Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-8w3f-236q-53m4
    Fix available
    Packages

    centreon/centreon

    Summary

    Centreon Cross-site Scripting Vulnerability

    Published
    14 May 2022
    GHSA-79hg-357g-rrgv
    Fix available
    Packages

    centreon/centreon, centreon/centreon

    Summary

    Centreon SQL Injection

    Published
    14 May 2022
    GHSA-5jxp-4x68-mhqc
    Fix available
    Packages

    centreon/centreon, centreon/centreon

    Summary

    Centreon SQL Injection

    Published
    14 May 2022
    GHSA-7g3c-hrc6-5v4j
    Fix available
    Packages

    centreon/centreon

    Summary

    Centreon XSS Vulnerability

    Published
    14 May 2022
    GHSA-w2xf-4gg9-87wr
    Fix available
    Packages

    centreon/centreon, centreon/centreon

    Summary

    Centreon allows SNMP trap SQL Injection

    Published
    14 May 2022
    GHSA-8vh5-j6xj-5953
    Fix available
    Packages

    centreon/centreon

    Summary

    Centreon XSS Vulnerability

    Published
    14 May 2022
    GHSA-c4fj-3wqq-g9c9
    Fix available
    Packages

    centreon/centreon

    Summary

    Centreon Command Injection

    Published
    14 May 2022
    GHSA-cpw3-x7gf-p872
    Fix available
    Packages

    org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

    Summary

    Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

    Published
    14 May 2022
    GHSA-w4xh-w33p-4v29
    Fix available
    Packages

    github.com/git-lfs/git-lfs

    Summary

    GitHub Git LFS Arbitrary command execution vulnerability

    Published
    14 May 2022
    GHSA-275c-v3rc-xghx
    Fix available
    Packages

    getkirby/cms, getkirby/cms, getkirby/cms

    Summary

    Kirby XSS Vulnerability

    Published
    14 May 2022
    GHSA-vqf9-v3hc-wr54
    Fix available
    Packages

    keycloak-httpd-client-install

    Summary

    keycloak-httpd-client-install symlink attack vulnerability

    Published
    14 May 2022
    GHSA-89c9-3758-737w
    Fix available
    Packages

    keycloak-httpd-client-install

    Summary

    keycloak-httpd-client-install Insecure Secrets

    Published
    14 May 2022
    GHSA-f57c-hx33-hvh8
    Fix available
    Packages

    activerecord

    Summary

    Active Record component in Ruby on Rails has a data-type injection vulnerability

    Published
    14 May 2022
    GHSA-rx7j-mw4c-76g9
    Fix available
    Packages

    authlogic

    Summary

    Authlogic Information Exposure vulnerability

    Published
    14 May 2022
    GHSA-prjv-jj26-wf8h
    Fix available
    Packages

    org.apache.struts:struts2-core

    Summary

    ClassLoader manipulation in Apache Struts

    Published
    14 May 2022
    GHSA-whmq-v94q-34p9
    Fix available
    Packages

    org.apache.struts:struts2-core

    Summary

    Improper Control of Generation of Code in Apache Struts

    Published
    14 May 2022
    GHSA-vrwc-qjmw-5rjm
    Fix available
    Packages

    org.apache.struts:struts2-core, org.apache.struts.xwork:xwork-core

    Summary

    ClassLoader manipulation in Apache Struts

    Published
    14 May 2022
    GHSA-3c5c-xrq4-qhr8
    Fix available
    Packages

    org.apache.struts:struts2-core

    Summary

    ClassLoader manipulation in Apache Struts

    Published
    14 May 2022
    GHSA-737w-mh58-cxjp
    Fix available
    Packages

    org.apache.struts:struts2-core, org.apache.struts.xwork:xwork-core

    Summary

    Arbitrary code execution in Apache Struts

    Published
    14 May 2022
    GHSA-8c6j-ffmf-q6vm
    Fix available
    Packages

    org.apache.struts:struts2-core, org.apache.struts:struts2-core, org.apache.struts:struts2-core

    Summary

    Apache Struts RCE Vulnerability

    Published
    14 May 2022
    GHSA-hmhq-382q-mp56
    Fix available
    Packages

    org.apache.struts:struts2-core

    Summary

    ClassLoader manipulation in Apache Struts

    Published
    14 May 2022
    GHSA-mmj6-cjj4-hpr5
    Fix available
    Packages

    org.apache.struts:struts2-core, org.apache.struts:struts2-core, org.apache.struts:struts2-core

