Security Advisories

high2021-08-02

CVE-2021-23407-Path Traversal in elFinder.Net.Core

View chart

trannamtrung1st/elfinder.net.core · GHSA-mvvp-gwgc-5hrp

medium2021-08-02

CVE-2021-28796-Cross-Site Scripting in Qiita-Markdown

View chart

increments/qiita-markdown · GHSA-f2c9-5jqw-3xh3

medium2021-08-02

CVE-2021-28833-qiita-markdown Cross-site Scripting vulnerability

View chart

increments/qiita-markdown · GHSA-9p29-94hp-8rvc

medium2021-08-02

CVE-2019-16354-Beego has a file creation race condition

View chart

astaxie/beego · GHSA-f6px-w8rh-7r89

high2021-08-02

CVE-2020-16250-Authentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault

View chart

hashicorp/vault · GHSA-fp52-qw33-mfmw

medium2021-08-02

CVE-2021-35043-Cross-site Scripting in OWASP AntiSamy

View chart

nahsra/antisamy · GHSA-9c8w-jrw3-q2c3

high2021-07-28

CVE-2019-16405-Improper Input Validation in Centreon Web

View chart

centreon/centreon · GHSA-4f26-v6fr-9hmp

high2021-07-27

CVE-2021-33813-XML External Entity (XXE) Injection in JDOM

View chart

hunterhacker/jdom · GHSA-2363-cqg2-863c

high2021-07-26

CVE-2021-23409-github.com/pires/go-proxyproto vulnerable to DoS via Connection descriptor exhaustion

View chart

pires/go-proxyproto · GHSA-xcf7-q56x-78gh

high2021-07-26

CVE-2020-8828-Argo CD Insecure default administrative password

View chart

argoproj/argo-cd · GHSA-h8jc-jmrf-9h8f

medium2021-07-26

CVE-2021-32760-Archive package allows chmod of file outside of unpack target directory

View chart

containerd/containerd · GHSA-c72p-9xmj-rx3w

medium2021-07-26

CVE-2021-32767-Information Disclosure in User Authentication

View chart

typo3/typo3 · GHSA-34fr-fhqr-7235

medium2021-07-22

CVE-2021-39192-Privilege escalation: all users can access Admin-level API keys

View chart

tryghost/ghost · GHSA-j5c2-hm46-wp5c

medium2021-07-22

CVE-2021-32668-Cross-Site Scripting in Query Generator & Query View

View chart

typo3/typo3 · GHSA-6mh3-j5r5-2379

medium2021-07-22

CVE-2021-32667-Cross-Site Scripting in Page Preview

View chart

typo3/typo3 · GHSA-8mq9-fqv8-59wf

high2021-07-19

CVE-2021-36213-HashiCorp Consul L7 deny intention results in an allow action

View chart

hashicorp/consul · GHSA-8h2g-r292-j8xh

medium2021-07-19

CVE-2021-3602-Buildah processes using chroot isolation may leak environment values to intermediate processes

View chart

containers/buildah · GHSA-7638-r9r3-rmjj

medium2021-07-19

CVE-2021-34429-Encoded URIs can access WEB-INF directory in Eclipse Jetty

View chart

eclipse/jetty.project · GHSA-vjv5-gp2w-65vm

critical2021-07-12

CVE-2021-38189-SMTP command injection in lettre

View chart

lettre/lettre · GHSA-qc36-q22q-cjw3

high2021-07-12

CVE-2021-32740-Regular Expression Denial of Service in Addressable templates

View chart

sporkmonger/addressable · GHSA-jxhc-q857-3j6g