Security advisories

medium2023-07-25

CVE-2024-23685-Hard-coded System User Credentials in Folio Data Export Spring module

View chart →

folio-org/mod-remote-storage · GHSA-m8v7-469p-5x89

high2023-07-25

CVE-2023-37920-Removal of e-Tugra root certificate

View chart →

certifi/python-certifi · GHSA-xqr8-7jwr-rhp7

critical2023-07-25

CVE-2023-26045-Path traversal and code execution via prototype vulnerability

View chart →

nodebb/nodebb · GHSA-vh2g-6c4x-5hmp

critical2023-07-25

CVE-2024-23687-Hard-coded System User Credentials in Folio Data Export Spring module

View chart →

folio-org/mod-data-export-spring · GHSA-vf78-3q9f-92g3

medium2023-07-25

CVE-2023-38496-Ineffective privileges drop when requesting container network

View chart →

apptainer/apptainer · GHSA-mmx5-32m4-wxvx

critical2023-07-25

CVE-2023-35088-SQL injection in audit endpoint

View chart →

apache/inlong · GHSA-r5pv-7g89-cxmc

high2023-07-25

CVE-2023-34434-JDBC URL bypassing by allowLoadLocalInfileInPath param

View chart →

apache/inlong · GHSA-pq67-9jf9-hc3c

medium2023-07-25

CVE-2023-34189-Apache InLong: General user can delete and update process

View chart →

apache/inlong · GHSA-86pw-4rqp-6x7v

low2023-07-24

Potential denial of service after connection migration

View chart →

aws/s2n-quic · GHSA-rfhg-rjfp-9q8q

critical2023-07-24

CVE-2023-34478-Path Traversal in Apache Shiro

View chart →

apache/shiro · GHSA-pmhc-2g4f-85cg

medium2023-07-21

CVE-2023-37901-Indico vulnerable to Cross-Site-Scripting via confirmation prompts

View chart →

indico/indico · GHSA-fmqq-25x9-c6hm

medium2023-07-21

copyparty vulnerable to reflected cross-site scripting via hc parameter

View chart →

9001/copyparty · GHSA-cw7j-v52w-fp5r

high2023-07-21

CVE-2023-3819-Pimcore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

View chart →

pimcore/pimcore · GHSA-r87r-982q-2c3q

high2023-07-21

CVE-2023-3820-Pimcore vulnerable to SQL Injection in Dataobjects sorting

View chart →

pimcore/pimcore · GHSA-c9hw-557q-f8hq

medium2023-07-21

CVE-2023-37916-KubePi may leak password hash of any user

View chart →

1panel-dev/kubepi · GHSA-87f6-8gr7-pc6h

critical2023-07-21

CVE-2023-37917-KubePi Privilege Escalation vulnerability

View chart →

1panel-dev/kubepi · GHSA-757p-vx43-fp9r

medium2023-07-21

CVE-2023-37918-Dapr API token authentication bypass in HTTP endpoints

View chart →

dapr/dapr · GHSA-59m6-82qm-vqgj

medium2023-07-21

CVE-2023-3822-Pimcore Cross-site Scripting vulnerability

View chart →

pimcore/pimcore · GHSA-vmpv-qjhq-r463

medium2023-07-21

CVE-2023-3821-Pimcore Cross-site Scripting vulnerability

View chart →

pimcore/pimcore · GHSA-78q2-cv3p-x9fm

high2023-07-20

CVE-2023-37649-Cockpit CMS vulnerable to incorrect access control

View chart →

cockpit-hq/cockpit · GHSA-9r25-4j77-9wc7