Security Advisories

medium2021-12-17

CVE-2020-35210-A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.

View chart

atomix/atomix · GHSA-mf27-wg66-m8f5

medium2021-12-17

CVE-2020-35216-An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.

View chart

atomix/atomix · GHSA-6vvh-5794-vpmj

high2021-12-17

CVE-2020-35213-An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node.

View chart

atomix/atomix · GHSA-2fqw-684c-pvp7

high2021-12-17

CVE-2020-35211-An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node.

View chart

atomix/atomix · GHSA-4jhc-wjr3-pwh2

medium2021-12-17

CVE-2021-42550-Deserialization of Untrusted Data in logback

View chart

qos-ch/logback · GHSA-668q-qrv7-99fm

medium2021-12-17

CVE-2021-4123-livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

View chart

livehelperchat/livehelperchat · GHSA-rpg7-q4cv-p466

medium2021-12-17

CVE-2021-4121-yetiforcecrm is vulnerable to Cross-site Scripting

View chart

yetiforcecompany/yetiforcecrm · GHSA-j85f-xw9x-ffwp

medium2021-12-17

CVE-2021-43840-Path traversal when MessageBus::Diagnostics is enabled

View chart

discourse/message_bus · GHSA-xmgj-5fh3-xjmm

low2021-12-17

CVE-2021-43838-Regular Expression Denial of Service (ReDoS) in jsx-slack

View chart

yhatt/jsx-slack · GHSA-55xv-f85c-248q

critical2021-12-17

CVE-2021-44350-ThinkPHP5 SQL Injection vulnerability

View chart

top-think/framework · GHSA-q868-c4vw-qjx3

medium2021-12-16

CVE-2021-43837-vault-cli contains possible RCE when reading user-defined data

View chart

peopledoc/vault-cli · GHSA-q34h-97wf-8r8j

critical2021-12-16

Critical vulnerability in log4j may affect generated PEAR projects

View chart

averbis/pear-archetype · GHSA-j7c3-96rf-jrrp

high2021-12-16

CVE-2021-4111-YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number

View chart

yetiforcecompany/yetiforcecrm · GHSA-7v7w-f7c6-f829

medium2021-12-16

CVE-2021-4117-YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product

View chart

yetiforcecompany/yetiforcecrm · GHSA-cxg7-84wp-8pcq

medium2021-12-16

CVE-2021-4116-yetiforcecrm is vulnerable to Cross-site Scripting

View chart

yetiforcecompany/yetiforcecrm · GHSA-fwh7-v4gf-xv7w

medium2021-12-16

CVE-2021-4119-BookStack is vulnerable to Improper Access Control.

View chart

bookstackapp/bookstack · GHSA-9c5c-5j4h-8q2c

low2021-12-16

Inability to de-op players if listed in ops.txt with non-lowercase letters

View chart

pmmp/pocketmine-mp · GHSA-j5qg-w9jg-3wg3

medium2021-12-16

Vulnerable dependency in XTDB connector

View chart

odpi/egeria-connector-xtdb · GHSA-hwvm-vfw8-93mw

medium2021-12-16

CVE-2021-43812-Open redirect in @auth0/nextjs-auth0

View chart

auth0/nextjs-auth0 · GHSA-2mqv-4j3r-vjvp

medium2021-12-16

CVE-2021-23562-Code injection in plupload

View chart

moxiecode/plupload · GHSA-rp2c-jrgp-cvr8