Security advisories

high2023-07-14

PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket

View chart →

pmmp/pocketmine-mp · GHSA-7wrv-6h42-w54f

high2023-07-14

CVE-2023-38325-cryptography mishandles SSH certificates

View chart →

pyca/cryptography · GHSA-cf7p-gm2m-833m

high2023-07-14

CVE-2023-3673-Pimcore SQL Injection vulnerability

View chart →

pimcore/pimcore · GHSA-rxp5-qwrf-pfv3

high2023-07-14

CVE-2023-3672-webmention.js Cross-site Scripting vulnerability

View chart →

plaidweb/webmention.js · GHSA-r54g-4qq6-chxg

high2023-07-14

CVE-2023-38286-Spring-boot-admin sandbox bypass via crafted HTML

View chart →

codecentric/spring-boot-admin · GHSA-7gj7-224w-vpr3

critical2023-07-14

CVE-2023-3668-Froxlor vulnerable to Improper Encoding or Escaping of Output

View chart →

froxlor/froxlor · GHSA-c6v5-pf66-xfq8

medium2023-07-13

Tokenizer vulnerable to client brute-force of token secrets

View chart →

superfly/tokenizer · GHSA-f28g-86hc-823q

medium2023-07-13

CVE-2023-37785-ImpressCMS Cross-site Scripting vulnerability

View chart →

impresscms/impresscms · GHSA-667r-p4gg-7m2q

high2023-07-13

CVE-2023-34458-mx-chain-go's relayed transactions always increment nonce

View chart →

multiversx/mx-chain-go · GHSA-j494-7x2v-vvvp

high2023-07-13

CVE-2023-37267-Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions

View chart →

umbraco/umbraco-cms · GHSA-h8wc-r4jh-mg7m

critical2023-07-13

CVE-2023-37466-vm2 Sandbox Escape vulnerability

View chart →

patriksimek/vm2 · GHSA-cchq-frgv-rjh5

critical2023-07-13

CVE-2023-37903-vm2 Sandbox Escape vulnerability

View chart →

patriksimek/vm2 · GHSA-g644-9gfx-q4q4

high2023-07-13

CVE-2023-37415-Apache Airflow Apache Hive Provider Improper Input Validation vulnerability

View chart →

apache/airflow · GHSA-4q2q-q5pw-2342

medium2023-07-12

CVE-2023-3635-Okio Signed to Unsigned Conversion Error vulnerability

View chart →

square/okio · GHSA-w33c-445m-f8w7

medium2023-07-12

iprange may panic when parsing ranges with invalid masks

View chart →

malfunkt/iprange · GHSA-f99h-w337-mv56

medium2023-07-12

CVE-2023-37280-Pimcore admin UI vulnerable to Cross-site Scripting in 2 factor authentication setup page

View chart →

pimcore/admin-ui-classic-bundle · GHSA-hqv9-6jqw-9g8m

high2023-07-12

CVE-2023-30428-Apache Pulsar Broker's Rest Producer vulnerable to Incorrect Authorization

View chart →

apache/pulsar · GHSA-j2r7-3rvw-g7gx

critical2023-07-12

CVE-2023-37582-RocketMQ NameServer component Code Injection vulnerability

View chart →

apache/rocketmq · GHSA-gpq8-963w-8qc9

high2023-07-12

CVE-2023-22887-Apache Airflow Path Traversal vulnerability

View chart →

apache/airflow · GHSA-ggwr-4vr8-g7wv

critical2023-07-12

CVE-2023-30429-Apache Pulsar Incorrect Authorization vulnerability

View chart →

apache/pulsar · GHSA-g9cv-v3v4-3h8r