Security advisories

high2023-12-05

CVE-2023-47633-Traefik docker container using 100% CPU

View chart →

traefik/traefik · GHSA-6fwg-jrfw-ff7p

medium2023-12-05

CVE-2023-47124-Traefik vulnerable to potential DDoS via ACME HTTPChallenge

View chart →

traefik/traefik · GHSA-8g85-whqh-cr2f

medium2023-12-05

CVE-2023-47106-Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass

View chart →

traefik/traefik · GHSA-fvhj-4qfh-q2hm

high2023-12-05

CVE-2023-49376-Cross-Site Request Forgery in JFinalCMS

View chart →

jfinal/jfinal · GHSA-w492-7g9m-j2ww

high2023-12-05

CVE-2023-49373-Cross-Site Request Forgery in JFinalCMS

View chart →

jfinal/jfinal · GHSA-cj7j-23wf-mhrx

high2023-12-05

CVE-2023-49372-Cross-Site Request Forgery in JFinalCMS

View chart →

jfinal/jfinal · GHSA-9wvj-wr2f-6mx6

high2023-12-05

CVE-2023-41835-Apache Struts Improper Control of Dynamically-Managed Code Resources vulnerability

View chart →

apache/struts · GHSA-729q-fcgp-r5xh

high2023-12-05

CVE-2023-43472-Information exposure in MLflow

View chart →

mlflow/mlflow · GHSA-wqxf-447m-6f5f

medium2023-12-05

CVE-2023-49289-Ajax Pro Cross-site Scripting

View chart →

michaelschwarz/ajax.net-professional · GHSA-8v6j-gc74-fmpp

high2023-12-04

Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacks

View chart →

edgelesssys/marblerun · GHSA-j3rq-4xjw-xg63

critical2023-12-04

CVE-2023-49093-HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL

View chart →

htmlunit/htmlunit · GHSA-37vq-hr2f-g7h7

critical2023-12-04

CVE-2023-48967-Solon is vulnerable to Deserialization of Untrusted Data

View chart →

noear/solon · GHSA-vwgg-2q82-38c5

critical2023-12-04

CVE-2023-48910-Microcks contains a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download

View chart →

microcks/microcks · GHSA-gqj2-324p-vx73

high2023-12-04

CVE-2023-48966-ThinkAdmin arbitrary file upload vulnerability

View chart →

zoujingli/thinkadmin · GHSA-7gq9-p94f-g5v9

medium2023-12-04

CVE-2023-6460-Logging of the firestore key within nodejs-firestore

View chart →

googleapis/nodejs-firestore · GHSA-4g6q-77j7-vvjc

high2023-12-04

CVE-2023-6481-Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned data

View chart →

qos-ch/logback · GHSA-gm62-rw4g-vrc4

critical2023-12-02

CVE-2023-48887-Jupiter allows attackers to execute arbitrary commands via sending a crafted RPC request

View chart →

fengjiachun/jupiter · GHSA-6pqx-v9g4-5hc8

medium2023-12-01

Environment variables still accessible through /proc

View chart →

phylum-dev/birdcage · GHSA-wj7f-468m-6mv8

medium2023-12-01

CVE-2023-44402-ASAR Integrity bypass via filetype confusion in electron

View chart →

electron/electron · GHSA-7m48-wc93-9g85

high2023-12-01

Cookie leakage between different users in fastapi-proxy-lib

View chart →

wsh032/fastapi-proxy-lib · GHSA-7vwr-g6pm-9hc8