Security advisories

medium2023-11-09

CVE-2023-5545-Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability

View chart →

moodle/moodle · GHSA-26fg-v32r-h663

high2023-11-09

CVE-2023-5540-Moodle Code Injection vulnerability

View chart →

moodle/moodle · GHSA-w8x2-w4qr-v3x4

medium2023-11-09

CVE-2023-5546-Moodle Cross-site Scripting vulnerability

View chart →

moodle/moodle · GHSA-9724-h8p7-r3jv

medium2023-11-09

CVE-2023-5542-Moodle Improper Access Control vulnerability

View chart →

moodle/moodle · GHSA-8mm2-m2gp-c6x2

medium2023-11-09

CVE-2023-5539-Moodle Code Injection vulnerability

View chart →

moodle/moodle · GHSA-3xxm-3g3c-w579

medium2023-11-09

CVE-2023-5541-Moodle Cross-site Scripting vulnerability

View chart →

moodle/moodle · GHSA-28gc-4qq5-8q26

high2023-11-09

CVE-2023-46446-AsyncSSH Rogue Session Attack

View chart →

ronf/asyncssh · GHSA-c35q-ffpf-5qpm

medium2023-11-09

CVE-2023-45885-NASA Open MCT Cross Site Scripting vulnerability

View chart →

nasa/openmct · GHSA-v8fc-qxvj-f3mg

medium2023-11-09

CVE-2023-45884-NASA Open MCT Cross Site Request Forgery (CSRF) vulnerability

View chart →

nasa/openmct · GHSA-4g88-4hgm-m99x

high2023-11-09

CVE-2023-46894-esptool allows attackers to view sensitive information via weak cryptographic algorithm

View chart →

espressif/esptool · GHSA-3f38-96qm-r3fw

medium2023-11-09

CVE-2023-46445-AsyncSSH Rogue Extension Negotiation

View chart →

ronf/asyncssh · GHSA-cfc2-wr2v-gxm5

low2023-11-09

Signing DynamoDB Sets when using the AWS Database Encryption SDK.

View chart →

aws/aws-database-encryption-sdk-dynamodb-java · GHSA-72fp-w44g-625q

medium2023-11-09

CVE-2023-47110-Any value can be changed in the configuration table by an employee having access to block reassurance module

View chart →

prestashop/blockreassurance · GHSA-xfm3-hjcc-gv78

critical2023-11-09

CVE-2023-43791-Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens

View chart →

humansignal/label-studio · GHSA-f475-x83m-rx5m

critical2023-11-09

CVE-2023-47248-PyArrow: Arbitrary code execution when loading a malicious data file

View chart →

apache/arrow · GHSA-5wvp-7f3h-6wmm

medium2023-11-08

CVE-2023-45857-Axios Cross-Site Request Forgery Vulnerability

View chart →

axios/axios · GHSA-wf5p-g6vw-rhxx

low2023-11-08

slsa-verifier vulnerable to mproper validation of npm's publish attestations

View chart →

slsa-framework/slsa-verifier · GHSA-r2xv-vpr2-42m9

medium2023-11-08

CVE-2023-47379-Microweber Cross-site Scripting vulnerability

View chart →

microweber/microweber · GHSA-jmwm-w2rm-prv9

medium2023-11-08

CVE-2023-47109-PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block

View chart →

prestashop/blockreassurance · GHSA-83j2-qhx2-p7jc

high2023-11-08

CVE-2023-47111-ZITADEL race condition in lockout policy execution

View chart →

zitadel/zitadel · GHSA-7h8m-vrxx-vr4m