Security advisories

medium2023-12-01

OpenSearch StackOverflow vulnerability

View chart →

opensearch-project/opensearch · GHSA-6g3j-p5g6-992f

medium2023-12-01

CVE-2023-49277-Reflected XSS Vulnerability in dpaste

View chart →

darrenofficial/dpaste · GHSA-r8j9-5cj7-cv39

high2023-12-01

CVE-2023-49735-Apache Tiles: Unvalidated input may lead to path traversal and XXE

View chart →

apache/tiles · GHSA-qw4h-3xjj-84cc

medium2023-11-30

CVE-2023-4218-Eclipse IDE XXE in eclipse.platform

View chart →

eclipse-platform/eclipse.platform · GHSA-j24h-xcpc-9jw8

medium2023-11-30

CVE-2023-48631-@adobe/css-tools Improper Input Validation and Inefficient Regular Expression Complexity

View chart →

adobe/css-tools · GHSA-prr3-c3m5-p7q2

medium2023-11-30

CVE-2023-6027-PHPMemcachedAdmin vulnerable to cross-site scripting (XSS) via improper encoding

View chart →

elijaa/phpmemcachedadmin · GHSA-pr4w-m4rp-gp87

critical2023-11-30

CVE-2023-6026-PHPMemcachedAdmin Path Traversal vulnerability

View chart →

elijaa/phpmemcachedadmin · GHSA-8qfm-h8rh-h3r7

critical2023-11-30

CVE-2023-49733-Apache Cocoon Improper Restriction of XML External Entity Reference vulnerability

View chart →

apache/cocoon · GHSA-77jg-cpw9-73vg

medium2023-11-30

CVE-2023-49620-Apache DolphinScheduler Missing Authorization vulnerability

View chart →

apache/dolphinscheduler · GHSA-r44q-98gx-pmh2

critical2023-11-30

CVE-2022-45135-Apache Cocoon SQL Injection vulnerability

View chart →

apache/cocoon · GHSA-8v4w-jr33-4rh3

high2023-11-30

CVE-2023-49052-Microweber file upload vulnerability

View chart →

microweber/microweber · GHSA-2c7x-w3mx-h7p6

medium2023-11-29

CVE-2023-44383-October CMS stored XSS by authenticated backend user with improper configuration

View chart →

octobercms/october · GHSA-rvx8-p3xp-fj3p

medium2023-11-29

CVE-2023-49090-CarrierWave Content-Type allowlist bypass vulnerability, possibly leading to XSS

View chart →

carrierwaveuploader/carrierwave · GHSA-gxhx-g4fq-49hj

critical2023-11-29

CVE-2023-44382-October CMS safe mode bypass using Twig sandbox escape

View chart →

octobercms/october · GHSA-p8q3-h652-65vx

medium2023-11-29

CVE-2023-44381-October CMS safe mode bypass using Page template injection

View chart →

octobercms/october · GHSA-q22j-5r3g-9hmh

low2023-11-29

CVE-2022-2232-Keycloak vulnerable to LDAP Injection on UsernameForm Login

View chart →

keycloak/keycloak · GHSA-8hc5-rmgf-qx6p

high2023-11-29

CVE-2023-49097-ZITADEL Account Takeover via Malicious Host Header Injection

View chart →

zitadel/zitadel · GHSA-2wmj-46rj-qm2w

medium2023-11-29

CVE-2023-49673-Jenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerability

View chart →

jenkinsci/neuvector-vulnerability-scanner-plugin · GHSA-wpfc-r5qq-7r7p

medium2023-11-29

CVE-2023-49674-Jenkins NeuVector Vulnerability Scanner Plugin missing permission check

View chart →

jenkinsci/neuvector-vulnerability-scanner-plugin · GHSA-ph87-4x2g-6hp4

high2023-11-29

CVE-2023-6378-logback serialization vulnerability

View chart →

qos-ch/logback · GHSA-vmq6-5m68-f53m