Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Critical Security Advisories

Loading...
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThoNGotdm0zci12Y3Ez
Use after free in rusqlite
Ecosystems: cargo
Packages: rusqlite
Source: GitHub Advisory Database
Blast Radius: 33.8
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXAycTktOWNxNi1oM2p3
Out of bounds read in Ozone
Ecosystems: cargo
Packages: ozone
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEzY2MtN3A3Zy0zOTJj
Use after free in rusqlite
Ecosystems: cargo
Packages: rusqlite
Source: GitHub Advisory Database
Blast Radius: 33.8
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW0zd3ctN2hycC1ndzl3
Drop of uninitialized memory in Ozone
Ecosystems: cargo
Packages: ozone
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdjamMtaHZ4Zi1ncWg3
Use after free and double free in bitvec
Ecosystems: cargo
Packages: bitvec
Source: GitHub Advisory Database
Blast Radius: 39.2
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThyN3EtcjlteC0zNXJo
Mishandling of format strings in rusqlite
Ecosystems: cargo
Packages: rusqlite
Source: GitHub Advisory Database
Blast Radius: 33.8
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTN2am0tMzZyci03cXJx
NULL Pointer Dereference in cbox
Ecosystems: cargo
Packages: cbox
Source: GitHub Advisory Database
Blast Radius: 6.8
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc0dzctM3FyOC01NjIz
Improper type usage in rusqlite
Ecosystems: cargo
Packages: rusqlite
Source: GitHub Advisory Database
Blast Radius: 33.8
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThyYzUtbXI0Zi1tMjQz
Use after free in rio
Ecosystems: cargo
Packages: rio
Source: GitHub Advisory Database
Blast Radius: 16.1
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWd4NzMtMjQ5OC1yNTVj
Unsound casting in flatbuffers
Ecosystems: cargo
Packages: flatbuffers
Source: GitHub Advisory Database
Blast Radius: 28.9
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZyaHgtaHF4bS04cDM2
Double free in http
Ecosystems: cargo
Packages: http
Source: GitHub Advisory Database
Blast Radius: 45.4
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI5OHItajI1cS1ybXBy
Rust Failure Crate Vulnerable to Type confusion
Ecosystems: cargo
Packages: failure
Source: GitHub Advisory Database
Blast Radius: 40.7
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM5MzMtd3ZqZi1wY3Zj
Out of bounds access in lucet-runtime-internals
Ecosystems: cargo
Packages: lucet-runtime-internals
Source: GitHub Advisory Database
Blast Radius: 6.4
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWd2NzMtOW13di1md2dx
Out of bounds write in prost
Ecosystems: cargo
Packages: prost
Source: GitHub Advisory Database
Blast Radius: 38.1
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWgzcXItcnEyai03NHc0
HTTP Request Smuggling in hyper
Ecosystems: cargo
Packages: hyper
Source: GitHub Advisory Database
Blast Radius: 44.9
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdydmMtNzJ3Ny14cG1q
Incorrect Comparison in sodiumoxide
Ecosystems: cargo
Packages: sodiumoxide
Source: GitHub Advisory Database
Blast Radius: 28.6
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFwanItY2g3Mi0ycXE0
Use after free in portaudio-rs
Ecosystems: cargo
Packages: portaudio-rs
Source: GitHub Advisory Database
Blast Radius: 15.5
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc0cnctOG01cS02NDUz
Out of bounds access in rgb
Ecosystems: cargo
Packages: rgb
Source: GitHub Advisory Database
Blast Radius: 30.0
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI0M2gtZ21ybS1oNWM5
Access of Uninitialized Pointer in linked-hash-map
Ecosystems: cargo
Packages: linked-hash-map
Source: GitHub Advisory Database
Blast Radius: 42.5
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1tN3YtdnB2OC14ZmMz
Double free in smallvec
Ecosystems: cargo
Packages: smallvec
Source: GitHub Advisory Database
Blast Radius: 47.3
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJwY20td2hxYy1qZnc4
Use after free in libflate
Ecosystems: cargo
Packages: libflate
Source: GitHub Advisory Database
Blast Radius: 33.4
