Security Advisories

high2023-10-31

CVE-2023-3955-Kubernetes privilege escalation vulnerability

View chart

kubernetes/kubernetes · GHSA-q78c-gwqw-jcmc

high2023-10-31

CVE-2023-3676-Kubernetes privilege escalation vulnerability

View chart

kubernetes/kubernetes · GHSA-7fxm-f474-hf8w

high2023-10-31

CVE-2023-46129-xkeys seal encryption used fixed key for all encryption

View chart

nats-io/nkeys · GHSA-mr45-rx8q-wcm9

medium2023-10-31

CVE-2023-43796-Synapse vulnerable to leak of remote user device information

View chart

matrix-org/synapse · GHSA-mp92-3jfm-3575

medium2023-10-31

CVE-2023-5873-Pimcore Cross-site Scripting vulnerability

View chart

pimcore/pimcore · GHSA-j59v-hh4p-q92m

medium2023-10-31

CVE-2023-5867-Cross-site Scripting (XSS) in thorsten/phpmyfaq

View chart

thorsten/phpmyfaq · GHSA-prrv-r843-4p75

high2023-10-31

CVE-2023-5864-phpMyFAQ Cross-site Scripting vulnerability

View chart

thorsten/phpmyfaq · GHSA-g5hp-328h-jj98

high2023-10-31

CVE-2023-5865-Insufficient Session Expiration in thorsten/phpmyfaq

View chart

thorsten/phpmyfaq · GHSA-f728-prhw-2g68

high2023-10-31

CVE-2015-20110-generator-jhipster allows a timing attack against validateToken due to a string comparison that stops at the first character

View chart

jhipster/generator-jhipster · GHSA-4gpm-r23h-gprw

medium2023-10-31

CVE-2023-5866-Sensitive cookie in HTTPS session without 'Secure' attribute in thorsten/phpmyfaq

View chart

thorsten/phpmyfaq · GHSA-34w4-wrqp-j47g

medium2023-10-31

CVE-2023-5863-phpMyFAQ Cross-site Scripting vulnerability

View chart

thorsten/phpmyfaq · GHSA-j4vj-w5rj-8grw

medium2023-10-31

CVE-2023-5861-Cross-site Scripting (XSS) in microweber/microweber

View chart

microweber/microweber · GHSA-7q5f-29gx-57ff

critical2023-10-31

CVE-2023-46502-OpenCRX allows a remote attacker to execute arbitrary code via a crafted request

View chart

opencrx/opencrx · GHSA-q74f-rf27-8hxc

medium2023-10-30

CVE-2023-5349-memory leak flaw was found in ruby-magick

View chart

rmagick/rmagick · GHSA-frgf-8jr5-j2jv

high2023-10-30

CVE-2023-46245-Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File

View chart

kimai/kimai · GHSA-fjhg-96cp-6fcw

medium2023-10-30

/sys/devices/virtual/powercap accessible by default to containers

View chart

moby/moby · GHSA-jq35-85cj-fj4p

high2023-10-30

CVE-2023-46240-CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment

View chart

codeigniter4/codeigniter4 · GHSA-hwxf-qxj7-7rfj

high2023-10-30

CVE-2023-46239-quic-go vulnerable to pointer dereference that can lead to panic

View chart

quic-go/quic-go · GHSA-3q6m-v84f-6p9h

medium2023-10-30

CVE-2023-5842-Cross-site Scripting (XSS) in dolibarr/dolibarr

View chart

dolibarr/dolibarr · GHSA-9pjf-jw9q-fx49

medium2023-10-30

CVE-2021-25736-Kube-proxy may unintentionally forward traffic

View chart

kubernetes/kubernetes · GHSA-35c7-w35f-xwgh