Security advisories

medium2021-12-01

XSS in richtext custom tag attributes in ezsystems/ezplatform-richtext

View chart →

ezsystems/ezplatform-richtext · GHSA-fxwm-rx68-p5vx

medium2021-12-01

CVE-2021-25987-Hexo Vulnerable to XSS

View chart →

hexojs/hexo · GHSA-q54r-r9pr-w7qv

medium2021-12-01

CVE-2021-4026-bookstack is vulnerable to Improper Access Control

View chart →

bookstackapp/bookstack · GHSA-jm6p-wfjg-xm7x

medium2021-11-30

CVE-2021-23654-Improper Neutralization of Formula Elements in a CSV File in html-2-csv

View chart →

hanwentao/html2csv · GHSA-fwf6-rw69-hhj4

medium2021-11-30

CVE-2021-32061-S3Scanner allows Directory Traversal

View chart →

sa7mon/s3scanner · GHSA-qppg-v75c-r5ff

critical2021-11-30

CVE-2021-43786-API token verification can be bypassed in NodeBB

View chart →

nodebb/nodebb · GHSA-hf2m-j98r-4fqw

critical2021-11-30

CVE-2021-43787-XSS via prototype pollution in NodeBB

View chart →

nodebb/nodebb · GHSA-wx69-rvg3-x7fc

medium2021-11-30

CVE-2021-43788-NodeBB vulnerable to path traversal in translator module

View chart →

nodebb/nodebb · GHSA-pfj7-2qfw-vwgm

high2021-11-30

CVE-2021-43790-Use After Free in lucet

View chart →

bytecodealliance/lucet · GHSA-hf79-8hjp-rrvq

medium2021-11-29

CVE-2021-20848-Cross-site Scripting in github.com/schollz/rwtxt

View chart →

schollz/rwtxt · GHSA-458f-26r3-x2c3

critical2021-11-29

CVE-2021-44140-Incorrect Default Permissions in Apache JSPWiki

View chart →

apache/jspwiki · GHSA-8gw6-w5rw-4g5c

medium2021-11-29

ReDoS in LDAP schema parser

View chart →

python-ldap/python-ldap · GHSA-r8wq-qrxc-hmcm

medium2021-11-25

CVE-2021-20841-EC-CUBE Improper access control in Management screen

View chart →

ec-cube/ec-cube · GHSA-jc55-crg7-pr35

medium2021-11-24

CVE-2021-41270-CSV Injection in symfony/serializer

View chart →

symfony/symfony · GHSA-2xhg-w2g5-w95x

medium2021-11-24

CVE-2021-41268-Cookie persistence after password changes in symfony/security-bundle

View chart →

symfony/symfony · GHSA-qw36-p97w-vcqr

critical2021-11-24

Webcache Poisoning in shopware/platform and shopware/core

View chart →

shopware/platform · GHSA-r64m-qchj-hrjp

critical2021-11-23

CVE-2021-43775-Arbitrary file reading vulnerability in Aim

View chart →

aimhubio/aim · GHSA-8phj-f9w2-cjcc

high2021-11-23

CVE-2021-41281-Path traversal in Matrix Synapse

View chart →

matrix-org/synapse · GHSA-3hfw-x7gx-437c

critical2021-11-23

CVE-2021-23433-Prototype Pollution in algoliasearch-helper

View chart →

algolia/algoliasearch-helper-js · GHSA-vpf5-82c8-9v36

critical2021-11-23

CVE-2021-39231-Exposure of sensitive information in Apache Ozone

View chart →

apache/ozone · GHSA-3w5h-x4rh-hc28