Security advisories

high2023-08-04

CVE-2023-37896-Nuclei Path Traversal vulnerability

View chart →

projectdiscovery/nuclei · GHSA-2xx4-jj5v-6mff

medium2023-08-04

CVE-2023-38690-matrix-appservice-irc IRC command injection via admin commands containing newlines

View chart →

matrix-org/matrix-appservice-irc · GHSA-3pmj-jqqp-2mj3

medium2023-08-04

CVE-2023-38691-matrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs

View chart →

matrix-org/matrix-appservice-bridge · GHSA-vc7j-h8xg-fv5x

low2023-08-04

CVE-2023-38700-matrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged rooms

View chart →

matrix-org/matrix-appservice-irc · GHSA-c7hh-3v6c-fj4q

critical2023-08-04

CVE-2023-29689-PyroCMS remote code execution vulnerability

View chart →

pyrocms/pyrocms · GHSA-w7vm-4v3j-vgpw

critical2023-08-03

CVE-2023-36480-Aerospike Java Client vulnerable to unsafe deserialization of server responses

View chart →

aerospike/aerospike-client-java · GHSA-jj95-55cr-9597

critical2023-08-03

Soketi was exposed to Sandbox Escape vulnerability via vm2

View chart →

soketi/soketi · GHSA-g6w6-h933-4rc5

medium2023-08-03

CVE-2023-39343-Sulu Observable Response Discrepancy on Admin Login

View chart →

sulu/sulu · GHSA-wmwf-49vv-p3mr

medium2023-08-03

CVE-2023-4138-RDiffWeb vulnerable to Allocation of Resources Without Limits or Throttling

View chart →

ikus060/rdiffweb · GHSA-wwrg-2w5j-grvx

high2023-08-03

CVE-2023-4136-Cross-site Scripting (XSS) in CrafterCMS

View chart →

craftercms/engine · GHSA-jfm4-3vv3-fm4v

medium2023-08-03

CVE-2023-38697-protocol-http1 HTTP Request/Response Smuggling vulnerability

View chart →

socketry/protocol-http1 · GHSA-6jwc-qr2q-7xwj

medium2023-08-03

CVE-2023-3766-odoh-rs's Invalid Slice Split Results in Server Panic

View chart →

cloudflare/odoh-rs · GHSA-gpcv-p28p-fv2p

medium2023-08-03

CVE-2023-3348-Cloudflare Wrangler directory traversal vulnerability

View chart →

cloudflare/workers-sdk · GHSA-8c93-4hch-xgxp

medium2023-08-03

CVE-2023-38708-Pimcore Path Traversal Vulnerability in AssetController:importServerFilesAction

View chart →

pimcore/pimcore · GHSA-34hj-v8fm-x887

medium2023-08-03

CVE-2023-4145-pimcore/customer-management-framework-bundle Cross-site Scripting vulnerability in Segment name

View chart →

pimcore/customer-data-framework · GHSA-735f-w79p-282x

high2023-08-03

CVE-2023-38497-Cargo not respecting umask when extracting crate archives

View chart →

rust-lang/cargo · GHSA-j3xp-wfr4-hx87

medium2023-08-03

CVE-2023-4127-Answer has Race Condition within a Thread

View chart →

answerdev/answer · GHSA-52h8-c876-989c

high2023-08-03

CVE-2023-4124-Answer Missing Authorization vulnerability

View chart →

answerdev/answer · GHSA-v9vc-7x69-c2x8

high2023-08-03

CVE-2023-4125-Answer has Weak Password Requirements

View chart →

answerdev/answer · GHSA-j63x-f657-2m9g

medium2023-08-03

CVE-2023-4126-Answer Insufficient Session Expiration vulnerability

View chart →

answerdev/answer · GHSA-ggcf-hwxp-rc77