Security advisories

high2024-01-29

CVE-2024-23828-Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF

View chart →

0xjacky/nginx-ui · GHSA-qcjq-7f7v-pvc8

critical2024-01-29

CVE-2024-23827-Nginx-UI vulnerable to arbitrary file write through the Import Certificate feature

View chart →

0xjacky/nginx-ui · GHSA-xvq9-4vpv-227m

medium2024-01-29

CVE-2024-23829-aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators

View chart →

aio-libs/aiohttp · GHSA-8qpw-xqxj-h4r2

high2024-01-29

CVE-2023-51842-MeshCentral algorithm-downgrade issue

View chart →

ylianst/meshcentral · GHSA-wpxw-5xfm-x22v

critical2024-01-29

CVE-2023-51839-DeviceFarmer stf uses DES-ECB

View chart →

devicefarmer/stf · GHSA-7xm8-wjq7-88r5

high2024-01-29

CVE-2023-29055-Apache Kylin has Insufficiently Protected Credentials

View chart →

apache/kylin · GHSA-3vvc-v8c2-43r7

medium2024-01-27

CVE-2024-0960-ai-flow Deserialization of Untrusted Data vulnerability

View chart →

flink-extended/ai-flow · GHSA-7mgg-3rq2-hff4

medium2024-01-26

CVE-2024-23820-OpenFGA denial of service

View chart →

openfga/openfga · GHSA-rxpw-85vw-fx87

critical2024-01-26

CVE-2024-0937-Deserialization of untrusted data in synthcity

View chart →

vanderschaarlab/synthcity · GHSA-4957-7vhp-7v59

high2024-01-26

CVE-2024-23656-Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers

View chart →

dexidp/dex · GHSA-gr79-9v6v-gc9r

high2024-01-25

CVE-2023-6267-Quarkus Improper Handling of Insufficient Permissions or Privileges and Improper Handling of Exceptional Conditions vulnerability

View chart →

quarkusio/quarkus · GHSA-8j3x-w35r-rw4r

high2024-01-24

CVE-2023-24676-Arbitrary Code Execution in Processwire

View chart →

processwire/processwire · GHSA-2cvg-w29m-j8xc

high2024-01-24

CVE-2024-23649-Any authenticated user may obtain private message details from other users on the same instance

View chart →

lemmynet/lemmy · GHSA-r64r-5h43-26qv

high2024-01-24

CVE-2024-23648-Host header injection in the password reset

View chart →

pimcore/admin-ui-classic-bundle · GHSA-mrqg-mwh7-q94j

high2024-01-24

CVE-2024-23646-SQL Injection in Admin download files as zip

View chart →

pimcore/admin-ui-classic-bundle · GHSA-cwx6-4wmf-c6xv

low2024-01-24

CVE-2024-58265-Unauthenticated Nonce Increment in snow

View chart →

mcginty/snow · GHSA-7g9j-g5jg-3vv3

medium2024-01-24

CVE-2024-23644-Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client

View chart →

trillium-rs/trillium · GHSA-9f9p-cp3c-72jf

high2024-01-24

CVE-2024-23905-Content-Security-Policy disabled by Red Hat Dependency Analytics Jenkins Plugin

View chart →

jenkinsci/redhat-dependency-analytics-plugin · GHSA-x22x-5pp9-8v7f

high2024-01-24

CVE-2024-23899-Arbitrary file read vulnerability in Git server Plugin can lead to RCE

View chart →

jenkinsci/git-server-plugin · GHSA-vph5-2q33-7r9h

high2024-01-24

CVE-2024-23904-Arbitrary file read vulnerability in Jenkins Log Command Plugin

View chart →

jenkinsci/log-command-plugin · GHSA-qjpf-2jhx-3758