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZoZnItdjR3OS00NXY4
Improper Input Validation in renderdoc
Ecosystems: cargo
Packages: renderdoc
Source: GitHub Advisory Database
Blast Radius: 12.5
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdqMzYtZ2M0ci05eDNy
Out of bounds access in compact_arena
Ecosystems: cargo
Packages: compact_arena
Source: GitHub Advisory Database
Blast Radius: 9.4
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW0ycGYtaHBycC0zdnFt
Use after free in image
Ecosystems: cargo
Packages: image
Source: GitHub Advisory Database
Blast Radius: 41.1
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVycnYtbTM2aC1xd2Y4
Use-after-free in chttp
Ecosystems: cargo
Packages: chttp
Source: GitHub Advisory Database
Blast Radius: 6.8
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR4MjUtcHZody01MjI0
Algorithms compute incorrect results in blake2
Ecosystems: cargo
Packages: blake2
Source: GitHub Advisory Database
Blast Radius: 36.9
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo1Mm0tNDg5eC12NjM0
Double free in linea
Ecosystems: cargo
Packages: linea
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWMzbTMtYzM5cS1wdjIz
Out of bounds write in slice-deque
Ecosystems: cargo
Packages: slice-deque
Source: GitHub Advisory Database
Blast Radius: 29.5
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY5Z3ctaGdqMy00NW03
Memory corruption in smallvec
Ecosystems: cargo
Packages: smallvec
Source: GitHub Advisory Database
Blast Radius: 47.3
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhqeGMtdmZ3Mi1jZzk2
Use after free in openssl
Ecosystems: cargo
Packages: openssl
Source: GitHub Advisory Database
Blast Radius: 43.6
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY5ZnYtZ3c2Zy04Y2Nn
Potential memory corruption in arrayfire
Ecosystems: pypi, cargo
Packages: arrayfire
Source: GitHub Advisory Database
Blast Radius: 20.7
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ2NzgtajU5aC1mbXBm
Heap overflow or corruption in safe-transmute
Ecosystems: cargo
Packages: safe-transmute
Source: GitHub Advisory Database
Blast Radius: 25.2
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWMzY3ctYzM4Ny1wajY1
Double free in crossbeam
Ecosystems: cargo
Packages: crossbeam
Source: GitHub Advisory Database
Blast Radius: 38.2
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhyM2MtNm1tcC02bTM5
Memory corruption slice-deque
Ecosystems: cargo
Packages: slice-deque
Source: GitHub Advisory Database
Blast Radius: 29.5
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJ4cjQteDU1OC14N2h3
Double free in smallvec
Ecosystems: cargo
Packages: smallvec
Source: GitHub Advisory Database
Blast Radius: 47.3
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXgyeGctNndjai02eGY5
SafeCurl before 0.9.2 has a DNS rebinding vulnerability.
Ecosystems: packagist
Packages: vanilla/safecurl
Source: GitHub Advisory Database
Blast Radius: 11.8
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI2angtOWc0OC0ycjVy
Arbitrary code execution due to YAML deserialization
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Blast Radius: 45.8
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh3dnEtNmdqeC1qNzk3
Special Element Injection in notebook
Ecosystems: pypi
Packages: notebook
Source: GitHub Advisory Database
Blast Radius: 47.8
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE1dmgtNndody14NzQ1
Improper Authorization and Origin Validation Error in OneFuzz
Ecosystems: pypi
Packages: onefuzz
Source: GitHub Advisory Database
Blast Radius: 9.5
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTloeDgtMm1ydi1yNjc0
Deserialization of Untrusted Data in Apache jUDDI
Ecosystems: maven
Packages: org.apache.juddi:juddi-core
Source: GitHub Advisory Database
Blast Radius: 13.5
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNoM3ItdnA0Ni04ZzIy
Code injection in topthink/think
Ecosystems: packagist
Packages: topthink/think
Source: GitHub Advisory Database
Blast Radius: 13.7
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc0eGctZnhtZy12Y2c1
OS command injection in ripgrep
Ecosystems: cargo
Packages: grep-cli, ripgrep
Source: GitHub Advisory Database
