Security advisories

high2022-01-12

CVE-2021-45115-Denial-of-service in Django

View chart →

django/django · GHSA-53qw-q765-4fww

medium2022-01-11

CVE-2022-22821-Path Traversal in nemo-toolkit

View chart →

nvidia/nemo · GHSA-9hg3-hmmf-c3gr

high2022-01-10

Infinite loop causing Denial of Service in colors

View chart →

marak/colors.js · GHSA-5rqg-jm4f-cqx7

medium2022-01-08

CVE-2021-36739-Cross-site Scripting in Apache Pluto

View chart →

apache/portals-pluto · GHSA-3qp6-m7hp-jrwf

medium2022-01-08

CVE-2021-36737-Cross-site Scripting in Apache Pluto

View chart →

apache/portals-pluto · GHSA-x588-g38j-f672

medium2022-01-08

CVE-2021-36738-Cross-site Scripting in Apache Pluto

View chart →

apache/portals-pluto · GHSA-jg6j-jrxv-2hh9

medium2022-01-08

CVE-2020-27428-Cross-site Scripting in Scratch-Svg-Renderer

View chart →

llk/scratch-svg-renderer · GHSA-h3vq-wv8j-36gw

high2022-01-08

CVE-2021-45457-In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin.

View chart →

apache/kylin · GHSA-mgpf-hhgf-cxg4

high2022-01-08

CVE-2021-45458-Use of Hard-coded Credentials in Apache Kylin

View chart →

apache/kylin · GHSA-9fj5-jg6f-qg5r

medium2022-01-08

CVE-2021-27738-Server-Side Request Forgery in Apache Kylin

View chart →

apache/kylin · GHSA-wrx7-qgmj-mf2q

medium2022-01-08

CVE-2021-36774-SQL Injection in Apache Kylin

View chart →

apache/kylin · GHSA-5429-pjww-7675

medium2022-01-08

CVE-2021-31522-Kylin can receive user input and load any class through Class.forName(...).

View chart →

apache/kylin · GHSA-q656-g2x3-8cgh

medium2022-01-08

CVE-2021-45456-Command Injection in Apache Kylin

View chart →

apache/kylin · GHSA-hw3m-8h25-8frw

high2022-01-08

CVE-2021-43045-Allocation of Resources Without Limits or Throttling in Apache Avro

View chart →

apache/avro · GHSA-868x-rg4c-cjqg

high2022-01-08

CVE-2021-44878-Pac4j token validation bypass if OpenID Connect provider supports none algorithm

View chart →

pac4j/pac4j · GHSA-xhw6-hjc9-679m

medium2022-01-08

CVE-2021-4194-bookstack is vulnerable to Improper Access Control

View chart →

bookstackapp/bookstack · GHSA-ghhm-xrwp-75m9

medium2022-01-08

CVE-2022-22109-Cross-site Scripting in DayByDay CRM

View chart →

bottelet/daybydaycrm · GHSA-jr37-66pj-36v7

medium2022-01-08

CVE-2022-22107-Missing Authorization in DayByDay CRM

View chart →

bottelet/daybydaycrm · GHSA-44gv-fgcj-w546

medium2022-01-08

CVE-2022-22108-Missing Authorization in DayByDay CRM

View chart →

bottelet/daybydaycrm · GHSA-frxp-xxx8-hrg6

high2022-01-08

CVE-2022-22110-Weak Password Requirements in Daybyday CRM

View chart →

bottelet/daybydaycrm · GHSA-96v6-hrwg-p378