Security advisories

critical2023-11-03

Json response for search reveals Solr credentials

View chart →

ibexa/solr · GHSA-v6xp-ccvx-w52m

high2023-11-03

CVE-2023-45827-Prototype Pollution(PP) vulnerability in setByPath

View chart →

clickbar/dot-diver · GHSA-9w5f-mw3p-pj47

high2023-11-03

CVE-2023-39345-Unauthorized Access to Private Fields in User Registration API

View chart →

strapi/strapi · GHSA-gc7p-j5xm-xxh2

low2023-11-03

Download route allows filename change in eZpublish kernel

View chart →

ezsystems/ezpublish-kernel · GHSA-946c-f9w6-2c25

high2023-11-03

CVE-2023-3893-Kubernetes csi-proxy vulnerable to privilege escalation due to improper input validation

View chart →

kubernetes-csi/csi-proxy · GHSA-r6cc-7wj7-gfx2

high2023-11-03

CVE-2023-43665-Django Denial-of-service in django.utils.text.Truncator

View chart →

django/django · GHSA-h8gc-pgj2-vjm3

high2023-11-03

CVE-2023-44271-Pillow Denial of Service vulnerability

View chart →

python-pillow/pillow · GHSA-8ghj-p4vj-mr35

medium2023-11-03

CVE-2023-41164-Django Denial of service vulnerability in django.utils.encoding.uri_to_iri

View chart →

django/django · GHSA-7h4p-27mh-hmrw

high2023-11-02

CVE-2023-46725-FoodCoopShop Server-Side Request Forgery vulnerability

View chart →

foodcoopshop/foodcoopshop · GHSA-jhww-fx2j-3rf7

medium2023-11-02

CVE-2021-43849-cordova-plugin-fingerprint-aio DoS vulnerability

View chart →

niklasmerz/cordova-plugin-fingerprint-aio · GHSA-7vfx-hfvm-rhr8

medium2023-11-02

CVE-2023-46925-Reportico Cross-site Scripting vulnerability

View chart →

reportico-web/reportico · GHSA-9cw9-m7hg-w8mf

medium2023-11-02

CVE-2023-5917-phpBB's Smiley Pack acp_icons.php main pack vulnerable to cross site scripting

View chart →

phpbb/phpbb-app · GHSA-gmx8-8rff-qv6q

critical2023-11-02

CVE-2023-47204-transmute-core unsafe YAML deserialization vulnerability

View chart →

toumorokoshi/transmute-core · GHSA-w9cp-3x79-2p8p

high2023-11-02

CVE-2023-46695-Django potential denial of service vulnerability in UsernameField on Windows

View chart →

django/django · GHSA-qmf9-6jqf-j8fq

medium2023-11-01

CVE-2023-46722-Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews

View chart →

pimcore/admin-ui-classic-bundle · GHSA-jfxw-6c5v-c42f

high2023-11-01

CVE-2023-4197-Dolibarr Improper Input Validation vulnerability

View chart →

dolibarr/dolibarr · GHSA-r9cm-pw9j-3fpx

medium2023-11-01

CVE-2023-4198-Dolibarr Improper Input Validation vulnerability

View chart →

dolibarr/dolibarr · GHSA-48v2-596x-4jr9

medium2023-10-31

CVE-2023-46255-SpiceDB leaks information in log files when URI cannot be parsed

View chart →

authzed/spicedb · GHSA-jg7w-cxjv-98c2

medium2023-10-31

CVE-2023-5844-pimcore/admin-ui-classic-bundle Unverified Password Change

View chart →

pimcore/admin-ui-classic-bundle · GHSA-6f58-j323-6472

medium2023-10-31

CVE-2023-46250-Possible Infinite Loop when PdfWriter(clone_from) is used with a PDF

View chart →

py-pdf/pypdf · GHSA-wjcc-cq79-p63f