Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-85j8-g29g-m326
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-gxcf-6h72-8gxf
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-p349-q795-qj4q
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-6g23-fww6-rfrj
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-h8jq-5737-hpcf
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-wgw2-wwq8-c7wf
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-4f79-fxh8-vgq2
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-gxxx-j8m7-hh7m
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-j67m-wpv6-pv44
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-vgxq-xv7f-jxjx
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-p97q-j98q-f98w
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-vwqh-cmvp-6694
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-ch84-pxpj-7hhm
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-wwm6-r38h-ppg7
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-5wrx-85mr-7hrg
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-gqh4-4r89-pr95
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-w4qx-vw2w-q566
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-jv5x-p843-g4qr
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-7cc5-cqmx-9v7g
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-5hxp-3237-j2hp
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-3fvw-g6mr-w247
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-8rqh-8726-83h7
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-frh8-wrx9-gc53
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-mqmp-4mcp-vg8v
    Fix available
    Packages

    org.apache.orc:orc

    Summary

    Apache ORC vulnerable to Uncontrolled Recursion

    Published
    13 May 2022
    GHSA-8gfq-c54m-3rf6
    Fix available
    Packages

    yiisoft/yii2

    Summary

    Yii Framework reflected Cross-site Scripting

    Published
    13 May 2022
    GHSA-6fxc-v8wq-849g
    Fix available
    Packages

    wpglobus/wpglobus

    Summary

    WPGlobus plugin Stored XSS & CSRF security vulnerability

    Published
    13 May 2022
    GHSA-r342-vjc4-wrmj
    No fix available
    Packages

    craftcms/cms

    Summary

    Craft CMS PHP Code Injection Vulnerability

    Published
    13 May 2022
    GHSA-q99w-j4mj-7hj8
    Fix available
    Packages

    contao/contao, contao/contao, contao/contao

    Summary

    Contao Information Disclosure via Access Control Flaws

    Published
    13 May 2022
    GHSA-rjc2-x53r-6c9r
    Fix available
    Packages

    baserproject/basercms

    Summary

    RCE in baserCMS before 4.1.4

    Published
    13 May 2022
    GHSA-h892-x453-86wc
    Fix available
    Packages

    ro.pippo:pippo-core, ro.pippo:pippo-session

    Summary

    Pippo RCE Vulnerability

    Published
    13 May 2022
    GHSA-9m72-pw47-292w
    Fix available
    Packages

    joomla/framework

    Summary

    Joomla RCE Vulnerability

    Published
    13 May 2022
    GHSA-4r78-hx75-jjj2
    Fix available
    Packages

    golang.org/x/net

    Summary

    golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer

    Published
    13 May 2022
    GHSA-2wp2-chmh-r934
    Fix available
    Packages

    golang.org/x/net

    Summary

    golang.org/x/net/html NULL Pointer Dereference vulnerability

    Published
    13 May 2022
    GHSA-fcf9-6fv2-fc5v
    Fix available
    Packages

    golang.org/x/net

    Summary

    golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer

    Published
    13 May 2022
    GHSA-5p4h-3377-7w67
    Fix available
    Packages

    golang.org/x/net

    Summary

    golang.org/x/net/html NULL Pointer Dereference vulnerability

    Published
    13 May 2022
    GHSA-8h7p-qjv8-9mp4
    No fix available
    Packages

    TelerikMvcExtensions

    Summary

    Improper Access Control in Telerik Extensions

    Published
    13 May 2022
    GHSA-x2w2-qgv6-8xrm
    Fix available
    Packages

    elefant/cms

    Summary

    Elefant CMS PHP Code Execution Vulnerability

    Published
    13 May 2022
    GHSA-hh92-wg7v-8vfr
    No fix available
    Packages

    gleez/cms

    Summary

    Gleez CMS Vulnerability Allows Forced Browsing to Profile Page of Other Users

    Published
    13 May 2022
    GHSA-6j9m-rp7m-3gfg
    Fix available
    Packages

    nystudio107/craft-seomatic

    Summary

    SEOmatic plugin for Craft CMS SSTI Vulnerability

    Published
    13 May 2022
    GHSA-3hx6-fqpj-xfjr
    No fix available
    Packages

    org.richfaces:richfaces-core

    Summary

    RichFaces vulnerable to Expression Language Injection

    Published
    13 May 2022
    GHSA-4j38-wjhf-884r
    No fix available
    Packages

    org.richfaces:richfaces-core

    Summary

    Arbitrary code execution in Richfaces

    Published
    13 May 2022
    GHSA-xh2j-q4mc-v522
    Fix available
    Packages

    moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

    Summary

    Moodle calculated question type allows remote code execution by Question authors

    Published
    13 May 2022
    GHSA-prhh-h793-h32r
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-wjmf-6x7g-xq67
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-6j62-m2vv-wc3m
    Fix available
    Packages

    dolibarr/dolibarr

    Summary

    Dolibarr arbitrary commands execution

    Published
    13 May 2022
    GHSA-3ccq-gccx-pm7j
    Fix available
    Packages

    org.jenkins-ci.plugins:sonar

    Summary

    Jenkins SonarQube Scanner Plugin stored server authentication token in plain text

    Published
    13 May 2022
    GHSA-798p-53r7-mgw9
    Fix available
    Packages

    org.jvnet.hudson.plugins:hipchat

    Summary

    Jenkins HipChat Plugin allows attackers with Overall/Read access to obtain credential IDs

    Published
    13 May 2022
    GHSA-cg6q-gp23-vwx8
    Fix available
    Packages

    org.jenkins-ci.plugins:crowd2

    Summary

    Jenkins Crowd 2 Integration Plugin stored credentials in plain text

    Published
    13 May 2022
    GHSA-cvh8-9j4x-5v4j
    Fix available
    Packages

    org.jenkins-ci.plugins:artifactory

    Summary

    Jenkins Artifactory Plugin stored old directly entered credentials unencrypted on disk

    Published
    13 May 2022
    GHSA-fpg6-xqj4-j7wf
    Fix available
    Packages

    org.jenkins-ci.plugins:jira

    Summary

    Jenkins Jira Plugin Incorrect Authorization vulnerability

    Published
    13 May 2022