Security advisories

medium2023-05-31

CVE-2023-3009-nilsteampassnet/teampass vulnerable to cross-site scripting

View chart →

nilsteampassnet/teampass · GHSA-h5g9-2p35-54c7

medium2023-05-31

CVE-2023-26131-Algernon engine and themes vulnerable to Cross-site Scripting

View chart →

xyproto/algernon · GHSA-g47h-fgcw-g4ph

medium2023-05-31

CVE-2023-2998-thorsten/phpmyfaq vulnerable to cross-site scripting

View chart →

thorsten/phpmyfaq · GHSA-974q-4vvr-vg9c

medium2023-05-31

CVE-2023-2999-thorsten/phpmyfaq vulnerable to cross-site scripting

View chart →

thorsten/phpmyfaq · GHSA-94r7-63g8-c4jw

medium2023-05-30

Kyverno vulnerable due to usage of insecure cipher

View chart →

kyverno/kyverno · GHSA-hgv6-w7r3-w4qw

high2023-05-30

CVE-2023-1521-sccache vulnerable to privilege escalation if server is run as root

View chart →

mozilla/sccache · GHSA-x7fr-pg8f-93f5

high2023-05-30

CVE-2023-2968-proxy denial of service vulnerability

View chart →

tootallnate/proxy-agents · GHSA-mj6p-3pc9-wf5m

medium2023-05-30

CVE-2023-2981-go package pydio cells vulnerable to cross-site scripting

View chart →

pydio/cells · GHSA-wmfc-g86p-fjvr

medium2023-05-30

CVE-2023-2980-Abstrium Pydio Cells Resource Injection vulnerability

View chart →

pydio/cells · GHSA-j327-c69h-4gh8

medium2023-05-30

CVE-2023-2972-antfu/utils vulnerable to prototype pollution

View chart →

antfu/utils · GHSA-p2fh-2h23-6grg

critical2023-05-30

CVE-2023-34205-Signature validation bypass in github.com/moov-io/signedxml

View chart →

moov-io/signedxml · GHSA-jqvr-j2vg-gjrv

high2023-05-29

CVE-2023-30253-Dolibarr vulnerable to remote code execution via uppercase manipulation

View chart →

dolibarr/dolibarr · GHSA-9wqr-5jp4-mjmh

critical2023-05-27

CVE-2015-20108-ruby-saml vulnerable to XPath injection

View chart →

saml-toolkits/ruby-saml · GHSA-r364-2pj4-pf7f

high2023-05-27

CVE-2023-26128-keep-module-latest vulnerable to Command Injection due to missing input sanitization

View chart →

liujunyang/keep-module-latest · GHSA-wxrx-pc44-rcgc

high2023-05-27

CVE-2023-26127-n158 vulnerable to Command Injection due to improper input sanitization in the 'module.exports' function

View chart →

dsilva2401/n158 · GHSA-549h-r7g9-2qpf

critical2023-05-26

CVE-2023-33189-Pomerium vulnerable to Incorrect Authorization with specially crafted requests

View chart →

pomerium/pomerium · GHSA-pvrc-wvj2-f59p

medium2023-05-26

CVE-2023-33199-malformed proposed intoto entries can cause a panic

View chart →

sigstore/rekor · GHSA-frqx-jfcm-6jjr

high2023-05-26

CVE-2023-20883-Spring Boot Welcome Page Denial of Service

View chart →

spring-projects/spring-boot · GHSA-xf96-w227-r7c4

high2023-05-26

CVE-2023-33779-Privilege escalation in XXL-Job

View chart →

xuxueli/xxl-job · GHSA-9mmj-64jh-ph9c

medium2023-05-26

CVE-2023-2817-Stored cross site scripting in Craft CMS

View chart →

craftcms/cms · GHSA-7x94-jx75-3gh6