Security advisories

medium2023-06-22

CVE-2023-34110-Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error

View chart →

dpgaspar/flask-appbuilder · GHSA-jhpr-j7cq-3jp3

high2023-06-22

CVE-2022-24839-org.nokogiri:nekohtml vulnerable to Uncontrolled Resource Consumption

View chart →

sparklemotion/nekohtml · GHSA-9849-p7jc-9rmv

critical2023-06-22

CVE-2023-36097-fuadmin vulnerable to insecure file upload

View chart →

funadmin/funadmin · GHSA-5m3m-q8cq-77g4

medium2023-06-22

CVE-2023-34927-Casdoor Cross-Site Request Forgery vulnerability

View chart →

casdoor/casdoor · GHSA-rwcp-qrwg-56cg

critical2023-06-22

CVE-2023-29931-laravel-s vulnerable to Local File Inclusion

View chart →

hhxsv5/laravel-s · GHSA-q2fp-jw87-86px

medium2023-06-22

CVE-2023-26115-word-wrap vulnerable to Regular Expression Denial of Service

View chart →

jonschlinkert/word-wrap · GHSA-j8xg-fqg3-53r7

critical2023-06-21

CVE-2023-34758-Silver vulnerable to MitM attack against implants due to a cryptography vulnerability

View chart →

bishopfox/sliver · GHSA-8jxm-xp43-qh3q

medium2023-06-21

CVE-2023-53159-`openssl` `X509VerifyParamRef::set_host` buffer over-read

View chart →

sfackler/rust-openssl · GHSA-xcf7-rvmh-g6q4

high2023-06-21

CVE-2023-35174-Livebook Desktop's protocol handler can be exploited to execute arbitrary command on Windows

View chart →

livebook-dev/livebook · GHSA-564w-97r7-c6p9

medium2023-06-21

memoffset allows reading uninitialized memory

View chart →

gilnaa/memoffset · GHSA-wfg4-322g-9vqv

high2023-06-21

passport-wsfed-saml2 Signature Bypass vulnerability

View chart →

auth0/passport-wsfed-saml2 · GHSA-5wrg-8fxp-cx9r

high2023-06-21

CVE-2023-35926-Backstage Scaffolder plugin has insecure sandbox

View chart →

backstage/backstage · GHSA-wg6p-jmpc-xjmr

high2023-06-21

CVE-2017-16897-passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 token

View chart →

auth0/passport-wsfed-saml2 · GHSA-77fw-rf4v-vfp9

critical2023-06-21

CVE-2023-35169-php-imap vulnerable to RCE through a directory traversal vulnerability

View chart →

webklex/php-imap · GHSA-47p7-xfcc-4pv9

medium2023-06-21

CVE-2023-34460-Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles

View chart →

tauri-apps/tauri · GHSA-wmff-grcw-jcfm

medium2023-06-21

CVE-2023-33725-Broadleaf vulnerable to Cross-site Scripting

View chart →

broadleafcommerce/broadleafcommerce · GHSA-3862-fmr3-4f3h

high2023-06-21

CVE-2023-34981-Apache Tomcat vulnerable to information leak

View chart →

apache/tomcat · GHSA-mppv-79ch-vw6q

critical2023-06-21

CVE-2023-34340-Apache Accumulo Improper Authentication vulnerability

View chart →

apache/accumulo · GHSA-hp5w-w29m-vg63

high2023-06-21

CVE-2022-25883-semver vulnerable to Regular Expression Denial of Service

View chart →

npm/node-semver · GHSA-c2qf-rxjj-qqgw

high2023-06-20

CVE-2023-35166-XWiki Platform vulnerable to privilege escalation (PR) from account through TipsPanel

View chart →

xwiki/xwiki-platform · GHSA-h7cw-44vp-jq7h