Security advisories

high2021-06-17

CVE-2021-32623-Billion laughs attack (XML bomb)

View chart →

opencast/opencast · GHSA-9gwx-9cwp-5c2m

medium2021-06-17

CVE-2021-32681-Cross-site Scripting in wagtail

View chart →

wagtail/wagtail · GHSA-xfrw-hxr5-ghqf

medium2021-06-16

CVE-2021-27568-Improper Check for Unusual or Exceptional Conditions in json-smart

View chart →

netplex/json-smart-v2 · GHSA-v528-7hrm-frqp

medium2021-06-16

CVE-2021-27807-Excessive Iteration Denial of Service in Apache PDFBox

View chart →

apache/pdfbox · GHSA-2h3j-m7gr-25xj

low2021-06-16

CVE-2021-23331-Insecure temporary file used in com.squareup:connect

View chart →

square/connect-java-sdk · GHSA-q4hm-fwc9-hmv6

high2021-06-16

CVE-2021-26919-Arbitrary code execution in Apache Druid

View chart →

apache/druid · GHSA-jj4f-p7vv-j4v9

high2021-06-16

CVE-2021-25122-Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

View chart →

apache/tomcat · GHSA-j39c-c8hj-x4j3

high2021-06-16

CVE-2021-26118-Apache ActiveMQ Artemis vulnerable to Improper Access Control

View chart →

apache/activemq-artemis · GHSA-q7fr-vqhq-v5xr

critical2021-06-16

CVE-2021-26291-Origin Validation Error in Apache Maven

View chart →

apache/maven · GHSA-2f88-5hg8-9x2x

medium2021-06-16

CVE-2021-21620-Cross-Site Request Forgery in the Jenkins Claim plugin

View chart →

jenkinsci/claim-plugin · GHSA-4ffq-6g62-j4v4

medium2021-06-16

CVE-2021-21654-Missing Authorization in Jenkins P4 plugin

View chart →

jenkinsci/p4-plugin · GHSA-h6qv-f5gf-8gcf

high2021-06-16

CVE-2021-21652-CSRF vulnerability in Jenkins Xray - Test Management for Jira Plugin allows capturing credentials

View chart →

jenkinsci/xray-connector-plugin · GHSA-rrvg-2c69-p9rf

medium2021-06-16

CVE-2021-21649-Cross-site Scripting in Jenkins Dashboard View Plugin

View chart →

jenkinsci/dashboard-view-plugin · GHSA-jwhm-9cjm-4493

medium2021-06-16

CVE-2021-21648-Cross-Site Request Forgery in Jenkins Credentials Plugin

View chart →

jenkinsci/credentials-plugin · GHSA-gchq-9r68-6jwv

medium2021-06-16

CVE-2021-21666-Cross-site scripting in Jenkins Kiuwan Plugin

View chart →

jenkinsci/kiuwan-plugin · GHSA-8h77-3xwr-hqhh

critical2021-06-16

CVE-2021-32682-elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE

View chart →

studio-42/elfinder · GHSA-wph3-44rj-92pr

high2021-06-15

CVE-2021-33511-Server-Side Request Forgery in Plone

View chart →

plone/plone · GHSA-gc9g-67cq-p7v4

medium2021-06-15

CVE-2021-33510-Server-Side Request Forgery in Plone

View chart →

plone/plone · GHSA-4mg4-wvmx-5332

critical2021-06-15

CVE-2021-33509-Incorrect Permission Assignment for Critical Resource in Plone

View chart →

plone/plone · GHSA-hm2p-fhwx-9285

medium2021-06-15

CVE-2020-10729-Insufficiently random values in Ansible

View chart →

ansible/ansible · GHSA-r6h7-5pq2-j77h