Security Advisories

medium2023-11-28

CVE-2023-49092-Marvin Attack: potential key recovery through timing sidechannels

View chart

rustcrypto/rsa · GHSA-c38w-74pg-36hr

medium2023-11-28

Marvin Attack: potential key recovery through timing sidechannels

View chart

rustcrypto/rsa · GHSA-4grx-2x9w-596c

medium2023-11-28

`openssl` `X509StoreRef::objects` is unsound

View chart

sfackler/rust-openssl · GHSA-xphf-cx8h-7q9g

medium2023-11-28

CVE-2023-49083-cryptography vulnerable to NULL-dereference when loading PKCS7 certificates

View chart

pyca/cryptography · GHSA-jfhm-5ghh-2f97

high2023-11-28

CVE-2023-40610-Apache Superset - Elevation of Privilege

View chart

apache/superset · GHSA-f678-j579-4xf5

high2023-11-28

CVE-2023-49087-Validation of SignedInfo

View chart

simplesamlphp/xml-security · GHSA-ww7x-3gxh-qm6r

medium2023-11-28

CVE-2023-42502-Apache Superset Open Redirect vulnerability

View chart

apache/superset · GHSA-hc74-9vjm-c9xv

medium2023-11-28

CVE-2023-42505-Apache Superset Exposure of Sensitive Information to an Unauthorized Actor vulnerability

View chart

apache/superset · GHSA-fgpw-4w69-j256

high2023-11-28

CVE-2023-46589-Apache Tomcat Improper Input Validation vulnerability

View chart

apache/tomcat · GHSA-fccv-jmmp-qg76

high2023-11-28

CVE-2023-48848-ureport arbitrary file read vulnerability

View chart

youseries/ureport · GHSA-9vfc-qxc8-wrpq

high2023-11-28

CVE-2022-41678-Apache ActiveMQ Deserialization of Untrusted Data vulnerability

View chart

apache/activemq · GHSA-53v4-42fg-g287

medium2023-11-28

CVE-2023-42504-Apache Superset Allocation of Resources Without Limits or Throttling vulnerability

View chart

apache/superset · GHSA-3hp7-4qq4-v5c6

medium2023-11-28

CVE-2023-45286-github.com/go-resty/resty/v2 HTTP request body disclosure

View chart

go-resty/resty · GHSA-xwh9-gc39-5298

high2023-11-28

CVE-2023-34053-Spring Framework vulnerable to denial of service

View chart

spring-projects/spring-framework · GHSA-v94h-hvhg-mf9h

high2023-11-28

CVE-2023-34054-Reactor Netty HTTP Server denial of service vulnerability

View chart

reactor/reactor-netty · GHSA-q24v-hpg3-v3jp

medium2023-11-28

CVE-2023-34055-Spring Boot Actuator denial of service vulnerability

View chart

spring-projects/spring-boot · GHSA-jjfh-589g-3hjx

critical2023-11-28

CVE-2023-48022-Ray has arbitrary code execution via jobs submission API

View chart

ray-project/ray · GHSA-6wgj-66m2-xxp2

high2023-11-28

CVE-2023-49145-Improper Neutralization of Input in Advanced User Interface for Jolt

View chart

apache/nifi · GHSA-68pr-6fjc-wmgm

medium2023-11-28

CVE-2023-46480-OwnCast remote code execution vulnerability

View chart

owncast/owncast · GHSA-392h-r46j-q24p

low2023-11-27

CVE-2023-48711-google-translate-api-browser Server-Side Request Forgery (SSRF) Vulnerability

View chart

cjvnjde/google-translate-api-browser · GHSA-4233-7q5q-m7p6