Security advisories

critical2023-08-21

CVE-2023-40177-XWiki Platform privilege escalation (PR) from account through AWM content fields

View chart →

xwiki/xwiki-platform · GHSA-5mf8-v43w-mfxp

medium2023-08-21

CVE-2023-40176-XWiki Platform Stored Cross-site Scripting in the user profile via the timezone displayer

View chart →

xwiki/xwiki-platform · GHSA-h8cm-3v5f-rgp6

high2023-08-21

CVE-2023-40035-Craft CMS vulnerable to Remote Code Execution via validatePath bypass

View chart →

craftcms/cms · GHSA-44wr-rmwq-3phw

high2023-08-21

CVE-2023-39660-pandasai vulnerable to prompt injection

View chart →

gventuri/pandas-ai · GHSA-w832-v3c6-m6rg

high2023-08-21

CVE-2023-39106-Nacos Spring vulnerable to Unsafe Deserialization

View chart →

nacos-group/nacos-spring-project · GHSA-v6c8-pwhq-288m

high2023-08-21

CVE-2022-46751-Apache Ivy External Entity Reference vulnerability

View chart →

apache/ant-ivy · GHSA-2jc4-r94c-rp7h

medium2023-08-20

CVE-2023-4451-Cockpit Cross-site Scripting vulnerability

View chart →

cockpit-hq/cockpit · GHSA-g3mv-64h3-h482

high2023-08-19

CVE-2023-4432-Cockpit Cross-site Scripting vulnerability

View chart →

cockpit-hq/cockpit · GHSA-rmgx-3w4r-xcfp

high2023-08-19

CVE-2023-4433-Cockpit Cross-site Scripting vulnerability

View chart →

cockpit-hq/cockpit · GHSA-ff45-2jp9-69jc

medium2023-08-19

CVE-2023-40037-Apache NiFi Insufficient Property Validation vulnerability

View chart →

apache/nifi · GHSA-23qf-3jf9-h3q9

critical2023-08-18

CVE-2023-37914-XWiki Platform privilege escalation (PR)/RCE from account through Invitation subject/message

View chart →

xwiki/xwiki-platform · GHSA-7954-6m9q-gpvf

critical2023-08-18

CVE-2023-40175-Puma HTTP Request/Response Smuggling vulnerability

View chart →

puma/puma · GHSA-68xg-gqqm-vgj8

medium2023-08-18

CVE-2023-4422-Cockpit Cross-site Scripting vulnerability

View chart →

cockpit-hq/cockpit · GHSA-8m65-qq6g-43rr

medium2023-08-17

CVE-2023-40315-OpenNMS privilege escalation vulnerability

View chart →

opennms/opennms · GHSA-hf5p-f83x-5q2g

medium2023-08-17

CVE-2023-38905-Jeecg-boot SQL Injection vulnerability

View chart →

jeecgboot/jeecg-boot · GHSA-9v66-9239-cqv2

high2023-08-17

CVE-2023-40313-OpenNMS vulnerable to remote code execution

View chart →

opennms/opennms · GHSA-5m5f-qg8r-p9qf

high2023-08-17

CVE-2023-4395-Cockpit Cross-site Scripting vulnerability

View chart →

cockpit-hq/cockpit · GHSA-5cv4-48h7-7782

critical2023-08-17

CVE-2023-38894-tree-kit Prototype Pollution vulnerability

View chart →

cronvel/tree-kit · GHSA-5p42-m6f3-hpmj

high2023-08-16

CVE-2023-40033-Flarum vulnerable to LFI and Blind SSRF via Avatar upload

View chart →

flarum/framework · GHSA-67c6-q4j4-hccg

high2023-08-16

CVE-2023-40034-Woodpecker does not validate webhook before changing any data

View chart →

woodpecker-ci/woodpecker · GHSA-4gcf-5m39-98mc