Security advisories

critical2021-11-02

CVE-2020-36376-Vulnerability in list function leads to arbitrary code execution via filePath parameters

View chart →

shenzhim/aaptjs · GHSA-4g7x-7vgq-3j28

high2021-11-01

CVE-2020-26705-XML External Entity vulnerability in Easy-XML

View chart →

darkfoxprime/python-easy_xml · GHSA-v899-28g4-qmh8

critical2021-11-01

CVE-2020-25911-XML External Entity vulnerability in MODX CMS

View chart →

modxcms/revolution · GHSA-vhfp-9wvj-gwvg

critical2021-11-01

CVE-2020-36381-Vulnerability in singleCrunch function leads to arbitrary code execution via filePath parameters

View chart →

shenzhim/aaptjs · GHSA-7fw7-gh23-f832

critical2021-11-01

CVE-2020-36380-Vulnerability in crunch function leads to arbitrary code execution via filePath parameters

View chart →

shenzhim/aaptjs · GHSA-m7p2-ghfh-pjvx

high2021-11-01

CVE-2021-41189-Communities and collections administrators can escalate their privilege up to system administrator

View chart →

dspace/dspace · GHSA-cf2j-vf36-c6w8

medium2021-11-01

CVE-2021-3904-Cross-Site Scripting in grav

View chart →

getgrav/grav · GHSA-5jxc-hmqf-3f73

medium2021-11-01

CVE-2021-41186-ReDoS vulnerability in parser_apache2

View chart →

fluent/fluentd · GHSA-hwhf-64mh-r662

high2021-11-01

CVE-2021-25741-Files or Directories Accessible to External Parties in kubernetes

View chart →

kubernetes/kubernetes · GHSA-f5f7-6478-qm6p

medium2021-10-28

CVE-2021-3900-Cross-Site Request Forgery in firefly-iii

View chart →

firefly-iii/firefly-iii · GHSA-pfj7-w373-gqch

low2021-10-28

CVE-2021-3901-Cross-Site Request Forgery in firefly-iii

View chart →

firefly-iii/firefly-iii · GHSA-rqgp-ccph-5w65

medium2021-10-28

CVE-2020-22864-Cross site scripting in froala-editor

View chart →

froala/wysiwyg-editor · GHSA-97x5-cc53-cv4v

critical2021-10-28

CVE-2021-41194-Improper Access Control in jupyterhub-firstuseauthenticator

View chart →

jupyterhub/firstuseauthenticator · GHSA-5xvc-vgmp-jgc3

medium2021-10-28

Improper Access Control in github.com/treeverse/lakefs

View chart →

treeverse/lakefs · GHSA-m836-gxwq-j2pm

medium2021-10-27

CVE-2021-41188-Authenticated Stored XSS in shopware/shopware

View chart →

shopware/shopware · GHSA-4p3x-8qw9-24w9

medium2021-10-27

CVE-2021-25977-Cross-site Scripting in PiranhaCMS

View chart →

piranhacms/piranha.core · GHSA-jvjp-vh27-r9h5

critical2021-10-27

CVE-2021-38294-Command injection leading to Remote Code Execution in Apache Storm

View chart →

apache/storm · GHSA-6768-mcjc-8223

medium2021-10-26

CVE-2021-41183-XSS in `*Text` options of the Datepicker widget in jquery-ui

View chart →

jquery/jquery-ui · GHSA-j7qv-pgf6-hvh4

medium2021-10-26

CVE-2021-41184-XSS in the `of` option of the `.position()` util in jquery-ui

View chart →

jquery/jquery-ui · GHSA-gpqq-952q-5327

medium2021-10-26

CVE-2021-41182-XSS in the `altField` option of the Datepicker widget in jquery-ui

View chart →

jquery/jquery-ui · GHSA-9gj3-hwp5-pmwc