Open Source Vulnerabilities
Typecho Page manage-pages.php backdoor
dbt-core
dbt-core's secret env vars written to package-lock.json in plaintext
dbt-core
dbt-core's secret env vars written to package-lock.json in plaintext
Typecho Logo options-theme.php cross site scripting
com.jfinal:jfinal
Cross-site Scripting in JFinalCMS
com.jfinal:jfinal
Cross-site Scripting in JFinalCMS
com.jfinal:jfinal
Cross-site Scripting in JFinalCMS
candid
Candid infinite decoding loop through specially crafted payload
candid
Candid infinite decoding loop through specially crafted payload
openmage/magento-lts
Magento LTS vulnerable to Stored XSS via TinyMCE WYSIWYG Editor
openmage/magento-lts
Magento LTS vulnerable to Stored XSS via TinyMCE WYSIWYG Editor
dockerspawner
DockerSpawner allows any image by default
candid
Infinite decoding loop through specially crafted payload
candid
Infinite decoding loop through specially crafted payload
python-cryptography, python-cryptography, python-cryptography, python-cryptography, python-cryptography
python-cryptography security update
python-cryptography/ python-cryptography/ python-cryptography/ python-cryptography/ python-cryptography
python-cryptography security update
libtiff, libtiff, libtiff, libtiff, libtiff
libtiff security update
libtiff/ libtiff/ libtiff/ libtiff/ libtiff
libtiff security update
arm-trusted-firmware, arm-trusted-firmware, arm-trusted-firmware, arm-trusted-firmware, arm-trusted-firmware
arm-trusted-firmware security update
arm-trusted-firmware/ arm-trusted-firmware/ arm-trusted-firmware/ arm-trusted-firmware/ arm-trusted-firmware
arm-trusted-firmware security update
python-aiohttp, python-aiohttp, python-aiohttp, python-aiohttp, python-aiohttp
python-aiohttp security update
python-aiohttp/ python-aiohttp/ python-aiohttp/ python-aiohttp/ python-aiohttp
python-aiohttp security update
freeimage, freeimage, freeimage, freeimage, freeimage
freeimage security update
freeimage/ freeimage/ freeimage/ freeimage/ freeimage
freeimage security update
haproxy, haproxy, haproxy
haproxy security update
vim
Updated vim packages fix security vulnerabilities
rootcerts, nss, firefox, firefox-l10n
Updated firefox packages fix security vulnerabilities
rootcerts/ nss/ firefox/ firefox-l10n
Updated firefox packages fix security vulnerabilities
thunderbird, thunderbird-l10n
Updated thunderbird packages fix security vulnerabilities
thunderbird/ thunderbird-l10n
Updated thunderbird packages fix security vulnerabilities
mockjs
mockjs vulnerable to Prototype Pollution via the Util.extend function
mockjs
mockjs vulnerable to Prototype Pollution via the Util.extend function
microweber/microweber
Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method
microweber/microweber
Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method
