Security advisories

high2024-02-08

CVE-2024-23448-APM Server vulnerable to Insertion of Sensitive Information into Log File

elastic/apm-server · GHSA-8r33-q5j5-rh7g

medium2024-02-07

CVE-2024-24822-Pimcore Admin Classic Bundle permissions are not getting checked when working with tags

pimcore/admin-ui-classic-bundle · GHSA-3rfr-mpfj-2jwq

medium2024-02-07

CVE-2024-24823-Graylog session fixation vulnerability through cookie injection

graylog2/graylog2-server · GHSA-3xf8-g8gr-g7rh

high2024-02-07

CVE-2024-24824-Graylog vulnerable to instantiation of arbitrary classes triggered by API request

graylog2/graylog2-server · GHSA-p6gg-5hf4-4rgj

medium2024-02-07

CVE-2023-4771-CKEditor cross-site scripting vulnerability in AJAX sample

ckeditor/ckeditor4 · GHSA-wh5w-82f3-wrxh

medium2024-02-07

CVE-2024-24816-CKEditor4 Cross-site Scripting vulnerability in samples with enabled the preview feature

ckeditor/ckeditor4 · GHSA-mw2c-vx6j-mg76

medium2024-02-07

CVE-2024-24815-CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection

ckeditor/ckeditor4 · GHSA-fq6h-4g8v-qqvm

critical2024-02-07

CVE-2024-24811-SQLAlchemyDA unauthenticated arbitrary SQL query execution

zopefoundation/products.sqlalchemyda · GHSA-r3jc-3qmm-w3pw

critical2024-02-07

CVE-2024-24563-Vyper negative array index bounds checks

vyperlang/vyper · GHSA-52xq-j7v9-v4v2

critical2024-02-07

CVE-2024-25145-Liferay Portal stored cross-site scripting (XSS) vulnerability

liferay/liferay-portal · GHSA-9vgq-w5pv-v77q

high2024-02-07

CVE-2024-25143-Liferay Portal denial of service (memory consumption)

liferay/liferay-portal · GHSA-87m3-6qj3-p3xh

medium2024-02-07

CVE-2023-39196-Apache Ozone Improper Authentication vulnerability

apache/ozone · GHSA-6726-2rx3-cgwh

high2024-02-07

CVE-2023-51437-Apache Pulsar SASL Authentication Provider observable timing discrepancy vulnerability

apache/pulsar · GHSA-c57v-4vg5-cm2x

high2024-02-07

CVE-2024-24680-Django denial-of-service attack in the intcomma template filter

django/django · GHSA-xxj9-f6rv-m3x4

high2024-02-06

CVE-2024-24591-Allegro AI ClearML path traversal vulnerability

allegroai/clearml · GHSA-m95h-p4gg-wfw3

high2024-02-06

CVE-2024-24590-Allegro AI ClearML vulnerable to deserialization of untrusted data

allegroai/clearml · GHSA-cpcw-9h9m-wqw9

medium2024-02-06

CVE-2024-0690-Ansible-core information disclosure flaw

ansible/ansible · GHSA-h24r-m9qc-pvpg

high2024-02-06

CVE-2024-23673-Apache Sling Servlets Resolver executes malicious code via path traversal

apache/sling-org-apache-sling-servlets-resolver · GHSA-h2rq-qhr7-53gm

medium2024-02-06

CVE-2024-24595-Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance

allegroai/clearml · GHSA-gvqv-h7hh-6fcc

critical2024-02-06

CVE-2024-24398-Stimulsoft Dashboard.JS directory traversal vulnerability

stimulsoft/dashboards.js · GHSA-gfqf-9w98-7jmx