Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-g378-6fg4-gx3v
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition XSS Vulnerability

    Published
    24 May 2022
    GHSA-mhwc-4w67-xq2c
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento Cross-Site Scripting via store name

    Published
    24 May 2022
    GHSA-vx7m-v8v2-fhwm
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition XSS Vulnerability

    Published
    24 May 2022
    GHSA-wg25-j79r-v5wp
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento Cross-Site Scripting via Signifyd Guarantee Option Translation Override

    Published
    24 May 2022
    GHSA-x42g-82pp-4v6g
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento SQL injection vulnerability

    Published
    24 May 2022
    GHSA-xgcp-59g2-wm8g
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition Insecure Component

    Published
    24 May 2022
    GHSA-29mr-gr4c-vf9c
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition XSS Vulnerability

    Published
    24 May 2022
    GHSA-2x2q-2xpv-mcf9
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition SQLi Vulnerability

    Published
    24 May 2022
    GHSA-985w-mqqp-7287
    Fix available
    Packages

    magento/community-edition, magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition XSS Vulnerability

    Published
    24 May 2022
    GHSA-fp5m-4mqh-849p
    Fix available
    Packages

    magento/community-edition, magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition Insufficient Logging

    Published
    24 May 2022
    GHSA-hmch-9947-82rj
    Fix available
    Packages

    magento/community-edition, magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition Weak Cryptography

    Published
    24 May 2022
    GHSA-j63v-wcf9-c9hm
    Fix available
    Packages

    magento/community-edition, magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition RCE Vulnerability

    Published
    24 May 2022
    GHSA-v99w-jxr4-w6mc
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition XSS Vulnerability

    Published
    24 May 2022
    GHSA-x5q5-6wvf-2fpq
    Fix available
    Packages

    magento/community-edition, magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition Insufficient Logging

    Published
    24 May 2022
    GHSA-2cg3-w597-rjfv
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition Arbitrary File Deletion

    Published
    24 May 2022
    GHSA-2crc-5vq6-386r
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition RCE Vulnerability

    Published
    24 May 2022
    GHSA-32x5-6p4q-q8jh
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento Information Disclosure via File upload functionality

    Published
    24 May 2022
    GHSA-56hf-w8gm-448q
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition XSS Vulnerability

    Published
    24 May 2022
    GHSA-92ph-xm9v-cg3j
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento Broken authentication and session managememt

    Published
    24 May 2022
    GHSA-c4r2-3f9r-rwp8
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Weak PRNG

    Published
    24 May 2022
    GHSA-crv7-r357-gw3w
    Fix available
    Packages

    magento/community-edition, magento/community-edition, magento/community-edition, magento/project-community-edition

    Summary

    Magento 2 Community Edition RCE Vulnerability

    Published
    24 May 2022
    GHSA-gfcq-wh3g-c6h4
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition RCE Vulnerability

    Published
    24 May 2022
    GHSA-p9vf-4jx2-5hpp
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition Security Bypass

    Published
    24 May 2022
    GHSA-x72m-p4qc-p7rv
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition RCE Vulnerability via CSRF

    Published
    24 May 2022
    GHSA-653q-vqm6-gmjm
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition Arbitrary File Deletion

    Published
    24 May 2022
    GHSA-c92w-72c5-9x59
    Fix available
    Packages

    k8s.io/kube-state-metrics

    Summary

    kube-state-metrics may expose secret content in metrics

    Published
    24 May 2022
    GHSA-65p8-5423-fw3x
    Fix available
    Packages

    pimcore/pimcore

    Summary

    Pimcore XSS Vulnerability

    Published
    24 May 2022
    GHSA-hxp8-r9g3-grfr
    Fix available
    Packages

    org.elasticsearch:elasticsearch, org.elasticsearch:elasticsearch

    Summary

    Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch

    Published
    24 May 2022
    GHSA-6pq6-crw9-522h
    No fix available
    Packages

    cezerin

    Summary

    Cezerin Unauthorized Acces

    Published
    24 May 2022
    GHSA-rj7p-rfgp-852x
    Fix available
    Packages

    org.apache.thrift:libthrift

    Summary

    Loop with Unreachable Exit Condition in Apache Thrift

    Published
    24 May 2022
    UBUNTU-CVE-2022-21499
    Fix available
    Packages

    linux-hwe-edge, linux-aws-5.4, linux-azure-5.4, linux-dell300x, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux, linux-aws, linux-aws-5.13, linux-azure, linux-azure-5.13, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.13, linux-gke, linux-gkeop, linux-hwe-5.13, linux-hwe-5.15, linux-ibm, linux-intel-5.13, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-oem-5.14, linux-oracle, linux-oracle-5.13, linux-raspi, linux-aws-5.11, linux-aws-5.8, linux-azure-5.11, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.8, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-oem-5.17, linux-oem-6.0, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

