Security advisories

low2023-12-13

CVE-2023-50263-Unauthenticated db-file-storage views

View chart →

nautobot/nautobot · GHSA-75mc-3pjc-727q

high2023-12-13

Improper validation in meraki

View chart →

meraki/dashboard-api-python · GHSA-6x4h-9622-fqr6

medium2023-12-13

CVE-2023-6193-Unbounded queuing of path validation messages in cloudflare-quiche

View chart →

cloudflare/quiche · GHSA-w3vp-jw9m-f9pm

critical2023-12-13

CVE-2023-50423-Improper Privilege Management in sap-xssec

View chart →

sap/cloud-pysec · GHSA-6mjg-37cp-42x5

critical2023-12-13

CVE-2023-50424-Improper Privilege Management in github.com/sap/cloud-security-client-go

View chart →

sap/cloud-security-client-go · GHSA-m8rw-rcpq-2vp2

critical2023-12-13

CVE-2023-50422-Improper JWT Signature Validation in SAP Security Services Library

View chart →

sap/cloud-security-services-integration-library · GHSA-59c9-pxq8-9c73

high2023-12-13

CVE-2023-51661-Wasmer filesystem sandbox not enforced

View chart →

wasmerio/wasmer · GHSA-4mq4-7rw3-vm5j

medium2023-12-13

CVE-2023-50251-Denial of service caused by infinite recursion when parsing SVG document

View chart →

dompdf/php-svg-lib · GHSA-ff5x-7qg5-vwf2

low2023-12-13

CVE-2023-49279-Stored XSS via SVG File Upload

View chart →

umbraco/umbraco-cms · GHSA-6xmx-85x3-4cv2

low2023-12-13

CVE-2023-49278- Brute force exploit can be used to collect valid usernames

View chart →

umbraco/umbraco-cms · GHSA-7x74-h8cw-qhxq

low2023-12-13

CVE-2023-49274-SMTP misconfiguration leading to "Forgot Password" exploit that leaks registered user email.

View chart →

umbraco/umbraco-cms · GHSA-8qp8-9rpw-j46c

medium2023-12-13

CVE-2023-49273-Privilege Escalation using Spoofing

View chart →

umbraco/umbraco-cms · GHSA-cfr5-7p54-4qg8

low2023-12-13

CVE-2023-49089-Using the directory back payload (“/../”) in a package name allows placement of package in other folders.

View chart →

umbraco/umbraco-cms · GHSA-6324-52pr-h4p5

medium2023-12-13

CVE-2023-48313-DOM-XSS on Backoffice login screen.

View chart →

umbraco/umbraco-cms · GHSA-v98m-398x-269r

low2023-12-13

CVE-2023-48227-Backoffice User can bypass "Publish" restriction

View chart →

umbraco/umbraco-cms · GHSA-335x-5wcm-8jv2

high2023-12-13

CVE-2023-46247-incorrect storage layout for contracts containing large arrays

View chart →

vyperlang/vyper · GHSA-6m97-7527-mh74

low2023-12-13

CVE-2023-38694-Possible injection of HTML into user invite mails

View chart →

umbraco/umbraco-cms · GHSA-xxc6-35r7-796w

medium2023-12-13

CVE-2023-6379-Alkacon OpenCMS XSS via Mercury template

View chart →

alkacon/opencms-core · GHSA-w62v-q77r-66cc

high2023-12-13

CVE-2023-6753-Path traversal in MLflow

View chart →

mlflow/mlflow · GHSA-v945-r3rc-6fjm

medium2023-12-13

CVE-2023-5764-Ansible template injection vulnerability

View chart →

ansible/ansible · GHSA-7j69-qfc3-2fq9