Security advisories

high2024-01-10

CVE-2023-49810-WWBN AVideo Improper Restriction of Excessive Authentication Attempts vulnerability

View chart →

wwbn/avideo · GHSA-v977-h4hm-rrff

high2024-01-10

CVE-2024-22190-Untrusted search path under some conditions on Windows allows arbitrary code execution

View chart →

gitpython-developers/gitpython · GHSA-2mqj-m65w-jghx

critical2024-01-10

CVE-2023-49569-Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

View chart →

go-git/go-git · GHSA-449p-3h89-pw88

medium2024-01-10

CVE-2023-6476-CRI-O's pods can break out of resource confinement on cgroupv2

View chart →

cri-o/cri-o · GHSA-p4rx-7wvg-fwrc

medium2024-01-10

CVE-2024-21667-Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts

View chart →

pimcore/customer-data-framework · GHSA-g273-wppx-82w4

medium2024-01-10

CVE-2024-21666-Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list

View chart →

pimcore/customer-data-framework · GHSA-c38c-c8mh-vq68

medium2024-01-10

CVE-2024-21665-Pimcore Ecommerce Framework Bundle Improper Access Control allows unprivileged user to access back-office orders list

View chart →

pimcore/ecommerce-framework-bundle · GHSA-cx99-25hr-5jxf

medium2024-01-10

CVE-2023-49295-quic-go's path validation mechanism can be exploited to cause denial of service

View chart →

quic-go/quic-go · GHSA-ppxx-5m9h-6vxf

low2024-01-10

CVE-2023-49619-Apache Answer Race Condition vulnerability

View chart →

apache/incubator-answer · GHSA-f899-4mr4-fqpv

critical2024-01-09

CVE-2024-21669-Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC

View chart →

hyperledger/aries-cloudagent-python · GHSA-97x9-59rv-q5pm

medium2024-01-09

CVE-2024-21319-Microsoft ASP.NET Core project templates vulnerable to denial of service

View chart →

dotnet/aspnetcore · GHSA-59j7-ghrg-fj52

medium2024-01-09

CVE-2024-21668-react-native-mmkv Insertion of Sensitive Information into Log File vulnerability

View chart →

mrousavy/react-native-mmkv · GHSA-4jh3-6jhv-2mgp

high2024-01-09

CVE-2024-21643-Microsoft.IdentityModel.Protocols.SignedHttpRequest remote code execution vulnerability

View chart →

azuread/azure-activedirectory-identitymodel-extensions-for-dotnet · GHSA-rv9j-c866-gp5h

medium2024-01-09

CVE-2024-21664-Parsing JSON serialized payload without protected field can lead to segfault

View chart →

lestrrat-go/jwx · GHSA-pvcr-v8j8-j5q3

high2024-01-09

CVE-2023-45139-fonttools XML External Entity Injection (XXE) Vulnerability

View chart →

fonttools/fonttools · GHSA-6673-4983-2vx5

medium2024-01-09

CVE-2023-6148-Qualys Jenkins Plugin for Policy Compliance Cross-site Scripting vulnerability

View chart →

jenkinsci/qualys-pc-plugin · GHSA-rwf9-8fqr-p44m

medium2024-01-09

CVE-2023-50974-Apprite CLI makes Use of Hard-coded Credentials

View chart →

appwrite/sdk-for-cli · GHSA-g777-crp9-m27g

medium2024-01-09

CVE-2023-6147-Qualys Jenkins Plugin for Policy Compliance XML External Entity vulnerability

View chart →

jenkinsci/qualys-pc-plugin · GHSA-8525-52vg-jv6v

medium2024-01-09

CVE-2023-6149-Qualys Jenkins Plugin for WAS XML External Entity vulnerability

View chart →

jenkinsci/qualys-was-plugin · GHSA-5gwh-r76w-934h

medium2024-01-09

CVE-2023-46906-juzawebCMS Incorrect Access Control vulnerability

View chart →

juzaweb/cms · GHSA-93p6-9cxv-5rpq