    Summary

    Published
    24 May 2022
    GHSA-r34v-gqmw-qvgj
    Fix available
    Packages

    github.com/containers/podman/v4

    Summary

    Podman Symlink Vulnerability

    Published
    24 May 2022
    GHSA-v59p-p692-v382
    Fix available
    Packages

    zendframework/zendframework, zendframework/zendframework, zendframework/zend-db, zendframework/zend-db

    Summary

    Zend Framework Allows SQL Injection

    Published
    24 May 2022
    GHSA-59h8-h34r-q9cv
    Fix available
    Packages

    org.igniterealtime.openfire:parent

    Summary

    Ignite Realtime Openfire directory traversal vulnerability

    Published
    24 May 2022
    GHSA-mfjw-x4q4-69p9
    Fix available
    Packages

    org.igniterealtime.openfire:parent

    Summary

    Ignite Realtime Openfire vulnerable to Server Side Request Forgery

    Published
    24 May 2022
    GHSA-wvr4-w6cw-4px8
    Fix available
    Packages

    craftcms/cms

    Summary

    Craft CMS possibility of brute force attempts

    Published
    24 May 2022
    GHSA-9jwc-q6j3-8g9g
    Fix available
    Packages

    org.apache.poi:poi

    Summary

    Improper Restriction of XML External Entity Reference in Apache POI

    Published
    24 May 2022
    GHSA-g784-q3p3-26rm
    No fix available
    Packages

    hexo-admin

    Summary

    hexo-admin plugin for Node.js XSS Vulnerability

    Published
    24 May 2022
    GHSA-24w5-w6fw-qqx7
    No fix available
    Packages

    org.jenkins-ci.plugins:global-post-script

    Summary

    Jenkins Global Post Script Plugin missing permission check

    Published
    24 May 2022
    GHSA-6xw9-qq9h-cr68
    Fix available
    Packages

    org.jenkins-ci.plugins:dynatrace-dashboard

    Summary

    Jenkins Dynatrace Plugin vulnerable to Insufficiently Protected Credentials

    Published
    24 May 2022
    GHSA-f8w9-66fp-3jgw
    No fix available
    Packages

    org.jenkins-ci.plugins:build-metrics

    Summary

    Jenkins build-metrics Plugin reflected cross-site scripting vulnerability

    Published
    24 May 2022
    GHSA-hfjr-m75m-wmh7
    Fix available
    Packages

    org.jenkins-ci.plugins:zulip

    Summary

    Jenkins Zulip Plugin vulnerable to Insufficiently Protected Credentials

    Published
    24 May 2022
    GHSA-m36j-f2hf-qgj2
    Fix available
    Packages

    org.jenkins-ci.plugins:libvirt-slave

    Summary

    Jenkins Libvirt Slaves Plugin vlnerable to Incorrect Default Permissions

    Published
    24 May 2022
    GHSA-6fv3-w7j6-5xfc
    Fix available
    Packages

    org.jenkins-ci.plugins:sonar-gerrit

    Summary

    Jenkins Sonar Gerrit Plugin stores credentials unencrypted

    Published
    24 May 2022
    GHSA-6x2w-gwgf-5rg3
    No fix available
    Packages

    org.jenkins-ci.plugins:weblogic-deployer-plugin

    Summary

    Jenkins Deploy WebLogic Plugin cross-site request forgery vulnerability

    Published
    24 May 2022
    GHSA-7jf5-p556-75pr
    No fix available
    Packages

    com.elasticbox.jenkins-ci.plugins:kubernetes-ci

    Summary

    Jenkins Kubernetes CI/CD Plugin vulnerable to Credential Enumeration

    Published
    24 May 2022
    GHSA-84h6-jf8x-ff2j
    Fix available
    Packages

    org.jenkins-ci.plugins:bitbucket-oauth

    Summary

    Jenkins Bitbucket OAuth Plugin contains Insufficiently Protected Credentials

    Published
    24 May 2022
    GHSA-89vj-rqv8-7737
    No fix available
    Packages

    org.jenkins-ci.plugins:weblogic-deployer-plugin

    Summary

    Jenkins Deploy WebLogic Plugin missing permission check

    Published
    24 May 2022
    GHSA-8j3m-j6x6-cp5v
    Fix available
    Packages

    org.jenkins-ci.plugins:libvirt-slave

    Summary

    Jenkins Libvirt Slaves Plugin vlnerable to Credential Enumeration

    Published
    24 May 2022
    GHSA-cqjv-whwg-wh47
    Fix available
    Packages

    org.jenkins-ci.plugins:dynatrace-dashboard

    Summary

    Jenkins Dynatrace Plugin contains Incorrect Default Permissions

    Published
    24 May 2022