Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-3mjj-mr4f-qxmx
    Fix available
    Packages

    mercurial

    Summary

    Mercurial mishandles integer addition and subtraction

    Published
    13 May 2022
    GHSA-3v62-ww8w-758m
    Fix available
    Packages

    mercurial

    Summary

    Mercurial Improper Input Validation vulnerability

    Published
    13 May 2022
    GHSA-4mr4-7vjv-9hm6
    Fix available
    Packages

    mercurial

    Summary

    Mercurial Incorrect Access Control vulnerability

    Published
    13 May 2022
    GHSA-9xv4-r2hf-26gh
    Fix available
    Packages

    mercurial

    Summary

    Mercurial Improper Input Validation vulnerability

    Published
    13 May 2022
    GHSA-vm6r-4p4v-232x
    Fix available
    Packages

    october/october

    Summary

    October CMS CSRF

    Published
    13 May 2022
    GHSA-gvgf-fp4m-2hw6
    Fix available
    Packages

    october/rain

    Summary

    OctoberCMS Cross-Site Scripting

    Published
    13 May 2022
    GHSA-q263-j3q9-g964
    No fix available
    Packages

    october/cms

    Summary

    October CMS PHP Code Execution

    Published
    13 May 2022
    GHSA-3p6c-9xhm-8x7h
    Fix available
    Packages

    october/october

    Summary

    October CMS XSS

    Published
    13 May 2022
    GHSA-8vh6-8w76-v6m3
    Fix available
    Packages

    october/october

    Summary

    October CMS File Upload Vulnerability

    Published
    13 May 2022
    GHSA-96mh-7xpr-qcgw
    Fix available
    Packages

    rainlab/blog-plugin

    Summary

    October CMS - RainLab Blog Plugin XSS

    Published
    13 May 2022
    GHSA-v7cr-w5v6-6659
    Fix available
    Packages

    october/october

    Summary

    October CMS Local File Inclusion

    Published
    13 May 2022
    GHSA-gjfx-9wx3-j6r7
    Fix available
    Packages

    org.apache.myfaces.core:myfaces-impl, org.apache.myfaces.core:myfaces-impl

    Summary

    Apache MyFaces Vulnerable to Path Traversal

    Published
    13 May 2022
    GHSA-q8cr-xphm-7gfv
    Fix available
    Packages

    akeneo/pim-community-dev, akeneo/pim-community-dev, akeneo/pim-community-dev

    Summary

    Akeneo PIM vulnerable to shell injection in the mass edition

    Published
    13 May 2022
    GHSA-v646-rx6w-r3qq
    Fix available
    Packages

    org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina

    Summary

    Improper Access Control in Apache Tomcat

    Published
    13 May 2022
    GHSA-qc72-gfvw-76h7
    Fix available
    Packages

    org.keycloak:keycloak-parent

    Summary

    Keycloak Oauth Implementation Error

    Published
    13 May 2022
    GHSA-x549-r7m8-gv63
    Fix available
    Packages

    salt, salt, salt

    Summary

    SaltStack Salt Remote command execution and incorrect access control when using salt-api

