检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-836G-5FR5-FGCR CVE-2020-11969 | Missing Authentication for Critical Function in Apache TomEE | 高危 | Mavenorg.apache.tomee:tomee | 已审查 | 2022-02-11 07:07 | 2021-07-30 02:21 |
| GHSA-WFJ5-2MQR-7JVV CVE-2020-9296 | Expression Language Injection in Netflix Conductor |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 严重 |
Mavencom.netflix.conductor:conductor-core |
| 已审查 |
| 2022-02-11 07:06 |
| 2021-07-30 02:20 |
| GHSA-V83P-XWM9-V4G8 CVE-2020-9495 | Injection in Apache Archiva | 中危 | Mavenorg.apache.archiva:archiva | 已审查 | 2022-02-11 07:06 | 2021-05-12 06:24 |
| GHSA-WGX7-JWWM-CGJV CVE-2020-9480 | Improper Authentication in Apache Spark | 严重 | Mavenorg.apache.spark:spark-parent_2.11+1 | 已审查 | 2022-02-11 07:05 | 2024-10-16 00:15 |
| GHSA-8GRG-Q944-CCH5 CVE-2019-14900 | SQL Injection in Hibernate ORM | 中危 | Mavenorg.hibernate:hibernate-core | 已审查 | 2022-02-11 07:05 | 2024-06-28 02:05 |
| GHSA-9JG9-6WM2-X7P5 CVE-2020-11980 | Server-Side Request Forgery in Karaf | 中危 | Mavenorg.apache.karaf.management:org.apache.karaf.management.server | 已审查 | 2022-02-11 07:04 | 2021-05-13 23:36 |
| GHSA-G8JJ-899Q-8X3J CVE-2020-13973 | Cross-site scripting in json-sanitizer | 中危 | Mavencom.mikesamuel:json-sanitizer | 已审查 | 2022-02-11 07:04 | 2021-05-14 03:52 |
| GHSA-JRG3-QQ99-35G7 CVE-2018-21234 | Deserialization of Untrusted Data in Jodd | 严重 | Mavenorg.jodd:jodd-json | 已审查 | 2022-02-11 07:03 | 2022-04-27 01:59 |
| GHSA-FG2V-W576-W4V3 CVE-2021-31684 | Out of bounds read in json-smart | 高危 | Mavennet.minidev:json-smart | 已审查 | 2022-02-11 06:46 | 2024-06-22 05:33 |
| GHSA-9JQ9-C2CV-PCRJ CVE-2021-43841 | Cross-site Scripting by SVG upload in xwiki-platform | 中危 | Mavenorg.xwiki.platform:xwiki-platform-oldcore+1 | 已审查 | 2022-02-11 06:42 | 2022-02-12 05:08 |
| GHSA-VH5C-JQFG-MHRH CVE-2021-32732 | Cross-Site Request Forgery in xwiki-platform | 高危 | Mavenorg.xwiki.platform:xwiki-platform-administration-ui | 已审查 | 2022-02-11 06:42 | 2022-02-12 05:08 |
| GHSA-3GG9-F3VH-866F CVE-2020-15813 | Improper Certificate Validation in Graylog | 高危 | Mavenorg.graylog:graylog-parent | 已审查 | 2022-02-11 06:39 | 2021-05-11 05:16 |
| GHSA-WHWW-V56C-CGV2 CVE-2020-1948 | Deserialization of Untrusted Data in Apache Dubbo | 严重 | Mavenorg.apache.dubbo:dubbo+1 | 已审查 | 2022-02-11 06:39 | 2021-05-11 05:50 |
| GHSA-FFM7-7R8G-77XM CVE-2020-1954 | Apache CXF JMX Integration is vulnerable to a MITM attack | 中危 | Mavenorg.apache.cxf:cxf-rt-management | 已审查 | 2022-02-11 06:38 | 2023-09-26 18:43 |
| GHSA-MRQ8-53R4-3J5M CVE-2018-20301 | Permissive parameters and privilege escalation | 中危 | Hexcoherence | 已审查 | 2022-02-11 06:35 | 2022-01-28 04:15 |
| GHSA-V3MR-GP7J-PW5W | Possible SQL injection in tablelookupwizard Contao Extension | 严重 | Packagistterminal42/contao-tablelookupwizard | 已审查 | 2022-02-11 06:33 | 2026-01-24 05:31 |
| GHSA-VP4X-94FF-2CMV CVE-2020-23263 | Cross-site scripting in forkcms | 中危 | Packagistforkcms/forkcms | 已审查 | 2022-02-11 06:29 | 2021-05-20 04:44 |
| GHSA-G4GM-PXH3-29FQ CVE-2020-14961 | Unrestricted Uploads in Concrete5 | 中危 | Packagistconcrete5/concrete5 | 已审查 | 2022-02-11 06:28 | 2021-11-03 02:42 |
| GHSA-J33J-FG2G-MCV2 CVE-2020-15400 | Cross-Site Request Forgery in CakePHP | 中危 | Packagistcakephp/cakephp | 已审查 | 2022-02-11 06:27 | 2023-09-14 20:06 |
| GHSA-6VC5-V7HW-H5H2 CVE-2020-15721 | Cross-site Scripting in RosarioSIS | 中危 | Packagistfrancoisjacquet/rosariosis | 已审查 | 2022-02-11 06:26 | 2021-05-11 06:34 |
| GHSA-PQCF-V8V5-JMCG CVE-2020-28337 | Zip slip in Microweber | 高危 | Packagistmicroweber/microweber | 已审查 | 2022-02-11 06:23 | 2021-05-08 05:58 |
| GHSA-5MV2-RX3Q-4W2V CVE-2022-23614 | Code injection in Twig | 高危 | Packagisttwig/twig | 已审查 | 2022-02-11 06:21 | 2022-02-12 03:16 |
| GHSA-P5GM-FGFX-HR7H CVE-2020-24164 | Gadget chain attack in Nippy | 高危 | Mavencom.taoensso:nippy | 已审查 | 2022-02-11 04:55 | 2021-05-05 05:47 |
| GHSA-RHG5-FQR3-HRF5 CVE-2019-12416 | Injection in DeltaSpike | 中危 | Mavenorg.apache.deltaspike:deltaspike | 已审查 | 2022-02-11 04:54 | 2023-01-21 02:52 |
| GHSA-H6XQ-3H62-99QX CVE-2020-13928 | Cross-site scripting in Apache Atlas | 中危 | Mavenorg.apache.atlas:apache-atlas | 已审查 | 2022-02-11 04:51 | 2021-05-05 04:51 |