Security advisories

critical2021-10-06

CVE-2021-33575-Remote code execution in ruby-jss

View chart →

pixaranimationstudios/ruby-jss · GHSA-vmfh-c547-v45h

high2021-10-06

CVE-2021-28128-Weak Password Recovery Mechanism for Forgotten Password in Strapi

View chart →

strapi/strapi · GHSA-37hx-4mcq-wc3h

medium2021-10-06

CVE-2021-28125-Open Redirect in Apache Superset

View chart →

apache/superset · GHSA-pfwg-rxf4-97c3

medium2021-10-06

CVE-2021-23372-Denial of Service (DoS) in mongo-express

View chart →

mongo-express/mongo-express · GHSA-m2r3-8492-vx59

high2021-10-06

S3 storage write is not aborted on errors leading to unbounded memory usage

View chart →

foxcpp/maddy · GHSA-m6m5-pp4g-fcc8

medium2021-10-06

CVE-2021-30151-Cross-site Scripting in Sidekiq

View chart →

mperham/sidekiq · GHSA-grh7-935j-hg6w

medium2021-10-06

CVE-2021-30109-Cross-site Scripting in Froala Editor

View chart →

froala/wysiwyg-editor-release · GHSA-cq6w-w5rj-p9x8

high2021-10-06

CVE-2021-21389-BuddyPress privilege escalation via REST API

View chart →

buddypress/buddypress · GHSA-m6j4-8r7p-wpp3

high2021-10-06

CVE-2021-41126-Deleted Admin Can Sign In to Admin Interface

View chart →

octobercms/october · GHSA-6gjf-7w99-j7x7

medium2021-10-06

CVE-2021-41125-Scrapy HTTP authentication credentials potentially leaked to target websites

View chart →

scrapy/scrapy · GHSA-jwqp-28gf-p498

medium2021-10-05

CVE-2021-22963-URL Redirection to Untrusted Site ('Open Redirect') in fastify-static

View chart →

fastify/fastify-static · GHSA-p6vg-p826-qp3v

critical2021-10-05

CVE-2021-34552-Buffer Overflow in Pillow

View chart →

python-pillow/pillow · GHSA-7534-mm45-c74v

high2021-10-05

CVE-2021-39226-Authentication bypass for viewing and deletions of snapshots

View chart →

grafana/grafana · GHSA-69j6-29vr-p3j9

high2021-10-05

CVE-2021-41113-Cross-Site-Request-Forgery in Backend

View chart →

typo3/typo3 · GHSA-657m-v5vm-f6rw

medium2021-10-05

CVE-2021-41114-HTTP Host Header Injection

View chart →

typo3/typo3 · GHSA-m2jh-fxw4-gphm

high2021-10-05

CVE-2021-41116-Improper escaping of command arguments on Windows leading to command injection

View chart →

composer/composer · GHSA-frqg-7g38-6gcf

high2021-10-05

CVE-2021-40325-Cobbler before 3.3.0 allows authorization bypass for modification of settings.

View chart →

cobbler/cobbler · GHSA-cr3f-r24j-3chw

high2021-10-05

CVE-2021-40323-Cobbler before 3.3.0 allows log poisoning

View chart →

cobbler/cobbler · GHSA-cpqf-3c3r-c9g2

high2021-10-05

CVE-2021-40324-Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.

View chart →

cobbler/cobbler · GHSA-4cfr-gjfx-fj3x

medium2021-10-04

CVE-2021-41103-Insufficiently restricted permissions on plugin directories

View chart →

containerd/containerd · GHSA-c2h3-6mxw-7mvq