检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-J7C4-2XJ8-WM7R CVE-2015-5159 | Improper Input Validation in kdcproxy | 高危 | PyPIkdcproxy | 已审查 | 2018-11-01 22:49 | 2024-09-25 02:48 |
| GHSA-9JM3-5835-537M CVE-2018-16462 | Command Injection in apex-publish-static-files |
当前筛选结果 366,391 条 · 时间按北京时间显示
| 严重 |
npmapex-publish-static-files |
| 已审查 |
| 2018-11-01 22:48 |
| 2023-09-14 03:36 |
| GHSA-C7C7-XM8G-XM36 CVE-2018-18830 | Unrestricted Upload of File with Dangerous Type in mingsoft:ms-mcms | 严重 | Mavennet.mingsoft:ms-mcms | 已审查 | 2018-11-01 22:48 | 2022-09-15 05:59 |
| GHSA-MWCV-M549-5CM8 CVE-2017-16062 | node-tkinter is malware | 高危 | npmnode-tkinter | 已审查 | 2018-11-01 22:47 | 2023-09-12 02:23 |
| GHSA-RWG6-3FMJ-W4WX CVE-2017-16061 | tkinter is malware | 高危 | npmtkinter | 已审查 | 2018-11-01 22:47 | 2023-09-09 07:30 |
| GHSA-7HJP-97G3-RQ93 CVE-2018-18831 | Path Traversal in minsoft:ms-mcms | 高危 | Mavennet.mingsoft:ms-mcms | 已审查 | 2018-11-01 22:47 | 2022-09-15 05:59 |
| GHSA-G4XQ-JX4W-4CJV CVE-2018-16468 | Loofah Cross-site Scripting vulnerability | 中危 | RubyGemsloofah | 已审查 | 2018-11-01 22:46 | 2023-01-24 01:08 |
| GHSA-F9CM-QMX5-M98H CVE-2018-16469 | Prototype Pollution in merge | 高危 | npmmerge | 已审查 | 2018-11-01 22:45 | 2023-09-08 04:34 |
| GHSA-HVWM-2624-RP9X CVE-2018-8006 | Apache ActiveMQ web console vulnerable to Cross-site Scripting | 中危 | Mavenorg.apache.activemq:activemq-web-console | 已审查 | 2018-10-31 04:48 | 2024-03-15 06:11 |
| GHSA-37Q6-576Q-VGR7 CVE-2018-14731 | Missing Origin Validation in parcel-bundler | 高危 | npmparcel-bundler | 已审查 | 2018-10-31 04:36 | 2021-09-01 04:51 |
| GHSA-6J63-35HJ-VMCG CVE-2018-18476 | mysql-bunuuid-rails vulnerable to SQL injection | 严重 | RubyGemsmysql-binuuid-rails | 已审查 | 2018-10-31 04:34 | 2023-08-26 05:32 |
| GHSA-X84V-XCM2-53PG CVE-2018-18074 | Insufficiently Protected Credentials in Requests | 高危 | PyPIrequests | 已审查 | 2018-10-30 03:06 | 2024-10-22 05:26 |
| GHSA-CF3C-FFFP-34QH CVE-2018-14572 | conference-scheduler-cli Arbitrary Code Execution | 高危 | PyPIconference-scheduler-cli | 已审查 | 2018-10-30 03:05 | 2024-09-14 02:11 |
| GHSA-7FM6-2QW4-G3X3 CVE-2018-18628 | Deserialization of Untrusted Data in Pippo | 严重 | Mavenro.pippo:pippo-core | 已审查 | 2018-10-25 03:46 | 2024-03-05 06:24 |
| GHSA-XJRR-XV9M-4PW5 CVE-2017-18349 | Improper Input Validation in alilibaba:fastjson | 严重 | Mavencom.alibaba:fastjson+1 | 已审查 | 2018-10-25 03:42 | 2022-09-15 05:57 |
| GHSA-GPVR-G6GH-9MC2 CVE-2014-6393 | No Charset in Content-Type Header in express | 中危 | npmexpress | 已审查 | 2018-10-24 01:22 | 2021-08-03 06:35 |
| GHSA-9PRH-257W-9277 CVE-2015-8861 | Cross-Site Scripting in handlebars | 中危 | npmhandlebars | 已审查 | 2018-10-24 01:20 | 2021-09-09 04:16 |
| GHSA-CGJX-MWPX-47JV CVE-2016-10533 | Private Data Disclosure in express-restify-mongoose | 高危 | npmexpress-restify-mongoose | 已审查 | 2018-10-24 01:14 | 2020-09-01 02:10 |
| GHSA-8Q89-PWHH-7WFQ CVE-2018-18531 | Use of Insufficiently Random Values in penggle:kaptcha | 严重 | Mavencom.github.penggle:kaptcha | 已审查 | 2018-10-24 00:08 | 2022-09-15 05:57 |
| GHSA-GFX6-PH4Q-Q54Q CVE-2017-1000118 | Improper Restriction of Operations within the Bounds of a Memory Buffer in akka-http-core | 高危 | Mavencom.typesafe.akka:akka-http-core_2.11+1 | 已审查 | 2018-10-23 04:53 | 2022-09-15 03:20 |
| GHSA-MM57-9J6Q-RXM2 CVE-2017-1000034 | Akka Java Serialization vulnerability | 高危 | Mavencom.typesafe.akka:akka-actor | 已审查 | 2018-10-23 04:52 | 2023-09-27 19:42 |
| GHSA-MR95-9RR4-668F CVE-2018-16115 | Cryptographically Weak Pseudo-Random Number Generator (PRNG) in akka-actor | 严重 | Mavencom.typesafe.akka:akka-actor_2.11+1 | 已审查 | 2018-10-23 04:44 | 2022-09-15 03:20 |
| GHSA-9QGC-P27W-3HJG CVE-2018-16131 | High severity vulnerability that affects com.typesafe.akka:akka-http-core_2.11 and com.typesafe.akka:akka-http-core_2.12 | 高危 | Mavencom.typesafe.akka:akka-http-core_2.11+1 | 已审查 | 2018-10-23 04:37 | 2021-09-09 04:46 |
| GHSA-4CJ8-G9CP-V5WR CVE-2018-9206 | Unrestricted Upload of File with Dangerous Type in blueimp-file-upload | 严重 | npmblueimp-file-upload | 已审查 | 2018-10-23 02:53 | 2022-09-15 03:19 |
| GHSA-H8W4-QV99-F7VJ CVE-2018-15758 | Authorization bypass in org.springframework.security.oauth:spring-security-oauth2 | 高危 | Mavenorg.springframework.security.oauth:spring-security-oauth2 | 已审查 | 2018-10-20 06:00 | 2024-03-05 05:20 |