Blast Radius: 22.4
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY3MjYtM3ZnOS1jcDM0
Missing Authorization in FastReport
Ecosystems: nuget
Packages: FastReport.OpenSource
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh2NTMtcTc2Yy03Zjhj
OS Command Injection in OpenTSDB
Ecosystems: maven
Packages: net.opentsdb:opentsdb
Source: GitHub Advisory Database
Blast Radius: 22.0
Published: over 2 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNmeHAtdnd4bS0ycjVw
Command injection in gitlogplus
Ecosystems: npm
Packages: gitlogplus
Source: GitHub Advisory Database
Blast Radius: 10.9
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg4NngtbXY2Ni1ncjVx
OS Command Injection in Locutus
Ecosystems: npm
Packages: locutus
Source: GitHub Advisory Database
Blast Radius: 36.2
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFjMzYtcTIycS1jancz
SMTP command injection in lettre
Ecosystems: cargo
Packages: lettre
Source: GitHub Advisory Database
Blast Radius: 27.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXgyajctNmh4bS04N3Az
Craft CMS Remote Code Injection
Ecosystems: packagist
Packages: craftcms/cms
Source: GitHub Advisory Database
Blast Radius: 33.7
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhjMzMtMzJ2dy1ycHA5
Remote Code Execution Vulnerability in Session Storage
Ecosystems: maven
Packages: io.ratpack:ratpack-core
Source: GitHub Advisory Database
Blast Radius: 23.5
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdnZmctNjkzNC1tcXEy
Improper Authenication in Pion DTLS
Ecosystems: go
Packages: github.com/pion/dtls
Source: GitHub Advisory Database
Blast Radius: 17.4
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNmNTUtcnE4eC1obTZm
Path Traversal in Dutchcoders transfer.sh
Ecosystems: go
Packages: github.com/dutchcoders/transfer.sh
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW02Z3gtcmh2ai1maDUy
Denial of service in go-ethereum due to CVE-2020-28362
Ecosystems: go
Packages: github.com/ethereum/go-ethereum
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY4NWMtaGdxNS03cGZ3
Arbitrary Command Injection
Ecosystems: npm
Packages: wincred
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlmNDYtNXIyNS01d2Zt
Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem
Ecosystems: packagist
Packages: league/flysystem
Source: GitHub Advisory Database
Blast Radius: 55.4
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdyOTYtOGczeC1nMzZt
Improper Verification of Cryptographic Signature
Ecosystems: npm
Packages: tenvoy
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTRocTgtZ214eC1oNnc5
XML Processing error in github.com/crewjam/saml
Ecosystems: go
Packages: github.com/crewjam/saml
Source: GitHub Advisory Database
Blast Radius: 28.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTQzM3ctbW02aC1ydjlw
Auth bypass in SAML provider
Ecosystems: go
Packages: github.com/netlify/gotrue
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU5OWgtOHdwai03NXhq
Authentication Bypass in tyk-identity-broker
Ecosystems: go
Packages: github.com/tyktechnologies/tyk-identity-broker
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg2cjktMzlqOS05OXdw
Elliptic Curve Key Disclosure in go-jose
Ecosystems: go
Packages: github.com/square/go-jose, gopkg.in/square/go-jose.v1
Source: GitHub Advisory Database
Blast Radius: 25.4
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTMyd3ItOHd4bS04NTJj
Deserialization of Untrusted Data in NukeViet
Ecosystems: packagist
Packages: nukeviet/nukeviet
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE0cXYtZm13Yy1xeHB4
SQL Injection in NukeViet
Ecosystems: packagist
Packages: nukeviet/nukeviet
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTMzcnYtbTJncC1tbTJy
Prototype pollution in safe-flat
Ecosystems: npm
Packages: safe-flat
Source: GitHub Advisory Database
Blast Radius: 17.4
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdwZ2gtaG12NC1yM3Y1
Prototype pollution in safe-obj
Ecosystems: npm
Packages: safe-obj
Source: GitHub Advisory Database
Blast Radius: 15.6
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWp2MzUteHFnNy1mOTJy
set-getter Prototype Pollution Vulnerability