    Published
    13 May 2022
    GHSA-jx34-pppm-gjvr
    Fix available
    Packages

    salt, salt, salt

    Summary

    SaltStack Salt Directory Traversal vulnerability in salt-api

    Published
    13 May 2022
    GHSA-q7fx-wm2p-qfj8
    Fix available
    Packages

    github.com/hashicorp/consul

    Summary

    HashiCorp Consul vulnerable to Origin Validation Error

    Published
    13 May 2022
    GHSA-4223-qj94-7x9p
    Fix available
    Packages

    studio-42/elfinder

    Summary

    elFinder command injection vulnerability in the PHP connector

    Published
    13 May 2022
    GHSA-5m3w-rvvh-8fx6
    Fix available
    Packages

    joomla/joomla-cms

    Summary

    Joomla! Object Injection Vulnerability

    Published
    13 May 2022
    GHSA-fhm8-cxcv-pwvc
    Fix available
    Packages

    github.com/hashicorp/consul

    Summary

    HashiCorp Consul Access Restriction Bypass

    Published
    13 May 2022
    GHSA-hgq9-q8g2-3jmg
    Fix available
    Packages

    org.vivoweb:vitro-project

    Summary

    Command Injection in VIVO Vitro

    Published
    13 May 2022
    GHSA-c8wj-q36q-3wg4
    Fix available
    Packages

    phpmyadmin/phpmyadmin

    Summary

    phpMyAdmin Arbitrary file read vulnerability

    Published
    13 May 2022
    GHSA-3gx6-h57h-rm27
    Fix available
    Packages

    drupal/core, drupal/core, drupal/core, drupal/drupal, drupal/drupal, drupal/drupal

    Summary

    Drupal Core Remote Code Execution Vulnerability

    Published
    13 May 2022
    GHSA-v2rh-5v88-rgvh
    Fix available
    Packages

    moodle/moodle

    Summary

    Moodle context freezing

    Published
    13 May 2022
    GHSA-pj45-hp8h-289r
    Fix available
    Packages

    moodle/moodle, moodle/moodle

    Summary

    Moodle Secure layout contained an insecure link in Boost theme

    Published
    13 May 2022
    GHSA-v5rq-w2xm-7g5f
    Fix available
    Packages

    mysql-connector-python, mysql-connector-python

    Summary

    Improper Access Control in MySQL Connector Python

    Published
    13 May 2022
    GHSA-pprq-4488-wgqx
    Fix available
    Packages

    org.gradle:gradle-core

    Summary

    Insecure transport protocol in Gradle

    Published
    13 May 2022
    GHSA-qv5j-rwq3-m823
    No fix available
    Packages

    zoujingli/thinkadmin

    Summary

    ThinkAdmin Administrator cookies still working after password change

    Published
    13 May 2022
    GHSA-qxcg-xjjg-66mj
    Fix available
    Packages

    nokogiri

    Summary

    Nokogiri vulnerable to libxslt protection mechanism bypass

    Published
    13 May 2022
    GHSA-q4rr-64r9-fwgf
    Fix available
    Packages

    k8s.io/kubernetes, k8s.io/kubernetes, k8s.io/kubernetes, k8s.io/kubernetes

    Summary

    Kubernetes DoS Vulnerability

    Published
    13 May 2022
    GHSA-4g62-mfwx-4q48
    Fix available
    Packages

    slixmpp

    Summary

    slixmpp Incorrect Access Control

    Published
    13 May 2022
    GHSA-j99q-rwp6-498g
    Fix available
    Packages

    code.gitea.io/gitea

    Summary

    Gitea Arbitrary File Delete Vulnerability

    Published
    13 May 2022
    GHSA-q9qr-h33g-fw3j
    No fix available
    Packages

    nilsteampassnet/teampass

    Summary

    TeamPass Storing Passwords in a Recoverable Format vulnerability

    Published
    13 May 2022
    GHSA-qxmj-3c5h-546c
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore Memory Corruption Vulnerability

    Published
    13 May 2022
    GHSA-fv87-p7qr-xh5x
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore Memory Corruption Vulnerability

    Published
    13 May 2022
    GHSA-5rq3-9wc9-m9c3
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore Memory Corruption Vulnerability

    Published
    13 May 2022
    GHSA-2mmc-5phj-4wjj
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-hg36-rmmm-hc5r
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-rpfg-xf88-cq5r
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-6c6r-39cv-x5fq
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    Chakra JIT server Privilege Escalation

    Published
    13 May 2022
    GHSA-wwfw-m54g-gv72
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore information disclosure vulnerability

    Published
    13 May 2022
    GHSA-2m5h-6g38-jjf2
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-6x4f-5v4h-r29j
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-3w4v-qfqc-3433
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-2xrc-27mc-638q
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore Remote code execution Vulnerability

    Published
    13 May 2022
    GHSA-w9rv-wwxr-vc3q
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-5ggm-q98v-76hx
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-p9qf-56xw-h2vj
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-8f4c-h6m3-22rw
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022