Security advisories

medium2023-07-10

CVE-2023-37905-ckeditor-wordcount-plugin vulnerable to Cross-site Scripting in Source Mode of Editor

View chart →

w8tcha/ckeditor-wordcount-plugin · GHSA-q9w4-w667-qqj4

medium2023-07-10

CVE-2023-3574-Pimcore Customer Management Framework vulnerable to Improper Authorization in Rules Controller

View chart →

pimcore/customer-data-framework · GHSA-vx35-f379-4q49

high2023-07-10

CVE-2023-37271-RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape

View chart →

zopefoundation/restrictedpython · GHSA-wqc8-x2pr-7jqh

critical2023-07-10

CVE-2023-37277-XWiki Platform vulnerable to cross-site request forgery (CSRF) via the REST API

View chart →

xwiki/xwiki-platform · GHSA-6xxr-648m-gch6

low2023-07-10

Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations

View chart →

eclipse/jetty.project · GHSA-58qw-p7qm-5rvh

low2023-07-10

sweetalert2 contains potentially undesirable behavior

View chart →

sweetalert2/sweetalert2 · GHSA-mrr8-v49w-3333

medium2023-07-10

CVE-2023-35887-Apache MINA SSHD information disclosure vulnerability

View chart →

apache/mina-sshd · GHSA-mjmq-gwgm-5qhm

medium2023-07-10

CVE-2023-3566-Wallabag vulnerable to Allocation of Resources Without Limits or Throttling

View chart →

wallabag/wallabag · GHSA-6qq7-3hqc-p5w4

low2023-07-10

CVE-2023-34442-Apache Camel information exposure vulnerability

View chart →

apache/camel · GHSA-6g2w-257v-3c9f

medium2023-07-10

CVE-2023-3565-TeamPass Cross-site Scripting vulnerability

View chart →

nilsteampassnet/teampass · GHSA-524r-w8fx-hqg3

high2023-07-08

CVE-2023-3553-TeamPass information exposure vulnerability

View chart →

nilsteampassnet/teampass · GHSA-2rhg-hqq9-8xjh

high2023-07-08

CVE-2023-3552-TeamPass vulnerable to Improper Encoding or Escaping of Output

View chart →

nilsteampassnet/teampass · GHSA-2cv5-qvq3-6276

critical2023-07-08

CVE-2023-3551-TeamPass Code Injection vulnerability

View chart →

nilsteampassnet/teampass · GHSA-97hm-2mfr-2p97

low2023-07-07

CVE-2023-37269-Winter CMS stored XSS through privileged upload of SVG file

View chart →

wintercms/winter · GHSA-wjw2-4j7j-6gc3

low2023-07-07

CVE-2023-37264-Pipelines do not validate child UIDs

View chart →

tektoncd/pipeline · GHSA-w2h3-vvvq-3m53

medium2023-07-07

Barberry Security Advisory - regarding x/auth periodic vesting accounts

View chart →

cosmos/cosmos-sdk · GHSA-j2cr-jc39-wpx5

high2023-07-07

CVE-2018-1000888-Archive_Tar contains Potential RCE if filename starts with phar://

View chart →

pear/archive_tar · GHSA-3q76-jq6m-573p

medium2023-07-07

CVE-2023-33008-Apache Johnzon Deserialization of Untrusted Data vulnerability

View chart →

apache/johnzon · GHSA-crqg-jrpj-fc84

medium2023-07-06

CVE-2023-36829-Sentry CORS misconfiguration

View chart →

getsentry/sentry · GHSA-4xqm-4p72-87h6

high2023-07-06

CVE-2023-3531-TeamPass Cross-site Scripting vulnerability

View chart →

nilsteampassnet/teampass · GHSA-pwrw-g29q-3mp8