Ecosystems: npm
Packages: set-getter
Source: GitHub Advisory Database
Blast Radius: 48.1
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXgzd3ItdjR3eC01cXBj
Prototype Pollution
Ecosystems: npm
Packages: expand-hash
Source: GitHub Advisory Database
Blast Radius: 16.7
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV3MjUtaHhwNS1oOGM5
Improper Verification of Cryptographic Signature
Ecosystems: npm
Packages: tenvoy
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1qNjMtNjR4Ny01N3hm
Path traversal in impacket
Ecosystems: pypi
Packages: impacket
Source: GitHub Advisory Database
Blast Radius: 29.5
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhwcjYtZjR2cS1teGNo
Command injection in LocalStack
Ecosystems: pypi
Packages: localstack
Source: GitHub Advisory Database
Blast Radius: 18.9
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW13M3ItcGZtZy14cDky
Improper Restriction of Recursive Entity References in Apache XMLBeans
Ecosystems: maven
Packages: org.apache.xmlbeans:xmlbeans
Source: GitHub Advisory Database
Blast Radius: 35.6
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1tOGotOXg4NC1tOWN2
Arbitrary code injection in json-sanitizer
Ecosystems: maven
Packages: com.mikesamuel:json-sanitizer
Source: GitHub Advisory Database
Blast Radius: 19.5
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1qOHgtY3ByOC14Mzlo
Remote code execution in Apache Tapestry
Ecosystems: maven
Packages: org.apache.tapestry:tapestry-core
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJmODgtNWhnOC05eDJ4
Origin Validation Error in Apache Maven
Ecosystems: maven
Packages: org.apache.maven:maven-core, org.apache.maven:maven-compat
Source: GitHub Advisory Database
Blast Radius: 38.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZqcXctcjN3dy13ajJ3
Expression Language Injection in Apache Syncope
Ecosystems: maven
Packages: org.apache.syncope:syncope-core
Source: GitHub Advisory Database
Blast Radius: 9.4
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdwaDMtNDRyai05MnBy
elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE
Ecosystems: packagist
Packages: studio-42/elfinder
Source: GitHub Advisory Database
Blast Radius: 30.7
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhtMnAtZmh3eC05Mjg1
Incorrect Permission Assignment for Critical Resource in Plone
Ecosystems: pypi
Packages: Plone
Source: GitHub Advisory Database
Blast Radius: 8.5
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTh3d2YtMjY0NC1mOHg0
The Fuck Arbitrary File Deletion via Path Traversal
Ecosystems: pypi
Packages: thefuck
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1oODItNTVjbS02Z2Zo
Prototype pollution vulnerability in js-extend
Ecosystems: npm
Packages: js-extend
Source: GitHub Advisory Database
Blast Radius: 32.6
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZnNXctdzk5Zi1yajZ3
Command Injection in @ronomon/opened
Ecosystems: npm
Packages: @ronomon/opened
Source: GitHub Advisory Database
Blast Radius: 4.7
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE2dzItODlocS1ocTI3
keycloak Self Stored Cross-site Scripting vulnerability
Ecosystems: maven
Packages: org.keycloak:keycloak-core
Source: GitHub Advisory Database
Blast Radius: 29.7
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdjNDUtajNtNS04cWZx
Server-Side Request Forgery in Feehi CMS
Ecosystems: packagist
Packages: feehi/cms
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXh4OGYtcWY5Zi01Zmd3
Remote code execution in zendframework and laminas-http
Ecosystems: packagist
Packages: laminas/laminas-http, zendframework/zendframework
Source: GitHub Advisory Database
Blast Radius: 38.2
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJ3djctM3Y0NS1oZzI5
Out-of-bounds Read
Ecosystems: pypi
Packages: Pillow
Source: GitHub Advisory Database
Blast Radius: 45.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc3Z2MtdjJ4di1ydnZo
Out-of-bounds Read in Pillow
Ecosystems: pypi
Packages: Pillow
Source: GitHub Advisory Database
Blast Radius: 45.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh4N2otNDN3Mi03cmo3
Prototype pollution in nconf-toml
Ecosystems: npm
