Security advisories

high2023-09-19

CVE-2023-5060-Cross site scripting in librenms

View chart →

librenms/librenms · GHSA-2q8c-gqf4-mg3v

medium2023-09-19

CVE-2023-37611-Neos CMS Cross Site Scripting vulnerability

View chart →

neos/neos-development-collection · GHSA-6qjf-7g3j-qx25

critical2023-09-18

CVE-2023-33831-A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA

View chart →

frangoteam/fuxa · GHSA-r87q-fq37-pvr6

medium2023-09-18

CVE-2023-42441-Vyper has incorrect re-entrancy lock when key is empty string

View chart →

vyperlang/vyper · GHSA-3hg2-r75x-g69m

medium2023-09-18

CVE-2022-24093-Magento Open Source affected by Improper Input Validation

View chart →

magento/magento2 · GHSA-5xmp-7wg5-x68q

high2023-09-18

CVE-2023-5036-Cross-Site Request Forgery (CSRF) in usememos/memos

View chart →

usememos/memos · GHSA-2g7r-9xq5-c6hv

medium2023-09-16

CVE-2023-41626-Gradio arbitrary file upload vulnerability

View chart →

gradio-app/gradio · GHSA-v4q9-qgqf-7jwp

high2023-09-15

Directus affected by VM2 sandbox escape vulnerability

View chart →

directus/directus · GHSA-22rr-f3p8-5gf8

low2023-09-15

CVE-2023-41900-Jetty's OpenId Revoked authentication allows one request

View chart →

eclipse/jetty.project · GHSA-pwh8-58vv-vw48

medium2023-09-15

CVE-2023-4980-LibreNMS Cross-site Scripting vulnerability

View chart →

librenms/librenms · GHSA-qxrq-376q-p39h

medium2023-09-15

CVE-2023-4978-LibreNMS Cross-site Scripting vulnerability

View chart →

librenms/librenms · GHSA-qjpw-rg56-jh8v

medium2023-09-15

CVE-2023-4982-LibreNMS Cross-site Scripting vulnerability

View chart →

librenms/librenms · GHSA-m6jj-fgmh-3p8r

medium2023-09-15

CVE-2023-4979-LibreNMS Cross-site Scripting vulnerability

View chart →

librenms/librenms · GHSA-jp3c-g46v-jg2c

medium2023-09-15

CVE-2023-4981-LibreNMS Cross-site Scripting vulnerability

View chart →

librenms/librenms · GHSA-5jjm-qp48-qp86

medium2023-09-15

CVE-2023-4977-LibreNMS Code Injection vulnerability

View chart →

librenms/librenms · GHSA-57m2-mpc7-gwgx

medium2023-09-15

CVE-2023-4680-HashiCorp Vault Improper Input Validation vulnerability

View chart →

hashicorp/vault · GHSA-v84f-6r39-cpfc

medium2023-09-15

CVE-2023-41592-Froala Editor Cross-site Scripting vulnerability

View chart →

froala/wysiwyg-editor · GHSA-hvpq-7vcc-5hj5

low2023-09-14

CVE-2023-41880-Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64

View chart →

bytecodealliance/wasmtime · GHSA-gw5p-q8mj-p7gh

high2023-09-14

PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again)

View chart →

pmmp/pocketmine-mp · GHSA-92jh-gwch-jq38

high2023-09-14

PocketMine-MP server crash due to incorrect EC curve used for LoginPacket identityPublicKey

View chart →

pmmp/pocketmine-mp · GHSA-79rc-jjh6-rc89