检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-427Q-JP8V-WW95 CVE-2021-3976 | Cross-site Scripting in kimai2 | 中危 | Packagistkevinpapst/kimai2 | 已审查 | 2021-11-24 02:16 | 2021-11-23 02:43 |
| GHSA-GF2C-93HM-R9J5 CVE-2021-3963 | Cross-site Scripting in kimai2 |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 中危 |
Packagistkevinpapst/kimai2 |
| 已审查 |
| 2021-11-24 02:16 |
| 2021-11-23 02:42 |
| GHSA-5M8F-CHRV-7RW5 CVE-2021-43668 | Denial of Service in Go-Ethereum | 中危 | Gogithub.com/ethereum/go-ethereum | 已审查 | 2021-11-24 02:04 | 2023-09-19 03:45 |
| GHSA-2XWQ-H7R9-6W27 CVE-2021-3957 | Cross-site Scripting in kimai2 | 中危 | Packagistkevinpapst/kimai2 | 已审查 | 2021-11-24 01:59 | 2021-11-23 02:46 |
| GHSA-86FH-J58M-7PF5 CVE-2021-36372 | Improper Privilege Management in Apache Ozone | 严重 | Mavenorg.apache.ozone:ozone-main | 已审查 | 2021-11-24 01:57 | 2024-01-31 23:13 |
| GHSA-FF84-84Q5-FQ4F CVE-2021-39232 | Incorrect Authorization in Apache Ozone | 高危 | Mavenorg.apache.ozone:ozone-main | 已审查 | 2021-11-24 01:56 | 2023-11-15 05:49 |
| GHSA-5993-WWPG-M92C CVE-2021-39236 | Apache Ozone user impersonation due to non-validation of Ozone S3 tokens | 高危 | Mavenorg.apache.hadoop:hadoop-ozone-ozone-manager | 已审查 | 2021-11-24 01:56 | 2023-12-06 06:47 |
| GHSA-C8CW-2C5J-XFF3 CVE-2021-39234 | Incorrect Authorization in Apache Ozone | 中危 | Mavenorg.apache.ozone:ozone-main | 已审查 | 2021-11-24 01:56 | 2021-11-23 03:05 |
| GHSA-VFRC-GGMC-5JWV CVE-2021-3950 | Cross-site Scripting in django-helpdesk | 高危 | PyPIdjango-helpdesk | 已审查 | 2021-11-24 01:55 | 2024-09-17 05:40 |
| GHSA-M2V2-8227-59F5 CVE-2021-22967 | Exposure of sensitive information in concrete5/core | 中危 | Packagistconcrete5/core | 已审查 | 2021-11-24 01:54 | 2021-11-25 03:00 |
| GHSA-G3P2-HFQR-9M25 CVE-2021-22968 | Improper file handling in concrete5/core | 高危 | Packagistconcrete5/core | 已审查 | 2021-11-24 01:54 | 2023-07-01 04:31 |
| GHSA-GX3F-HQ7P-8FXV CVE-2021-22053 | Code injection in spring-cloud-netflix-hystrix-dashboard | 高危 | Mavenorg.springframework.cloud:spring-cloud-netflix-hystrix-dashboard | 已审查 | 2021-11-24 01:53 | 2021-11-23 03:53 |
| GHSA-WPFP-Q843-V772 CVE-2021-43558 | Cross-site Scripting in moodle | 中危 | Packagistmoodle/moodle | 已审查 | 2021-11-23 08:00 | 2022-06-17 09:13 |
| GHSA-8JHP-2GCR-QW96 CVE-2021-3943 | Moodle vulnerable to RCE via unsafe deserialization | 严重 | Packagistmoodle/moodle | 已审查 | 2021-11-23 08:00 | 2023-07-12 02:17 |
| GHSA-PF7H-H2WQ-M7PG CVE-2021-21996 | Exposure of Resource to Wrong Sphere in salt | 高危 | PyPIsalt | 已审查 | 2021-11-21 08:00 | 2024-10-22 22:57 |
| GHSA-6C7M-QWXJ-MVHP CVE-2021-41278 | Broken encryption in EdgeX Foundry | 中危 | Gogithub.com/edgexfoundry/app-functions-sdk-go+2 | 已审查 | 2021-11-20 04:55 | 2021-11-25 03:01 |
| GHSA-Q5MQ-6FJG-4MW8 CVE-2020-21176 | SQL Injection in thinkjs | 高危 | npmthinkjs | 已审查 | 2021-11-20 04:42 | 2021-11-20 04:42 |
| GHSA-7G47-XXFF-9P85 CVE-2021-41868 | Remote unauthenticated attackers able to upload files in Onionshare | 严重 | PyPIonionshare-cli | 已审查 | 2021-11-20 04:39 | 2021-10-14 01:28 |
| GHSA-6RVJ-PW9W-JCVC CVE-2021-41867 | Information disclosure vulnerability in OnionShare | 中危 | PyPIonionshare-cli | 已审查 | 2021-11-20 04:39 | 2021-10-14 01:27 |
| GHSA-MJWW-934M-H4JW CVE-2020-29457 | Improper Certificate Validation in OPCFoundation.NetStandard.Opc.Ua.Core | 中危 | NuGetOPCFoundation.NetStandard.Opc.Ua.Core | 已审查 | 2021-11-20 04:19 | 2022-09-02 04:13 |
| GHSA-VF7H-6246-HM43 CVE-2021-39198 | The disqualify lead action may be executed without CSRF token check | 中危 | Packagistoro/crm | 已审查 | 2021-11-20 04:18 | 2021-11-19 05:49 |
| GHSA-VHRP-8QX4-VR6C CVE-2021-43996 | Incorrect Access Control in Ignition | 严重 | Packagistfacade/ignition | 已审查 | 2021-11-20 04:18 | 2023-08-09 03:59 |
| GHSA-896R-F27R-55MW CVE-2021-3918 | json-schema is vulnerable to Prototype Pollution | 严重 | npmjson-schema | 已审查 | 2021-11-20 04:16 | 2025-01-18 05:31 |
| GHSA-XX4C-JJ58-R7X6 | Inefficient Regular Expression Complexity in Validator.js | 中危 | npmvalidator | 已审查 | 2021-11-20 04:14 | 2022-07-12 08:11 |
| GHSA-V585-23HC-C647 CVE-2020-36186 | Unsafe Deserialization in jackson-databind | 高危 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2021-11-20 04:13 | 2023-09-14 23:59 |