Security advisories

high2021-09-02

CVE-2021-38599-Improper use of cryptographic key in wal-g

View chart →

wal-g/wal-g · GHSA-vrmr-f2qh-3hhf

critical2021-09-02

CVE-2021-38302-SQL injection in TYPO3 extension

View chart →

ecodev/newsletter · GHSA-hqm2-gwqf-r5g5

medium2021-09-02

CVE-2021-36793-CSRF token exposure in TYPO3 extension

View chart →

lacr1ma/routes · GHSA-vpw5-grxx-v396

medium2021-09-02

CVE-2021-32822-hbs: Insertion of Sensitive Information into Externally-Accessible File or Directory and Exposure of Sensitive Information to an Unauthorized Actor

View chart →

pillarjs/hbs · GHSA-7f5c-rpf4-86p8

high2021-09-02

CVE-2021-25956-Dolibarr vulnerable to Improper Authentication and Improper Access Control

View chart →

dolibarr/dolibarr · GHSA-fjqg-w8g6-hhq8

medium2021-09-02

CVE-2021-39286-Cross-site scripting in pywb

View chart →

webrecorder/pywb · GHSA-947x-pv47-pp3q

high2021-09-02

CVE-2020-22345-OS Command Injection in Centreon

View chart →

centreon/centreon · GHSA-2q95-593f-g7h7

medium2021-09-02

CVE-2021-23425-Uncontrolled Resource Consumption in trim-off-newlines

View chart →

stevemao/trim-off-newlines · GHSA-38fc-wpqx-33j7

high2021-09-02

CVE-2021-23424-Uncontrolled Resource Consumption in ansi-html

View chart →

tjatse/ansi-html · GHSA-whgm-jr23-g3j9

high2021-09-02

CVE-2021-39371-XML External Entity Injection in PyWPS

View chart →

geopython/pywps · GHSA-p9wf-3xpg-c9g5

high2021-09-02

CVE-2021-38556-Command Injection in RaspAP 2.6.6

View chart →

raspap/raspap-webgui · GHSA-7vph-p634-vrqf

high2021-09-02

CVE-2021-38557-raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions.

View chart →

raspap/raspap-webgui · GHSA-536p-4pcj-5mr9

medium2021-09-02

CVE-2021-23429-Uncontrolled Resource Consumption in transpile

View chart →

stealjs/transpile · GHSA-7xrj-f5rp-j55h

high2021-09-02

CVE-2021-23430-Directory Traversal in startserver

View chart →

xudafeng/startserver · GHSA-hqv3-qq72-78cv

medium2021-09-02

CVE-2021-23432-Prototype Pollution in mootools

View chart →

vsviridov/mootools-node · GHSA-x6hx-7gh3-3q98

medium2021-09-02

CVE-2021-23431-Cross-site Request Forgery (CSRF) in joplin

View chart →

laurent22/joplin · GHSA-gjwp-7v3g-99pj

high2021-09-02

CVE-2021-25957-Weak Password Recovery Mechanism for Forgotten Password

View chart →

dolibarr/dolibarr · GHSA-c32w-3cqh-f6jx

low2021-09-02

CVE-2021-32830-Command injection in @diez/generation

View chart →

diez/diez · GHSA-8c3f-x5f9-6h62

critical2021-09-02

CVE-2021-39185-Default CORS config allows any origin with credentials

View chart →

http4s/http4s · GHSA-52cf-226f-rhr6

high2021-09-02

CVE-2021-39187-Parse Server crashes with query parameter

View chart →

parse-community/parse-server · GHSA-xqp8-w826-hh6x