Packages: nconf-toml
Source: GitHub Advisory Database
Blast Radius: 6.8
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI2cmotOWNoNi1nMjY0
Prototype pollution in Merge-deep
Ecosystems: npm
Packages: merge-deep
Source: GitHub Advisory Database
Blast Radius: 58.5
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW03cmctOHd2cS04NDZ2
Prototype pollution in nestie
Ecosystems: npm
Packages: nestie
Source: GitHub Advisory Database
Blast Radius: 3.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVxanEtNjl3Ni1mZzU3
XSS vulnerability with translator
Ecosystems: packagist
Packages: flarum/core
Source: GitHub Advisory Database
Blast Radius: 31.1
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZtZmctcmpqbS1yanJq
QOS.ch Logback vulnerable to Deserialization of Untrusted Data
Ecosystems: maven
Packages: ch.qos.logback:logback-core, ch.qos.logback:logback-classic
Source: GitHub Advisory Database
Blast Radius: 50.6
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWoyMzktNGdxZy01ajU0
Inadequate Encryption Strength
Ecosystems: maven
Packages: org.primefaces:primefaces
Source: GitHub Advisory Database
Blast Radius: 39.9
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg3MmMtdzNxMy01NXFx
OS Command Injection in jw.util
Ecosystems: pypi
Packages: jw.util
Source: GitHub Advisory Database
Blast Radius: 3.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4NTgteHA1di1mOHh4
Dragonfly contains remote code execution vulnerability
Ecosystems: rubygems
Packages: dragonfly
Source: GitHub Advisory Database
Blast Radius: 32.9
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNjdjQteHh2Ny05MzRx
Improper Verification of Cryptographic Signature in Apache Pulsar in TensorFlow
Ecosystems: maven
Packages: org.apache.pulsar:pulsar
Source: GitHub Advisory Database
Blast Radius: 5.9
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW04OTgtaDRwbS1wcWZy
Arbitrary code execution due to an uncontrolled search path for the git binary
Ecosystems: go
Packages: github.com/MichaelMure/git-bug
Source: GitHub Advisory Database
Blast Radius: 3.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM5bTktNDhwdy02bXB2
apiconnect-cli-plugins vulnerable to OS Command Injection
Ecosystems: npm
Packages: apiconnect-cli-plugins
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTcybWgtMjY5eC03bWg1
Improper Certificate Validation in xmlhttprequest-ssl
Ecosystems: npm
Packages: xmlhttprequest-ssl
Source: GitHub Advisory Database
Blast Radius: 56.7
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU2ODQtZzQ4My0yMjQ5
Signature Validation Bypass
Ecosystems: go
Packages: github.com/russellhaering/gosaml2
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJyZnctaGc5bS1qNDdo
Signature Validation Bypass
Ecosystems: go
Packages: github.com/russellhaering/goxmldsig
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJ3Z20tZjgzci12M3Fq
Improper Certificate Validation in WP-CLI framework
Ecosystems: packagist
Packages: wp-cli/wp-cli
Source: GitHub Advisory Database
Blast Radius: 30.7
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhwdzctM3ZxMy1tbXY2
Insecure deserialization in Wire
Ecosystems: nuget
Packages: Wire
Source: GitHub Advisory Database
Blast Radius: 1.0
Published: almost 3 years ago
Critical
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJybXAtZnc1ci1qNXF2
Improper Authentication in InfluxDB
Ecosystems: go
Packages: github.com/influxdata/influxdb
Source: GitHub Advisory Database
Blast Radius: 39.6
Published: almost 3 years ago
Statistics
Advisories: 18,312
Packages: 8,276
Repositories: 1,286
Ecosystems: 12
Filter by Package
