Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-x5mq-jjr3-vmx6
  • Packagist/codeigniter4/framework
Missing validation of header name and value in codeigniter4/framework 6 hours ago
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-79xx-vf93-p7cx
  • Packagist/phpoffice/phpspreadsheet
Cross-Site Scripting (XSS) vulnerability in generateNavigation() function in PhpSpreadsheet 6 hours ago
  • Fix available
  • Severity - 5.1 (Medium)
GHSA-43c9-gw4x-pcx6
  • Packagist/yeswiki/yeswiki
Authenticated arbitrary file deletion in YesWiki 7 hours ago
  • Fix available
  • Severity - 7.1 (High)
GHSA-w59h-3x3q-3p6j
  • Packagist/yeswiki/yeswiki
Authenticated Stored XSS in YesWiki 7 hours ago
  • Fix available
  • Severity - 7.6 (High)
GHSA-wphc-5f2j-jhvg
  • Packagist/yeswiki/yeswiki
Unauthenticated DOM Based XSS in YesWiki 7 hours ago
  • Fix available
  • Severity - 7.6 (High)
GHSA-x684-96hh-833x
  • Packagist/craftcms/cms
Craft CMS has a potential RCE with a compromised security key 7 hours ago
  • Fix available
  • Severity - 8.0 (High)
GHSA-g84x-g96g-rcjc
  • Packagist/librenms/librenms
Librenms has a reflected XSS on error alert 5 days ago
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-c66p-64fj-jmc2
  • Packagist/librenms/librenms
LibreNMS Misc Section Stored Cross-site Scripting vulnerability 5 days ago
  • Fix available
  • Severity - 4.6 (Medium)
GHSA-27vf-3g4f-6jp7
  • Packagist/librenms/librenms
LibreNMS Ports Stored Cross-site Scripting vulnerability 5 days ago
  • Fix available
  • Severity - 4.6 (Medium)
GHSA-pm8j-3v64-92cq
  • Packagist/librenms/librenms
LibreNMS Display Name Stored Cross-site Scripting vulnerability 5 days ago
  • Fix available
  • Severity - 4.6 (Medium)
GHSA-2f4w-6mc7-4w78
  • Packagist/librenms/librenms
LibreNMS Display Name 2 Stored Cross-site Scripting vulnerability 5 days ago
  • Fix available
  • Severity - 4.6 (Medium)
GHSA-mm6v-68qp-f9fw
  • Packagist/islandora/crayfish
Crayfish allows Remote Code Execution via Homarus Authorization header 6 days ago
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-mqf3-qpc3-g26q
  • Packagist/silverstripe/framework
Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message 14 Jan
  • Fix available
GHSA-ff6q-3c9c-6cf5
  • Packagist/silverstripe/framework
Silverstripe Framework has a XSS in form messages 14 Jan
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-7cmp-cgg8-4c82
  • Packagist/silverstripe/framework
Silverstripe Framework has a XSS via insert media remote file oembed 14 Jan
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-c3h5-h73c-29hq
  • Packagist/mediawiki/data-transfer
Mediawiki - DataTransfer Extension Cross-Site Request Forgery (CSRF) and Cross-site Scripting (XSS) 14 Jan
  • Fix available
  • Severity - 5.3 (Medium)