Security advisories

critical2023-11-16

CVE-2023-6018-Remote Code Execution due to Full Controled File Write in mlflow

View chart →

mlflow/mlflow · GHSA-5p3h-7fwh-92rc

high2023-11-16

CVE-2023-6022-Cross-Site Request Forgery vulnerability in Prefect

View chart →

prefecthq/prefect · GHSA-4hh5-2678-83fx

critical2023-11-16

CVE-2023-6021-Ray Path Traversal vulnerability

View chart →

ray-project/ray · GHSA-3pww-qvr8-6mhp

high2023-11-16

sharp vulnerability in libwebp dependency CVE-2023-4863

View chart →

lovell/sharp · GHSA-54xq-cgqr-rpm3

high2023-11-16

CVE-2023-48224-Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification

View chart →

ethyca/fides · GHSA-82vr-5769-6358

high2023-11-16

CVE-2023-26031-Apache Hadoop allows local user to gain root privileges

View chart →

apache/hadoop · GHSA-94jh-j374-9r3j

high2023-11-16

CVE-2023-47345-free5gc Buffer Overflow vulnerability

View chart →

free5gc/free5gc · GHSA-6944-6pmv-6mp2

medium2023-11-15

pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memory

View chart →

pmmp/raklib · GHSA-w98g-5fmx-wm4x

medium2023-11-15

CVE-2023-48219-TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes

View chart →

tinymce/tinymce · GHSA-v626-r774-j7f8

high2023-11-15

CVE-2023-48089-xxl-job-admin vulnerable to Remote Code Execution

View chart →

xuxueli/xxl-job · GHSA-x98f-2rgf-qwqh

high2023-11-15

CVE-2023-5720-Quarkus does not properly sanitize artifacts created from its use of the Gradle plugin, allowing certain build system information to remain

View chart →

quarkusio/quarkus · GHSA-p62q-5483-h57v

high2023-11-15

CVE-2023-5245-Zip slip in mleap

View chart →

combust/mleap · GHSA-897x-xvj8-42rq

medium2023-11-15

CVE-2023-48088-xxl-job-admin vulnerable to Cross Site Scripting

View chart →

xuxueli/xxl-job · GHSA-6733-7rp7-vf3m

medium2023-11-15

CVE-2023-48087-xxl-job-admin vulnerable to Insecure Permissions

View chart →

xuxueli/xxl-job · GHSA-3w8r-3jh9-89v9

high2023-11-15

CVE-2023-47637-Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()

View chart →

pimcore/pimcore · GHSA-72hh-xf79-429p

medium2023-11-15

CVE-2023-47636-pimcore/admin-ui-classic-bundle Full Path Disclosure via re-export document

View chart →

pimcore/admin-ui-classic-bundle · GHSA-c8hj-w239-5gvf

medium2023-11-15

CVE-2023-46121-yt-dlp Generic Extractor MITM Vulnerability via Arbitrary Proxy Injection

View chart →

yt-dlp/yt-dlp · GHSA-3ch3-jhc6-5r8x

high2023-11-15

CVE-2023-34062-In Reactor Netty HTTP Server a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack

View chart →

reactor/reactor-netty · GHSA-xjhv-p3fv-x24r

medium2023-11-15

CVE-2023-5189-Ansible galaxy-importer Path Traversal vulnerability

View chart →

ansible/galaxy-importer · GHSA-55g2-vm3q-7w52

high2023-11-14

CVE-2023-48217-Statamic CMS vulnerable to remote code execution via form uploads

View chart →

statamic/cms · GHSA-2r53-9295-3m86