magento/community-edition 27 com.fasterxml.jackson.core:jackson-databind 24 dolibarr/dolibarr 23 net.mingsoft:ms-mcms 18 org.jenkins-ci.main:jenkins-core 18 salt 16 moodle/moodle 15 com.liferay.portal:release.portal.bom 13 com.liferay.portal:release.dxp.bom 12 langchain 12 org.apache.dubbo:dubbo 12 topthink/framework 12 mlflow 12 org.apache.struts:struts2-core 11 drupal/core 11 magento/core 11 apache-airflow 10 vm2 10 phpmyadmin/phpmyadmin 9 org.xwiki.platform:xwiki-platform-oldcore 9 funadmin/funadmin 9 tensorflow 9 shopware/platform 8 paddlepaddle 8 org.jeecgframework.boot:jeecg-boot-common 8 org.xwiki.platform:xwiki-platform-web-templates 8 rdiffweb 8 tensorflow-cpu 8 drupal/drupal 8 tensorflow-gpu 8 studio-42/elfinder 7 symfony/symfony 7 gogs.io/gogs 7 froxlor/froxlor 7 ansible 7 org.xwiki.platform:xwiki-platform-administration-ui 7 sequelize 7 rusqlite 7 github.com/answerdev/answer 6 parse-server 6 thorsten/phpmyfaq 6 github.com/argoproj/argo-cd 6 aaptjs 6 ezsystems/ezpublish-kernel 6 safe-eval 5 django 5 org.jeecgframework.boot:jeecg-boot-parent 5 mercurial 5 org.apache.tomcat.embed:tomcat-embed-core 5 centreon/centreon 5 org.jenkins-ci.plugins:script-security 5 steal 5 nodebb 5 Microsoft.ChakraCore 5 shopware/core 5 Pillow 5 org.xwiki.commons:xwiki-commons-xml 5 org.xwiki.platform:xwiki-platform-web 5 zendframework/zendframework 5 org.apache.activemq:activemq-client 5 org.apache.inlong:manager-pojo 5 org.apache.shiro:shiro-core 5 ckb 5 org.cloudfoundry.identity:cloudfoundry-identity-server 4 spree_auth_devise 4 net.opentsdb:opentsdb 4 apache-airflow-providers-apache-hive 4 librenms/librenms 4 nilsteampassnet/teampass 4 github.com/usememos/memos 4 pyload-ng 4 org.apache.tapestry:tapestry-core 4 org.eclipse.jetty:jetty-server 4 smallvec 4 org.xwiki.platform:xwiki-platform-flamingo-skin-resources 4 code.gitea.io/gitea 4 github.com/hashicorp/vault 4 realms-shim 4 safer-eval 4 nukeviet/nukeviet 4 baserproject/basercms 4 org.jeecgframework.boot:jeecg-boot-base-core 4 hermes-engine 4 org.apache.kylin:kylin-server-base 4 swagger-ui 4 PaddlePaddle 4 calibreweb 4 org.apache.inlong:manager-service 4 org.xwiki.platform:xwiki-platform-appwithinminutes-ui 4 prestashop/prestashop 4 contao/core-bundle 4 contao/contao 4 messagepack-rs 4 github.com/argoproj/argo-cd/v2 4 org.apache.openmeetings:openmeetings-parent 4 Django 4 openssl-src 4 feehi/cms 4 @openzeppelin/contracts-upgradeable 3 nvflare 3 org.jenkins-ci.plugins:active-directory 3 browserify-shim 3 mongoose 3 org.apache.hadoop:hadoop-common 3 org.keycloak:keycloak-core 3 org.apache.logging.log4j:log4j-core 3 edu.stanford.nlp:stanford-corenlp 3 mautic/core 3 org.springframework.security:spring-security-core 3 com.alibaba:dubbo 3 rubygems-update 3 com.hazelcast:hazelcast 3 org.xwiki.platform:xwiki-platform-icon-ui 3 craftcms/cms 3 showdoc/showdoc 3 symfony/security 3 org.apache.linkis:linkis 3 elefant/cms 3 ro.pippo:pippo-core 3 org.apache.inlong:manager-web 3 symfony/security-core 3 org.jenkins-ci.plugins.workflow:workflow-cps 3 ezsystems/ezplatform-kernel 3 publify_core 3 lmdb 3 strapi 3 phpmailer/phpmailer 3 org.apache.storm:storm 3 com.jflyfox:jflyfox_jfinal 3 jsrsasign 3 ibexa/core 3 github.com/rancher/rancher 3 cobbler 3 codeigniter4/framework 3 org.xwiki.platform:xwiki-platform-panels-ui 3 slpjs 3 org.xwiki.platform:xwiki-platform-flamingo-theme-ui 3 github.com/dexidp/dex 3 pimcore/pimcore 3 facade/ignition 3 id-map 3 dompdf/dompdf 3 typo3/cms 3 zendframework/zendframework1 3 org.apache.dolphinscheduler:dolphinscheduler 3 tribalsystems/zenario 3 log4j:log4j 3 org.zenframework.z8.dependencies.commons:log4j-1.2.17 3 slp-validate 3 org.xwiki.platform:xwiki-platform-search-ui 3 org.apache.ignite:ignite-core 3 org.jeecgframework.boot:jeecg-boot-base 3 modoboa 3 codiad/codiad 3 francoisjacquet/rosariosis 3 io.dataease:dataease-plugin-common 3 github.com/hashicorp/nomad 3 feathers-sequelize 3 github.com/pterodactyl/wings 3 github.com/go-gitea/gitea 3 org.apache.ozone:ozone-main 3 xcb 3 org.apache.solr:solr-parent 3 handlebars 3 org.apache.any23:apache-any23 3 ray 3 smarty/smarty 3 impresscms/impresscms 3 nokogiri 3 actix-web 3 io.undertow:undertow-core 3 org.apache.jmeter:ApacheJMeter 3 org.apache.solr:solr-core 3 org.richfaces:richfaces-core 3 github.com/apache/trafficcontrol 2 net.bull.javamelody:javamelody-core 2 zendframework/zend-db 2 nystudio107/craft-seomatic 2 pyyaml 2 pyrocms/pyrocms 2 total4 2 org.xwiki.platform:xwiki-platform-scheduler-ui 2 pandasai 2 flatmap-stream 2 com.h2database:h2 2 wwbn/avideo 2 url-parse 2 xmlhttprequest-ssl 2 puma 2 stack_dst 2 activerecord 2 electron 2 typo3/phar-stream-wrapper 2 org.apache.rocketmq:rocketmq-namesrv 2 org.apache.shiro:shiro-web 2 locutus 2 acc_reader 2 apache-superset 2 org.springframework.amqp:spring-amqp 2 github.com/crewjam/saml 2
