Security Advisories

medium2023-10-10

CVE-2023-44487-HTTP/2 Stream Cancellation Attack

View chart

apple/swift-nio-http2 · GHSA-qppj-fm5r-hxr3

medium2023-10-10

CVE-2023-45129-matrix-synapse vulnerable to denial of service due to malicious server ACL events

View chart

matrix-org/synapse · GHSA-5chr-wjw5-3gq4

high2023-10-10

CVE-2023-38171-Remote Denial of Service Vulnerability in Microsoft.Native.Quic.MsQuic.Schannel

View chart

microsoft/msquic · GHSA-xh5m-8qqp-c5x7

high2023-10-10

CVE-2023-41047-OctoPrint vulnerable to Improper Neutralization of Special Elements Used in a Template Engine

View chart

octoprint/octoprint · GHSA-fwfg-vprh-97ph

high2023-10-10

CVE-2023-36478-HTTP/2 HPACK integer overflow and buffer allocation

View chart

eclipse/jetty.project · GHSA-wgh7-54f2-x98r

medium2023-10-10

CVE-2022-35950-OroCommerce Cross-site Scripting vulnerability in add note dialog of Shopping List line item

View chart

oroinc/orocommerce · GHSA-2jc6-3fhj-8q84

medium2023-10-10

CVE-2023-42794-Apache Tomcat Incomplete Cleanup vulnerability

View chart

apache/tomcat · GHSA-jm7m-8jh6-29hp

medium2023-10-10

CVE-2023-42795-Apache Tomcat Incomplete Cleanup vulnerability

View chart

apache/tomcat · GHSA-g8pj-r55q-5c2v

high2023-10-10

CVE-2023-36414-Azure Identity SDK Remote Code Execution Vulnerability

View chart

azure/azure-sdk-for-net · GHSA-5mfx-4wcx-rv27

medium2023-10-10

CVE-2023-25822-Denial of service vulnerability on creating a Launch with too many recursively nested elements in reportportal

View chart

reportportal/reportportal · GHSA-mj24-gpw7-23m9

high2023-10-10

github.com/nghttp2/nghttp2 has HTTP/2 Rapid Reset

View chart

nghttp2/nghttp2 · GHSA-vx74-f528-fxqg

medium2023-10-10

CVE-2023-44763-ConcreteCMS vulnerable to Stored Cross-site Scripting

View chart

concretecms/concretecms · GHSA-wrp2-6v6j-hfmg

critical2023-10-09

CVE-2023-44467-langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method

View chart

langchain-ai/langchain · GHSA-gjjr-63x4-v8cq

high2023-10-09

CVE-2023-45363-MediaWiki Denial of Service vulnerability

View chart

wikimedia/mediawiki · GHSA-w5fx-cx7f-6vr9

medium2023-10-09

CVE-2023-43643-mXSS in AntiSamy

View chart

nahsra/antisamy · GHSA-pcf2-gh6g-h5r2

medium2023-10-06

CVE-2023-5452-Cross-site Scripting in snipe/snipe-it

View chart

snipe/snipe-it · GHSA-rr5c-69c9-gj9f

critical2023-10-06

CVE-2023-45311-Code injection in fsevents

View chart

fsevents/fsevents · GHSA-8r6j-v8pm-fqw3

high2023-10-06

CVE-2023-45282-Prototype Pollution in NASA Open MCT

View chart

nasa/openmct · GHSA-4xcx-cwrq-w792

high2023-10-06

Vulnerable version of libwebp and can be exploited with a malicious source image

View chart

imazen/resizer · GHSA-wqcr-xm43-hpqr

critical2023-10-06

CVE-2023-32188-JWT token compromise can allow malicious actions including Remote Code Execution (RCE)

View chart

neuvector/neuvector · GHSA-622h-h2p8-743x