检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-36HF-6HP2-9G4C CVE-2019-13237 | Local file inclusion allows unauthorized access to internal resources in Alkacon OpenCms | 中危 | Mavenorg.opencms:opencms-core | 已审查 | 2019-11-13 06:58 | 2022-04-20 04:07 |
| GHSA-FXP8-7H5W-H235 CVE-2019-13234 | XSS in search engine |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 中危 |
Mavenorg.opencms:opencms-core |
| 已审查 |
| 2019-11-13 06:58 |
| 2021-08-19 06:27 |
| GHSA-PQM6-CGWR-X6PF CVE-2019-3465 | Signature validation bypass in XmlSecLibs | 高危 | Packagistrobrichards/xmlseclibs | 已审查 | 2019-11-09 04:06 | 2021-08-19 06:14 |
| GHSA-PWRF-Q7H8-JJR7 CVE-2019-16403 | Authorization Bypass Through User-Controlled Key in Bagisto | 中危 | Packagistbagisto/bagisto | 已审查 | 2019-11-09 04:06 | 2021-05-11 01:22 |
| GHSA-6268-V434-45M5 CVE-2019-16126 | Cross-site Scripting in Grav | 中危 | Packagistgetgrav/grav | 已审查 | 2019-11-09 04:06 | 2021-08-18 06:39 |
| GHSA-852Q-XXJ4-X2RX CVE-2019-15537 | SQL Injection in SimpleSAMLphp | 严重 | Packagistcesnet/simplesamlphp-module-proxystatistics | 已审查 | 2019-11-09 04:05 | 2021-08-18 06:41 |
| GHSA-M553-9WMX-533H CVE-2019-16197 | Cross-site scripting in Dolibarr | 中危 | Packagistdolibarr/dolibarr | 已审查 | 2019-11-09 04:05 | 2022-11-18 04:00 |
| GHSA-4J6X-W426-6RC6 | Default Express middleware security check is ignored in production | 高危 | npm@cubejs-backend/api-gateway | 已审查 | 2019-11-09 01:31 | 2020-06-17 04:58 |
| GHSA-58P8-9G59-Q2HR CVE-2019-12406 | Potential DOS attack due to unrestricted attachment count in messages | 中危 | Mavenorg.apache.cxf:apache-cxf+1 | 已审查 | 2019-11-09 01:15 | 2021-06-16 01:20 |
| GHSA-CW6W-Q88J-6MQF CVE-2019-12419 | Potential session hijack in Apache CXF | 严重 | Mavenorg.apache.cxf:cxf | 已审查 | 2019-11-09 01:12 | 2021-06-16 01:21 |
| GHSA-JQWC-JM56-WCWJ CVE-2018-21030 | Cross-site scripting in Jupyter Notebook | 中危 | PyPInotebook | 已审查 | 2019-11-09 01:07 | 2024-10-07 22:48 |
| GHSA-2598-2F59-RMHQ CVE-2019-10749 | SQL Injection in sequelize | 严重 | npmsequelize | 已审查 | 2019-11-09 01:05 | 2021-08-19 06:10 |
| GHSA-CJ8P-53V9-2C26 CVE-2019-15485 | Cross-site Scripting in Bolt | 中危 | Packagistbolt/bolt | 已审查 | 2019-11-08 23:28 | 2023-09-11 22:59 |
| GHSA-J9XP-92VC-559J CVE-2019-10748 | SQL Injection in sequelize | 严重 | npmsequelize | 已审查 | 2019-11-07 01:11 | 2021-08-19 06:09 |
| GHSA-RC75-CF5C-MXVH CVE-2019-10755 | Use of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml | 中危 | Mavenorg.pac4j:pac4j-saml | 已审查 | 2019-11-07 01:06 | 2021-08-19 06:08 |
| GHSA-C3GV-9CXF-6F57 CVE-2019-15587 | Loofah Allows Cross-site Scripting | 中危 | RubyGemsloofah | 已审查 | 2019-11-06 07:58 | 2023-08-26 05:37 |
| GHSA-MX7P-6679-8G3Q CVE-2019-16942 | Polymorphic Typing in FasterXML jackson-databind | 严重 | Mavencom.fasterxml.jackson.core:jackson-databind | 已审查 | 2019-10-29 04:51 | 2024-03-15 08:57 |
| GHSA-M9JW-237R-GVFV CVE-2019-10752 | SQL Injection in sequelize | 严重 | npmsequelize | 已审查 | 2019-10-26 03:43 | 2023-09-12 06:39 |
| GHSA-XWX6-VMJ4-5RV8 CVE-2017-15703 | Denial of service via deserialization attack in nifi | 中危 | Mavenorg.apache.nifi:nifi-framework-cluster-protocol | 已审查 | 2019-10-26 03:42 | 2021-08-19 06:04 |
| GHSA-HHWC-8G49-J8JX CVE-2019-18409 | Ruby_parser-legacy Incorrect Permission Assignment for Critical Resource | 高危 | RubyGemsruby_parser-legacy | 已审查 | 2019-10-26 03:41 | 2023-08-26 07:43 |
| GHSA-XG59-M7WX-853Q CVE-2019-10756 | Cross-site Scripting in node-red-dashboard | 中危 | npmnode-red-dashboard | 已审查 | 2019-10-26 03:41 | 2021-08-19 06:03 |
| GHSA-VFJ6-275Q-4PVM CVE-2017-18638 | graphite.composer.views.send_email vulnerable to SSRF | 高危 | PyPIgraphite-web | 已审查 | 2019-10-25 21:55 | 2024-09-21 05:42 |
| GHSA-C9CG-Q8R2-XVJQ CVE-2019-16929 | Improper Authentication in Auth0.AuthenticationApi | 高危 | NuGetAuth0.AuthenticationApi | 已审查 | 2019-10-25 04:56 | 2021-08-19 06:01 |
| GHSA-27P5-7CW6-M45H CVE-2019-17400 | Server-Side Request Forgery in unoconv | 高危 | PyPIunoconv | 已审查 | 2019-10-25 04:46 | 2024-11-19 06:12 |
| GHSA-J52R-XC68-Q8F4 CVE-2019-11284 | Insufficiently Protected Credentials in Pivotal Reactor Netty | 高危 | Mavenio.projectreactor.netty:reactor-netty | 已审查 | 2019-10-23 22:14 | 2021-08-19 05:52 |