Filter by Repository
https://github.com/xwiki/xwiki-platform 81 https://github.com/FasterXML/jackson-databind 24 https://github.com/jenkinsci/jenkins 17 https://github.com/Dolibarr/dolibarr 15 https://github.com/apache/airflow 14 https://github.com/saltstack/salt 14 https://github.com/PaddlePaddle/Paddle 11 https://github.com/mlflow/mlflow 11 https://github.com/ming-soft/MCMS 10 https://github.com/patriksimek/vm2 10 https://github.com/funadmin/funadmin 9 https://github.com/jeecgboot/jeecg-boot 9 https://github.com/tensorflow/tensorflow 9 https://github.com/django/django 8 https://github.com/top-think/framework 8 https://github.com/apache/inlong 8 https://github.com/magento/magento2 8 https://github.com/langchain-ai/langchain 8 https://github.com/ikus060/rdiffweb 8 https://github.com/gogs/gogs 7 https://github.com/ansible/ansible 7 https://github.com/python-pillow/Pillow 7 https://github.com/apache/struts 7 https://github.com/sequelize/sequelize 7 https://github.com/go-gitea/gitea 7 https://github.com/Studio-42/elFinder 7 https://github.com/rusqlite/rusqlite 7 https://github.com/argoproj/argo-cd 7 https://github.com/shenzhim/aaptjs 6 https://github.com/xwiki/xwiki-commons 6 https://github.com/shopware/platform 6 https://github.com/parse-community/parse-server 6 https://github.com/thorsten/phpmyfaq 6 https://github.com/answerdev/answer 6 https://github.com/symfony/symfony 6 https://github.com/apache/tomcat 5 https://github.com/solidusio/solidus_auth_devise 5 https://github.com/stealjs/steal 5 https://github.com/keycloak/keycloak 5 https://github.com/froxlor/froxlor 5 https://github.com/nervosnetwork/ckb 5 https://github.com/NodeBB/NodeBB 5 https://github.com/hacksparrow/safe-eval 5 https://github.com/apache/activemq 5 https://github.com/moodle/moodle 5 https://github.com/pippo-java/pippo 4 https://github.com/PrestaShop/PrestaShop 4 https://github.com/swagger-api/swagger-ui 4 https://github.com/hwchase17/langchain 4 https://github.com/cloudfoundry/uaa 4 https://github.com/usememos/memos 4 https://github.com/contao/contao 4 https://github.com/dromara/hutool 4 https://github.com/liufee/cms 4 https://github.com/janeczku/calibre-web 4 https://github.com/dompdf/dompdf 4 https://github.com/otake84/messagepack-rs 4 https://github.com/OpenTSDB/opentsdb 4 https://github.com/ezsystems/ezpublish-kernel 4 https://github.com/CVEProject/cvelist 4 https://github.com/servo/rust-smallvec 4 https://github.com/spring-projects/spring-framework 4 https://github.com/pyload/pyload 4 https://github.com/dwisiswant0/advisory 3 https://github.com/kjur/jsrsasign 3 https://github.com/LetianYuan/My-CVE-Public-References 3 https://github.com/cobbler/cobbler 3 https://github.com/centreon/centreon-archived 3 https://github.com/apache/shiro 3 https://github.com/shopware/shopware 3 https://github.com/phpmyadmin/phpmyadmin 3 https://github.com/smarty-php/smarty 3 https://github.com/opencast/opencast 3 https://github.com/modoboa/modoboa 3 https://github.com/thlorenz/browserify-shim 3 https://github.com/PHPMailer/PHPMailer 3 https://github.com/baserproject/basercms 3 https://github.com/feathersjs-ecosystem/feathers-sequelize 3 https://github.com/chakra-core/ChakraCore 3 https://github.com/dataease/dataease 3 https://github.com/simpleledger/slpjs 3 https://github.com/octobercms/october 3 https://github.com/jflyfox/jfinal_cms 3 https://github.com/ibexa/core 3 https://github.com/twisted/twisted 3 https://github.com/hazelcast/hazelcast 3 https://github.com/mbechler/marshalsec 3 https://github.com/denoland/deno 3 https://github.com/facebook/hermes 3 https://github.com/NVIDIA/NVFlare 3 https://github.com/rubygems/rubygems.org 3 https://github.com/TeamSeri0us/pocs 3 https://github.com/github/securitylab 3 https://github.com/rubygems/rubygems 3 https://github.com/crewjam/saml 3 https://github.com/facade/ignition 3 https://github.com/actix/actix-web 3 https://github.com/publify/publify 3 