Security advisories

high2021-08-23

CVE-2021-37714-Uncaught Exception in jsoup

View chart →

jhy/jsoup · GHSA-m72m-mhq2-9p6c

high2021-08-23

CVE-2021-39131-Improper Handling of Unexpected Data Type in ced

View chart →

sonicdoe/ced · GHSA-27wq-qx3q-fxm9

high2021-08-23

CVE-2021-37695-Fake objects feature vulnerability allowing to execute JavaScript code using malformed HTML.

View chart →

ckeditor/ckeditor4 · GHSA-m94c-37g6-cjhc

medium2021-08-23

CKEditor 4 vulnerabilities in versions <4.16.1

View chart →

pimcore/pimcore · GHSA-cfcv-q4qq-2ph4

medium2021-08-23

CVE-2021-39138-parse-server new anonymous user session acts as if it's created with password

View chart →

parse-community/parse-server · GHSA-23r4-5mxp-c7g5

high2021-08-23

CVE-2021-37627-Privilege escalation via form generator

View chart →

contao/contao · GHSA-hq5m-mqmx-fw6m

medium2021-08-23

CVE-2021-37626-PHP file inclusion via insert tags

View chart →

contao/contao · GHSA-r6mv-ppjc-4hgr

medium2021-08-23

CVE-2021-32809-Clipboard feature vulnerability allowing to inject arbitrary HTML into the editor using paste functionality

View chart →

ckeditor/ckeditor4 · GHSA-7889-rm5j-hpgg

high2021-08-23

CVE-2021-32808-Widget feature vulnerability allowing to execute JavaScript code using undo functionality

View chart →

ckeditor/ckeditor4 · GHSA-6226-h7ff-ch6c

high2021-08-23

CVE-2021-32798-Special Element Injection in notebook

View chart →

jupyter/notebook · GHSA-hwvq-6gjx-j797

critical2021-08-13

CVE-2021-37705-Improper Authorization and Origin Validation Error in OneFuzz

View chart →

microsoft/onefuzz · GHSA-q5vh-6whw-x745

medium2021-08-13

CVE-2021-33037-HTTP Request Smuggling in Apache Tomcat

View chart →

apache/tomcat · GHSA-4vww-mc66-62m6

medium2021-08-12

CVE-2021-37700-Clipboard-based DOM-XSS

View chart →

github/paste-markdown · GHSA-gpfj-4j6g-c4w9

medium2021-08-12

CVE-2021-37699-Open Redirect in Next.js

View chart →

vercel/next.js · GHSA-vxf5-wxwp-m7g9

high2021-08-11

CVE-2021-38305-Command injection in Yamale

View chart →

23andme/yamale · GHSA-435p-f82x-mxwm

medium2021-08-11

CVE-2021-25954-Improper Access Control in Dolibarr

View chart →

dolibarr/dolibarr · GHSA-vxhc-c4qm-647p

medium2021-08-10

CVE-2021-23414-Cross-site Scripting in video.js

View chart →

videojs/video.js · GHSA-pp7m-6j83-m7r6

medium2021-08-10

CVE-2021-23417-Prototype Pollution in deepmergefn

View chart →

jesusgm/deepmergefn · GHSA-vj72-mwrj-m2xq

medium2021-08-10

CVE-2021-23416-Cross-site Scripting in curly-bracket-parser

View chart →

magynhard/curly-bracket-parser · GHSA-rqf8-8c89-mw29

medium2021-08-10

CVE-2021-3664-Open redirect in url-parse

View chart →

unshiftio/url-parse · GHSA-hh27-ffr2-f2jc