Security advisories

high2024-02-06

CVE-2024-0964-Gradio Path Traversal vulnerability

View chart →

gradio-app/gradio · GHSA-f3h9-8phc-6gvh

medium2024-02-06

CVE-2023-34042-Spring Security's spring-security.xsd file is world writable

View chart →

spring-projects/spring-security · GHSA-9gp8-6cg8-7h34

medium2024-02-05

CVE-2024-24808-pyLoad open redirect vulnerability due to improper validation of the is_safe_url function

View chart →

pyload/pyload · GHSA-g3cm-qg2v-2hj5

high2024-02-05

CVE-2024-1052-Boundary vulnerable to session hijacking through TLS certificate tampering

View chart →

hashicorp/boundary · GHSA-vh73-q3rw-qx7w

medium2024-02-05

CVE-2024-24396-Stimulsoft Dashboard.JS Cross Site Scripting vulnerability

View chart →

stimulsoft/dashboards.js · GHSA-9m6m-c64r-w4f4

high2024-02-05

CVE-2024-22567-mingSoft MCMS File Upload vulnerability

View chart →

ming-soft/mcms · GHSA-7qw4-9r68-2rmx

high2024-02-05

CVE-2023-50782-Python Cryptography package vulnerable to Bleichenbacher timing oracle attack

View chart →

pyca/cryptography · GHSA-3ww4-gg4f-jr7f

low2024-02-05

CVE-2024-24807-Sulu HTML Injection via Autocomplete Suggestion

View chart →

sulu/sulu · GHSA-gfrh-gwqc-63cv

medium2024-02-05

Nokogiri update packaged libxml2 to v2.12.5 to resolve CVE-2024-25062

View chart →

sparklemotion/nokogiri · GHSA-xc9x-jj77-9p9j

medium2024-02-05

CVE-2024-24574-phpMyFAQ vulnerable to stored XSS on attachments filename

View chart →

thorsten/phpmyfaq · GHSA-7m8g-fprr-47fx

medium2024-02-05

CVE-2024-22208-phpMyFAQ sharing FAQ functionality can easily be abused for phishing purposes

View chart →

thorsten/phpmyfaq · GHSA-9hhf-xmcw-r3xg

medium2024-02-05

CVE-2024-22202-phpMyFAQ User Removal Page Allows Spoofing Of User Details

View chart →

thorsten/phpmyfaq · GHSA-6648-6g96-mg35

low2024-02-05

CVE-2024-24768-1Panel set-cookie is missing the Secure keyword

View chart →

1panel-dev/1panel · GHSA-9xfw-jjq2-7v8h

low2024-02-05

CVE-2024-24559-Vyper sha3 codegen bug

View chart →

vyperlang/vyper · GHSA-6845-xw22-ffxv

medium2024-02-05

CVE-2024-24397-Stimulsoft Dashboard.JS Cross Site Scripting vulnerability

View chart →

stimulsoft/dashboards.js · GHSA-9cgf-pxwq-2cpw

high2024-02-04

CVE-2021-4435-Yarn untrusted search path vulnerability

View chart →

yarnpkg/yarn · GHSA-mpwj-fcr6-x34c

medium2024-02-03

Zmarkdown Server-Side Request Forgery (SSRF) in remark-download-images

View chart →

zestedesavoir/zmarkdown · GHSA-mf74-qq7w-6j7v

low2024-02-03

Local File Inclusion vulnerability in zmarkdown

View chart →

zestedesavoir/zmarkdown · GHSA-mq6v-w35g-3c97

medium2024-02-03

CVE-2018-25001-Use after free in libpulse-binding

View chart →

jnqnfe/pulse-binding-rust · GHSA-f56g-chqp-22m9

medium2024-02-03

github-slug-action use of `set-env` Runner commands which are processed via stdout

View chart →

rlespinasse/github-slug-action · GHSA-7f32-hm4h-w77q