https://github.com/ImpressCMS/impresscms 3 https://github.com/run-llama/llama_index 3 https://github.com/jbroadway/elefant 3 https://github.com/apache/camel 3 https://github.com/strapi/strapi 3 https://github.com/dexidp/dex 3 https://github.com/rancher/rancher 3 https://github.com/star7th/showdoc 3 https://github.com/andrewhickman/id-map 3 https://github.com/pterodactyl/wings 3 https://github.com/pimcore/pimcore 3 https://github.com/craftcms/cms 3 https://github.com/nukeviet/nukeviet 3 https://github.com/ezsystems/ezplatform-kernel 3 https://github.com/neorazorx/facturascripts 3 https://github.com/jenkinsci/semantic-versioning-plugin 2 https://github.com/stanfordnlp/corenlp 2 https://github.com/ahdinosaur/set-in 2 https://github.com/HtmlUnit/htmlunit 2 https://github.com/totaljs/framework 2 https://github.com/rest-client/rest-client 2 https://github.com/TribalSystems/Zenario 2 https://github.com/apache/kylin 2 https://github.com/hashicorp/go-getter 2 https://github.com/qcubed/qcubed 2 https://github.com/SAP/cloud-pysec 2 https://github.com/nats-io/jwt 2 https://github.com/top-think/thinkphp 2 https://github.com/getgrav/grav 2 https://github.com/simpleledger/slp-validate.js 2 https://github.com/javamelody/javamelody 2 https://github.com/ADOdb/ADOdb 2 https://github.com/rochacbruno/quokka 2 https://github.com/ionicabizau/parse-url 2 https://github.com/hashicorp/vault 2 https://github.com/noear/solon 2 https://github.com/handlebars-lang/handlebars.js 2 https://github.com/netvl/acc_reader 2 https://github.com/Automattic/mongoose 2 https://github.com/jfinal/jfinal 2 https://github.com/rubyzip/rubyzip 2 https://github.com/jmrozanec/cron-utils 2 https://github.com/zoujingli/ThinkAdmin 2 https://github.com/OpenAPITools/openapi-generator 2 https://github.com/sjep/array 2 https://github.com/nodejs/llhttp 2 https://github.com/pytorch/serve 2 https://github.com/benbusby/whoogle-search 2 https://github.com/gventuri/pandas-ai 2 https://github.com/SAP/cloud-security-client-go 2 https://github.com/google/flatbuffers 2 https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable 2 https://github.com/dfinity/agent-js 2 https://github.com/jaw187/node-traceroute 2 https://github.com/WWBN/AVideo 2 https://github.com/gofiber/fiber 2 https://github.com/markevans/dragonfly 2 https://github.com/line/armeria 2 https://github.com/nilsteampassnet/TeamPass 2 https://github.com/graphite-project/graphite-web 2 https://github.com/russellhaering/gosaml2 2 https://github.com/jenkinsci/script-security-plugin 2 https://github.com/mautic/mautic 2 https://github.com/web2py/web2py 2 https://github.com/kubernetes/kubernetes 2 https://github.com/js-data/js-data 2 https://github.com/Microsoft/ChakraCore 2 https://github.com/scalyr/scalyr-agent-2 2 https://github.com/ibexa/admin-ui 2 https://github.com/Kozea/Radicale 2 https://github.com/beego/beego 2 https://github.com/MrSwitch/hello.js 2 https://github.com/evmos/evmos 2 https://github.com/moby/buildkit 2 https://github.com/OpenZeppelin/openzeppelin-contracts 2 https://github.com/puma/puma 2 https://github.com/unshiftio/url-parse 2 https://github.com/dominictarr/libnested 2 https://github.com/fluxcd/flux2 2 https://github.com/http4s/http4s 2 https://github.com/sidorares/node-mysql2 2 https://github.com/neo4j-contrib/neo4j-apoc-procedures 2 https://github.com/keystonejs/keystone 2 https://github.com/cockpit-hq/cockpit 2 https://github.com/h2database/h2database 2 https://github.com/soketi/soketi 2 https://github.com/SAP/cloud-security-services-integration-library 2 https://github.com/KnpLabs/snappy 2 https://github.com/michaelschwarz/Ajax.NET-Professional 2 https://github.com/uasoft-indonesia/badaso 2 https://github.com/apache/flume 2 https://github.com/apache/dubbo 2 https://github.com/gnzlbg/slice_deque 2 https://github.com/alextselegidis/easyappointments 2 https://github.com/apache/submarine 2 https://github.com/kujirahand/nadesiko3 2 https://github.com/apache/karaf 2 https://github.com/centreon/centreon 2 https://github.com/Codiad/Codiad 2 https://github.com/folio-org/mod-data-export-spring 2 https://github.com/TogaTech/tEnvoy 2