检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-X7JG-6PWG-FX5H CVE-2020-11076 | HTTP Smuggling via Transfer-Encoding Header in Puma | 高危 | RubyGemspuma | 已审查 | 2020-05-22 22:55 | 2023-05-16 23:53 |
| GHSA-46J2-XJGP-JRFM CVE-2020-8151 | Information disclosure issue in Active Resource |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 高危 |
RubyGemsactiveresource |
| 已审查 |
| 2020-05-22 05:09 |
| 2025-04-01 01:22 |
| GHSA-H79P-32MX-FJJ9 CVE-2020-11973 | Apache Camel Netty enables Java deserialization by default | 严重 | Mavenorg.apache.camel:camel-netty | 已审查 | 2020-05-22 05:09 | 2022-10-07 02:15 |
| GHSA-CC94-3V9C-7RM8 CVE-2020-1941 | Apache ActiveMQ webconsole admin GUI is open to XSS | 中危 | Mavenorg.apache.activemq:activemq-web-console | 已审查 | 2020-05-22 05:08 | 2024-03-15 05:33 |
| GHSA-CXVR-R92M-Q9HW CVE-2020-13094 | XSS in Dolibarr | 中危 | Packagistdolibarr/dolibarr | 已审查 | 2020-05-22 05:08 | 2021-08-26 05:14 |
| GHSA-5MH9-R3RR-9597 CVE-2020-5529 | Code execution vulnerability in HtmlUnit | 高危 | Mavennet.sourceforge.htmlunit:htmlunit | 已审查 | 2020-05-22 05:08 | 2024-10-16 07:33 |
| GHSA-7QX4-PP76-VRQH CVE-2020-1953 | Remote code execution in Apache Commons Configuration | 严重 | Mavenorg.apache.commons:commons-configuration2 | 已审查 | 2020-05-22 03:08 | 2021-07-29 02:49 |
| GHSA-344F-F5VG-2JFJ CVE-2020-9484 | Potential remote code execution in Apache Tomcat | 高危 | Mavenorg.apache.tomcat:tomcat-catalina+1 | 已审查 | 2020-05-22 02:52 | 2026-08-26 02:31 |
| GHSA-Q4M3-2J7H-F7XW CVE-2020-7656 | Cross-Site Scripting in jquery | 中危 | Mavenjquery+3 | 已审查 | 2020-05-21 00:18 | 2024-10-11 00:17 |
| GHSA-GG84-QGV9-W4PQ CVE-2020-11078 | CRLF injection in httplib2 | 中危 | PyPIhttplib2 | 已审查 | 2020-05-20 23:55 | 2024-09-21 05:55 |
| GHSA-R854-96GQ-RFG3 CVE-2014-1933 | Pillow Temporary file name leakage | 中危 | PyPIpillow | 已审查 | 2020-05-19 01:41 | 2025-04-14 07:22 |
| GHSA-Q93H-JC49-78GG CVE-2020-9547 | jackson-databind mishandles the interaction between serialization gadgets and typing | 严重 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2020-05-16 02:59 | 2023-09-14 23:09 |
| GHSA-QMQC-X3R4-6V39 CVE-2019-14893 | Polymorphic deserialization of malicious object in jackson-databind | 高危 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2020-05-16 02:59 | 2020-04-23 04:58 |
| GHSA-FQWF-PJWF-7VQV CVE-2020-10673 | jackson-databind mishandles the interaction between serialization gadgets and typing | 高危 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2020-05-16 02:59 | 2024-07-04 05:10 |
| GHSA-P43X-XFJF-5JHR CVE-2020-9548 | jackson-databind mishandles the interaction between serialization gadgets and typing | 严重 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2020-05-16 02:59 | 2024-03-15 08:20 |
| GHSA-CF6R-3WGC-H863 CVE-2019-14892 | Polymorphic deserialization of malicious object in jackson-databind | 高危 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2020-05-16 02:58 | 2023-09-14 23:07 |
| GHSA-RF6R-2C4Q-2VWG CVE-2020-10968 | jackson-databind mishandles the interaction between serialization gadgets and typing | 高危 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2020-05-16 02:58 | 2024-03-15 08:50 |
| GHSA-V3XW-C963-F5HC CVE-2020-11111 | jackson-databind mishandles the interaction between serialization gadgets and typing | 高危 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2020-05-16 02:58 | 2021-08-26 04:59 |
| GHSA-9VVP-FXW6-JCXR CVE-2020-11113 | jackson-databind mishandles the interaction between serialization gadgets and typing | 高危 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2020-05-16 02:58 | 2024-03-15 08:48 |
| GHSA-27XJ-RQX5-2255 CVE-2020-11619 | jackson-databind mishandles the interaction between serialization gadgets and typing | 高危 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2020-05-16 02:58 | 2026-05-07 02:37 |
| GHSA-PQG8-CRX9-G8M4 CVE-2020-11069 | Backend Same-Site Request Forgery in TYPO3 CMS | 高危 | Packagisttypo3/cms+1 | 已审查 | 2020-05-14 07:40 | 2024-02-05 19:13 |
| GHSA-2WJ9-434X-9HVP CVE-2020-11067 | Insecure Deserialization in Backend User Settings in TYPO3 CMS | 高危 | Packagisttypo3/cms+1 | 已审查 | 2020-05-14 07:29 | 2021-01-09 04:16 |
| GHSA-2RXH-H6H9-QRQC CVE-2020-11066 | Class destructors causing side-effects when being unserialized in TYPO3 CMS | 高危 | Packagisttypo3/cms+1 | 已审查 | 2020-05-14 07:18 | 2021-01-09 04:16 |
| GHSA-4J77-GG36-9864 CVE-2020-11065 | Cross-Site Scripting in TYPO3 CMS Link Handling | 中危 | Packagisttypo3/cms+1 | 已审查 | 2020-05-14 07:18 | 2021-01-09 04:17 |
| GHSA-43GJ-MJ2W-WH46 CVE-2020-11064 | Cross-Site Scripting in TYPO3 CMS Form Engine | 中危 | Packagisttypo3/cms+1 | 已审查 | 2020-05-14 07:17 | 2021-01-09 04:16 |