View chart →

microweber/microweber · GHSA-7wv8-g97r-432h

medium2022-01-21

CVE-2022-0277-Microweber Incorrect Permission Assignment for Critical Resource vulnerability

View chart →

microweber/microweber · GHSA-vcgf-vmpc-ph79

high2022-01-21

CVE-2022-0282-Code Injection in microweber

View chart →

microweber/microweber · GHSA-p5hj-xxfr-pwc3

critical2022-01-16

CVE-2021-24044-Access of Resource Using Incompatible Type in Hermes

View chart →

facebook/hermes · GHSA-7mhc-prgv-r3q4

medium2022-01-14

Improper Privilege Management in shelljs

View chart →

shelljs/shelljs · GHSA-64g7-mvw6-v9qj

high2022-01-14

CVE-2021-32650-october/system arbitrary code execution

View chart →

octobercms/october · GHSA-5hfj-r725-wpc4

high2022-01-14

CVE-2021-32649-October/System authenticated file write leads to remote code execution

View chart →

octobercms/october · GHSA-wv23-pfj7-2mjj

medium2022-01-14

CVE-2022-0198-XML External Entity Reference in edu.stanford.nlp:stanford-corenlp

View chart →

stanfordnlp/corenlp · GHSA-mh83-jcw5-rjh8

high2022-01-14

CVE-2022-21681-Inefficient Regular Expression Complexity in marked

View chart →

markedjs/marked · GHSA-5v2h-r2cx-5xgj

high2022-01-14

CVE-2022-21680-Inefficient Regular Expression Complexity in marked

View chart →

markedjs/marked · GHSA-rrrm-qjm4-v8hf

medium2022-01-14

CVE-2022-21685-Integer underflow in Frontier

View chart →

paritytech/frontier · GHSA-cjg2-2fjg-fph4

high2022-01-13

Unchecked validity of Facing values in PlayerActionPacket

View chart →

pmmp/pocketmine-mp · GHSA-xh99-hw7h-wf63

medium2022-01-13

CVE-2021-44649-Cross-site Scripting in django-cms

View chart →

divio/django-cms · GHSA-hx7c-qpfq-xcrp