Security Advisories

medium2023-11-08

CVE-2023-47114-Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages

View chart

ethyca/fides · GHSA-3vpf-mcj7-5h38

low2023-11-08

s2n-quic potential denial of service via crafted stream frames

View chart

aws/s2n-quic · GHSA-475v-pq2g-fp9g

low2023-11-08

CVE-2023-46737-Cosign vulnerable to possible endless data attack from attacker-controlled registry

View chart

sigstore/cosign · GHSA-vfp6-jrw2-99g9

critical2023-11-08

CVE-2023-46732-XWiki Platform vulnerable to reflected cross-site scripting through revision parameter in content menu

View chart

xwiki/xwiki-platform · GHSA-j9rc-w3wv-fv62

critical2023-11-08

CVE-2023-46731-XWiki Platform vulnerable to remote code execution through the section parameter in Administration as guest

View chart

xwiki/xwiki-platform · GHSA-62pr-qqf7-hh89

high2023-11-08

CVE-2023-39913-Apache UIMA Java SDK Deserialization of Untrusted Data, Improper Input Validation vulnerability

View chart

apache/uima-uimaj · GHSA-5r8j-qmcm-7g7q

medium2023-11-08

CVE-2023-4061-wildfly-core Exposure of Sensitive Information to an Unauthorized Actor vulnerability

View chart

wildfly/wildfly-core · GHSA-26qx-4m49-6cfr

low2023-11-07

rusty_paseto vulnerable to private key extraction due to ed25519-dalek dependency

View chart

rrrodzilla/rusty_paseto · GHSA-j57r-4qw6-58r3

critical2023-11-07

CVE-2023-46244-XWiki Platform privilege escalation from script right to programming right through title displayer

View chart

xwiki/xwiki-platform · GHSA-rmxw-c48h-2vf5

high2023-11-07

CVE-2023-46243-XWiki Platform vulnerable to privilege escalation and remote code execution via the edit action

View chart

xwiki/xwiki-platform · GHSA-g2qq-c5j9-5w5w

critical2023-11-07

CVE-2023-46242-XWiki Platform vulnerable to remote code execution via the edit action because it lacks CSRF token

View chart

xwiki/xwiki-platform · GHSA-hgpw-6p4h-j6h5

medium2023-11-07

CVE-2023-46254-capsule-proxy service discloses Namespaces of colliding tenants to owners of different tenants with the same ServiceAccount name

View chart

projectcapsule/capsule-proxy · GHSA-6758-979h-249x

medium2023-11-06

CVE-2023-5967-Mattermost denial of service vulnerability

View chart

mattermost/mattermost · GHSA-xvq6-h898-wcj8

medium2023-11-06

CVE-2023-5969-Mattermost vulnerable to excessive memory consumption

View chart

mattermost/mattermost · GHSA-w496-f5qq-m58j

medium2023-11-06

CVE-2023-5968-Mattermost password hash disclosure vulnerability

View chart

mattermost/mattermost · GHSA-r67m-mf7v-qp7j

high2023-11-06

CVE-2023-41378-Calico Typha denial of service vulnerability

View chart

projectcalico/calico · GHSA-5r5h-q934-cccp

low2023-11-05

CVE-2017-20187-Magnesium-PHP Injection vulnerability

View chart

floriangaerber/magnesium-php · GHSA-8pp6-5qpw-85g3

low2023-11-03

Ibexa ezplatform-kernel download route allows filename change

View chart

ezsystems/ezplatform-kernel · GHSA-gv2c-5g79-h73c

low2023-11-03

Ibexa DXP Download route allows filename change

View chart

ibexa/core · GHSA-g95c-xc83-8353

critical2023-11-03

Json response for search reveals Solr credentials

View chart

ezsystems/ezplatform-solr-search-engine · GHSA-7crc-r3wg-cfgf