Security advisories

medium2023-09-28

CVE-2023-43664-PrestaShop allows employee without any access rights to list all installed modules

View chart →

prestashop/prestashop · GHSA-gvrg-62jp-rf7j

medium2023-09-28

CVE-2023-43884-Subrion CMS Cross-site Scripting vulnerability

View chart →

intelliants/subrion · GHSA-7vff-rv2f-cj79

high2023-09-28

CVE-2023-38874-Economizzer remote code execution vulnerability

View chart →

gugoan/economizzer · GHSA-pq98-6hf6-3rj3

medium2023-09-28

CVE-2023-26149-quill-mention Cross-site Scripting vulnerability

View chart →

quill-mention/quill-mention · GHSA-jgw5-rp4p-qhp6

high2023-09-28

CVE-2023-38877-Economizzer host header injection vulnerability

View chart →

gugoan/economizzer · GHSA-hqp9-mrjw-7qq2

medium2023-09-28

CVE-2023-38871-Economizzer user enumeration vulnerability

View chart →

gugoan/economizzer · GHSA-h3qf-v68r-35jg

medium2023-09-28

CVE-2023-38873-Economizzer vulnerable to Clickjacking

View chart →

gugoan/economizzer · GHSA-gc95-5mmp-mp6j

critical2023-09-28

CVE-2023-26145-pydash Command Injection vulnerability

View chart →

dgilland/pydash · GHSA-8mjr-6c96-39w8

low2023-09-28

CVE-2023-38872-Economizzer Insecure Direct Object Reference vulnerability

View chart →

gugoan/economizzer · GHSA-896v-ph5w-379h

medium2023-09-28

CVE-2023-5244-Microweber Cross-site Scripting vulnerability

View chart →

microweber/microweber · GHSA-rgf9-j7gv-rq22

high2023-09-27

Imageflow affected by libwebp zero-day and should not be used with malicious source images.

View chart →

imazen/imageflow · GHSA-7vpr-3ppw-qrpj

high2023-09-27

@napi-rs/image affected by libwebp CVE

View chart →

brooooooklyn/image · GHSA-4vjr-crvh-383h

high2023-09-27

CVE-2023-43646-Chaijs/get-func-name vulnerable to ReDoS

View chart →

chaijs/get-func-name · GHSA-4q6p-r6v2-jvc5

medium2023-09-27

CVE-2023-40026-Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server

View chart →

argoproj/argo-cd · GHSA-6jqw-jwf5-rp8h

medium2023-09-27

CVE-2023-5192-Pimcore Demo Allows GraphQL Introspection

View chart →

pimcore/demo · GHSA-p76j-h4m8-hx5c

medium2023-09-27

CVE-2023-43830-Subrion CMS XSS in /panel/configuration/financial/

View chart →

intelliants/subrion · GHSA-q832-2275-rfqh

medium2023-09-27

CVE-2023-43828-Subrion CMS Cross-site Scripting vulnerability in /panel/languages

View chart →

intelliants/subrion · GHSA-4w2j-wj9q-6wpx

high2023-09-27

CVE-2023-3223-Undertow vulnerable to denial of service

View chart →

undertow-io/undertow · GHSA-65h2-wf7m-q2v8

high2023-09-27

CVE-2023-2315-OpenCart Path Traversal vulnerability

View chart →

opencart/opencart · GHSA-v4j2-cwmm-xg89

medium2023-09-27

CVE-2023-41333-Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy

View chart →

cilium/cilium · GHSA-4xp2-w642-7mcx