Security advisories

critical2023-10-16

CVE-2023-43668-Authorization Bypass in Apache InLong

View chart →

apache/inlong · GHSA-rp6x-ggw6-8g56

medium2023-10-16

CVE-2023-4822-Grafana privilege escalation vulnerability

View chart →

grafana/grafana · GHSA-fw9c-75hh-89p6

high2023-10-16

CVE-2023-43667-SQL Injection in Apache InLong

View chart →

apache/inlong · GHSA-fpcf-qr79-hjqp

high2023-10-16

CVE-2023-5591-SQL injection in librenms/librenms

View chart →

librenms/librenms · GHSA-mr6h-7x2m-rgmq

low2023-10-16

CVE-2023-5588-Pleroma Path Traversal vulnerability

View chart →

kphrx/pleroma · GHSA-2c28-m2m7-mf55

medium2023-10-15

CVE-2018-25091-Authorization Header forwarded on redirect

View chart →

urllib3/urllib3 · GHSA-gwvm-45gx-3cf8

medium2023-10-14

CVE-2023-42792-Apache Airflow vulnerable to privilege escalation

View chart →

apache/airflow · GHSA-j3w8-2p2h-mrr9

medium2023-10-14

CVE-2023-45348-Apache Airflow vulnerable to sensitive information exposure when expose-config is set to non-sensitive-only

View chart →

apache/airflow · GHSA-fpxx-xv4c-gxqp

medium2023-10-14

CVE-2023-42780-Apache Airflow vulnerable to sensitive information exposure when users list warnings for all DAGs

View chart →

apache/airflow · GHSA-cgx2-rrmr-jx43

medium2023-10-14

CVE-2023-42663-Apache Airflow vulnerable to sensitive information exposure

View chart →

apache/airflow · GHSA-32wr-qqw6-5mfp

high2023-10-14

CVE-2023-26155-node-qpdf vulnerable to command injection

View chart →

nrhirani/node-qpdf · GHSA-fpr8-4wvx-j9q3

critical2023-10-14

CVE-2023-45853-pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency

View chart →

smihica/pyminizip · GHSA-mq29-j5xf-cjwr

medium2023-10-13

CVE-2023-28635-Defining resource name as integer may give unintended access in vantage6

View chart →

vantage6/vantage6 · GHSA-7x94-6g2m-3hp2

medium2023-10-13

CVE-2023-41882-Improper Access Control in vantage6

View chart →

vantage6/vantage6 · GHSA-gc57-xhh5-m94r

high2023-10-13

CVE-2023-23930-Pickle serialization vulnerable to Deserialization of Untrusted Data

View chart →

vantage6/vantage6 · GHSA-5m22-cfq9-86x6

medium2023-10-13

CVE-2023-4829-Cross-site Scripting (XSS) in froxlor/froxlor

View chart →

froxlor/froxlor · GHSA-cvwv-h85m-w37h

critical2023-10-13

CVE-2023-5572-Server-Side Request Forgery (SSRF) in vriteio/vrite

View chart →

vriteio/vrite · GHSA-w35p-wxwj-rcm9

medium2023-10-13

CVE-2023-5573-Allocation of Resources Without Limits or Throttling in vriteio/vrite

View chart →

vriteio/vrite · GHSA-5ghm-h2wq-g3mh

medium2023-10-13

CVE-2023-5571-Improper Input Validation in vriteio/vrite

View chart →

vriteio/vrite · GHSA-44ff-9w4f-99w6

medium2023-10-13

CVE-2023-38249-Magento Open Source allows SQL Injection

View chart →

magento/magento2 · GHSA-rq36-9f5f-2gw7