    Summary

    Apache Struts vulnerable to arbitrary remote code execution due to improper input validation

    Published
    14 May 2022
    GHSA-44hv-jjx7-qfjg
    Fix available
    Packages

    org.apache.struts:struts2-convention-plugin, org.apache.struts:struts2-convention-plugin

    Summary

    Path Traversal in Apache Struts

    Published
    14 May 2022
    GHSA-4prj-vw9j-v6pr
    Fix available
    Packages

    org.apache.struts:struts2-core, org.apache.struts:struts2-rest-plugin

    Summary

    Arbitrary code execution in Apache Struts 2

    Published
    14 May 2022
    GHSA-w3r4-vx9w-f7p7
    Fix available
    Packages

    org.jenkins-ci.plugins:jobConfigHistory

    Summary

    Jenkins Job Config History Plugin reflected XSS vulnerability

    Published
    14 May 2022
    GHSA-876p-4wgc-75rx
    Fix available
    Packages

    org.apache.struts:struts2-core, org.apache.struts:struts2-core

    Summary

    Apache Struts RCE Vulnerability

    Published
    14 May 2022
    GHSA-w393-h95m-f879
    No fix available
    Packages

    CoreFtp

    Summary

    CoreFTP Directory Traversal

    Published
    14 May 2022
    CVE-2022-24831
    No fix available
    Packages

    Summary

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in OpenClinica

    Published
    14 May 2022
    GHSA-8gwc-x7mg-7p7p
    Fix available
    Packages

    org.apache.santuario:xmlsec, org.apache.santuario:xmlsec

    Summary

    Apache XML Security For Java vulnerable to Infinite Loop

    Published
    14 May 2022
    GHSA-h3ch-5pp2-vh6w
    Fix available
    Packages

    org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

    Summary

    Improper socket reuse in Apache Tomcat

    Published
    14 May 2022
    GHSA-jjf5-wx3j-3fv7
    Fix available
    Packages

    convict

    Summary

    Prototype Pollution in convict

    Published
    14 May 2022
    GHSA-ph28-wwfj-fv7f
    No fix available
    Packages

    sds

    Summary

    Prototype Pollution in sds

    Published
    14 May 2022
    GHSA-5875-m6jq-vf78
    Fix available
    Packages

    workspace-tools

    Summary

    Command injection in workspace-tools

    Published
    14 May 2022
    GHSA-vjq3-x3f2-fvxq
    Fix available
    Packages

    facturascripts/facturascripts

    Summary

    Account takeover in facturascripts

    Published
    14 May 2022
    DLA-3008-1
    Fix available
    Packages

    openssl

    Summary

    openssl - security update

    Published
    14 May 2022
    DLA-3007-1
    Fix available
    Packages

    imagemagick

    Summary

    imagemagick - security update

    Published
    14 May 2022
    DLA-3006-1
    Fix available
    Packages

    openjdk-8

    Summary

    openjdk-8 - security update

    Published
    14 May 2022
    CVE-2022-24830
    Fix available
    Packages

    Summary

    Path Traversal in OpenClinica

    Published
    13 May 2022
    CVE-2022-25862
    No fix available
    Packages

    Summary

    Published
    13 May 2022
    CVE-2022-22282
    No fix available
    Packages

    Summary

    Published
    13 May 2022
    CVE-2022-22281
    No fix available
    Packages

    Summary

    Published
    13 May 2022
    CVE-2022-1702
    No fix available
    Packages

    Summary

    Published
    13 May 2022
    CVE-2022-1701
    No fix available
    Packages

    Summary

    Published
    13 May 2022
    CVE-2022-21190
    Fix available
    Packages

    Summary

    Prototype Pollution

    Published
    13 May 2022
    CVE-2022-25865
    Fix available
    Packages

    Summary

    Command Injection

    Published
    13 May 2022
    CVE-2022-22393
    No fix available
    Packages

    Summary

    Published
    13 May 2022
    CVE-2022-22325
    No fix available
    Packages

    Summary

    Published
    13 May 2022
    CVE-2022-1715
    Fix available
    Packages

    Summary

    Account Takeover in neorazorx/facturascripts

    Published
    13 May 2022
    CVE-2022-29433
    No fix available
    Packages

    Summary

    Published
    13 May 2022
    CVE-2022-22252
    No fix available
    Packages

    Summary

    Published
    13 May 2022