Security advisories

critical2021-08-30

CVE-2020-18704-Unrestricted Upload of File with Dangerous Type in django-widgy

View chart →

fusionbox/django-widgy · GHSA-98hv-qff3-8793

critical2021-08-30

CVE-2020-18703-Improper Restriction of XML External Entity Reference in Quokka

View chart →

quokkaproject/quokka · GHSA-3xg5-6c3j-vp8x

medium2021-08-30

CVE-2020-18702-Cross Site Scripting (XSS) in Quokka

View chart →

rochacbruno/quokka · GHSA-5m69-3chg-6f8m

critical2021-08-30

CVE-2021-25955-Dolibarr Cross-site Scripting vulnerability

View chart →

dolibarr/dolibarr · GHSA-cpv8-6xgr-rmf6

medium2021-08-30

CVE-2020-19709-Cross-site scripting in feehicms

View chart →

liufee/feehicms · GHSA-f8pv-x7h8-687v

medium2021-08-30

CVE-2021-3734-Improper Restriction of Rendered UI Layers or Frames in yourls

View chart →

yourls/yourls · GHSA-r6g8-jmj9-g945

high2021-08-30

CVE-2021-39136-Cross-site scripting vulnerability in file upload

View chart →

baserproject/basercms · GHSA-hgjr-632x-qpp3

high2021-08-30

CVE-2021-39160-Code injection in nbgitpuller

View chart →

jupyterhub/nbgitpuller · GHSA-mq5p-2mcr-m52j

critical2021-08-30

CVE-2021-39159-remote code execution via git repo provider

View chart →

jupyterhub/binderhub · GHSA-9jjr-qqfp-ppwx

medium2021-08-30

CVE-2021-33605-Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20

View chart →

vaadin/flow-components · GHSA-qcc4-3rxf-gf4m

high2021-08-30

CVE-2021-39156-Istio Fragments in Path May Lead to Authorization Policy Bypass

View chart →

istio/istio · GHSA-hqxw-mm44-gc4r

high2021-08-30

CVE-2021-39155-Authorization Policy Bypass Due to Case Insensitive Host Comparison

View chart →

istio/istio · GHSA-7774-7vr3-cc8j

medium2021-08-30

CVE-2021-39137-Ethereum Contains Consensus Flaw During Block Processing

View chart →

ethereum/go-ethereum · GHSA-9856-9gg9-qcmq

medium2021-08-30

CVE-2021-37709-Insecure direct object reference of log files of the Import/Export feature

View chart →

shopware/platform · GHSA-54gp-qff8-946c

high2021-08-30

CVE-2021-37708-Command injection in mail agent settings

View chart →

shopware/platform · GHSA-xh55-2fqp-p775

medium2021-08-30

CVE-2021-37707-Manipulation of product reviews via API

View chart →

shopware/platform · GHSA-9f8f-574q-8jmf

high2021-08-30

CVE-2021-29487-October CMS auth bypass and account takeover

View chart →

octobercms/october · GHSA-h76r-vgf3-j6w5

medium2021-08-30

CVE-2021-37702-Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore

View chart →

pimcore/pimcore · GHSA-pp2h-95hm-hv9r

high2021-08-30

CVE-2021-32648-Account Takeover in Octobercms

View chart →

octobercms/october · GHSA-mxr5-mc97-63rc

critical2021-08-30

CVE-2021-39168-TimelockController vulnerability in OpenZeppelin Contracts

View chart →

openzeppelin/openzeppelin-contracts-upgradeabl · GHSA-vrw4-w73r-6mm8