检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-72RJ-36QC-47G7 CVE-2021-31671 | Pgsync Contains Cleartext Transmission of Sensitive Information | 高危 | RubyGemspgsync | 已审查 | 2021-04-27 23:54 | 2023-08-26 06:09 |
| GHSA-GWRP-PVRQ-JMWV CVE-2021-29425 | Path Traversal and Improper Input Validation in Apache Commons IO |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 中危 |
Mavencom.cosium.vet:vet+9 |
| 已审查 |
| 2021-04-27 00:04 |
| 2024-02-15 04:25 |
| GHSA-C43Q-5HPJ-4CRV CVE-2021-28168 | Local information disclosure via system temporary directory | 中危 | Mavenorg.glassfish.jersey.core:jersey-common | 已审查 | 2021-04-24 00:55 | 2021-04-23 03:22 |
| GHSA-JGPV-4H4C-XHW3 | Uncontrolled Resource Consumption in pillow | 中危 | PyPIpillow | 已审查 | 2021-04-24 00:54 | 2021-04-23 01:01 |
| GHSA-7359-3C6R-HFC2 CVE-2016-11086 | Improper Certificate Validation in oauth ruby gem | 高危 | RubyGemsoauth | 已审查 | 2021-04-23 00:22 | 2023-01-24 22:59 |
| GHSA-75C5-F4GW-38R9 CVE-2020-28949 | Multiple vulnerabilities through filename manipulation in Archive_Tar | 高危 | Packagistpear/archive_tar | 已审查 | 2021-04-23 00:20 | 2025-10-23 01:56 |
| GHSA-JH5X-HFHG-78JQ CVE-2020-28948 | Deserialization of Untrusted Data in Archive_Tar | 高危 | Packagistpear/archive_tar | 已审查 | 2021-04-23 00:20 | 2023-07-06 07:21 |
| GHSA-RPW6-9XFX-JVCX CVE-2020-36193 | Directory Traversal in Archive_Tar | 高危 | Packagistpear/archive_tar | 已审查 | 2021-04-23 00:20 | 2025-10-23 02:00 |
| GHSA-72M5-FVVV-55M6 CVE-2020-26939 | Observable Differences in Behavior to Error Inputs in Bouncy Castle | 中危 | Mavenorg.bouncycastle:bc-fips+7 | 已审查 | 2021-04-23 00:16 | 2025-07-18 06:04 |
| GHSA-9Q69-G5GC-9FGF CVE-2020-35217 | Cross-Site Request Forgery in Vert.x-Web framework | 高危 | Mavenio.vertx:vertx-web | 已审查 | 2021-04-23 00:16 | 2021-04-21 01:07 |
| GHSA-5CHJ-XPRR-7QQX CVE-2020-9447 | Cross-site Scripting in GwtUpload | 中危 | Mavencom.googlecode.gwtupload:gwtupload | 已审查 | 2021-04-23 00:15 | 2022-01-05 03:33 |
| GHSA-64X2-GQ24-75PV CVE-2020-13954 | Cross-site scripting in Apache CXF | 中危 | Mavenorg.apache.cxf:apache-cxf+1 | 已审查 | 2021-04-23 00:15 | 2021-04-21 06:19 |
| GHSA-C6P9-24RC-JR5H CVE-2020-7744 | Remote Code Execution and download tracking in Mintegral SDK | 中危 | Mavencom.mintegral.msdk:alphab | 已审查 | 2021-04-23 00:15 | 2021-04-22 03:02 |
| GHSA-QQ48-M4JX-XQH8 CVE-2020-26945 | "Deserialization errors in MyBatis" | 高危 | Mavenorg.mybatis:mybatis | 已审查 | 2021-04-23 00:14 | 2021-04-22 03:54 |
| GHSA-HXP5-8PGQ-MGV9 CVE-2020-13955 | Missing Authentication for Critical Function in Apache Calcite | 中危 | Mavenorg.apache.calcite:calcite-core+2 | 已审查 | 2021-04-23 00:14 | 2021-04-22 04:27 |
| GHSA-7CJ4-GJ8M-M2F7 CVE-2020-17510 | Authentication bypass in Apache Shiro | 严重 | Mavenorg.apache.shiro:shiro-spring | 已审查 | 2021-04-23 00:13 | 2021-09-01 05:06 |
| GHSA-5C66-V29H-XJH8 CVE-2021-29459 | XSS Cross Site Scripting | 严重 | Mavenorg.xwiki.platform:xwiki-platform-oldcore+1 | 已审查 | 2021-04-23 00:11 | 2021-04-21 02:36 |
| GHSA-6HGR-2G6Q-3RMC | Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19 | 中危 | Mavencom.vaadin:flow-client | 已审查 | 2021-04-23 00:11 | 2021-10-09 05:22 |
| GHSA-MR8H-J9CV-4M8H CVE-2021-31408 | Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19 | 中危 | Mavencom.vaadin:vaadin-bom | 已审查 | 2021-04-23 00:11 | 2021-04-22 22:30 |
| GHSA-FVRF-9428-527M CVE-2021-21427 | Backport for CVE-2021-21024 Blind SQLi from Magento 2 | 严重 | Packagistopenmage/magento-lts | 已审查 | 2021-04-23 00:11 | 2021-05-01 04:20 |
| GHSA-M496-X567-F98C CVE-2021-21426 | Fixes a bug in Zend Framework's Stream HTTP Wrapper | 严重 | Packagistopenmage/magento-lts | 已审查 | 2021-04-23 00:10 | 2021-05-01 04:19 |
| GHSA-2FW4-MGQ9-39CX CVE-2017-18924 | Code Injection in oauth2-server | 高危 | npmoauth2-server | 已审查 | 2021-04-22 23:53 | 2021-04-22 05:15 |
| GHSA-GHHP-997W-QR28 CVE-2021-26701 | .NET Core Remote Code Execution Vulnerability | 严重 | NuGetSystem.Text.Encodings.Web | 已审查 | 2021-04-22 03:38 | 2021-04-22 03:37 |
| GHSA-7JGJ-8WVC-JH57 CVE-2018-8292 | .NET Core Information Disclosure | 高危 | NuGetSystem.Net.Http | 已审查 | 2021-04-22 03:16 | 2021-04-22 03:15 |
| GHSA-G4MQ-6FP5-QWCF CVE-2020-1733 | Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File | 低危 | PyPIansible | 已审查 | 2021-04-21 00:46 | 2024-11-19 00:26 |