Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
H Deserialization of Untrusted Data	timber/timber <2.1.0	Composer	14 Apr 2024
M Cross-site Scripting (XSS)	mautic/core <4.4.12	Composer	14 Apr 2024
M SQL Injection	mautic/core >=1.0.0-beta4, <4.4.12 >=5.0.0-alpha, <5.0.4	Composer	14 Apr 2024
H Exposure of Sensitive Information to an Unauthorized Actor	mautic/core >=1.0.0-beta4, <4.4.12 >=5.0.0-alpha, <5.0.4	Composer	14 Apr 2024
H Relative Path Traversal	mautic/core >=1.0.0-beta4, <4.4.12 >=5.0.0-alpha, <5.0.4	Composer	14 Apr 2024
M Server-Side Request Forgery (SSRF)	mautic/core >=1.0.0-beta4, <4.4.12 >=5.0.0-alpha, <5.0.4	Composer	14 Apr 2024
M Time-of-check Time-of-use (TOCTOU) Race Condition	magnum [,14.1.2) [15.0.0.0rc1,15.0.2) [16.0.0.0rc1,16.0.2) [17.0.0.0rc1,17.0.2)	pip	14 Apr 2024
H Relative Path Traversal	nicegui [1.4.6,1.4.21)	pip	14 Apr 2024
M Insertion of Sensitive Information into Log File	github.com/apache/solr-operator/controllers >=0.3.0 <0.8.1	Go	14 Apr 2024
M Improper Removal of Sensitive Information Before Storage or Transfer	opentelemetry.instrumentation.http [,1.8.1)	NuGet	14 Apr 2024
M Improper Removal of Sensitive Information Before Storage or Transfer	opentelemetry.instrumentation.aspnetcore [,1.8.1)	NuGet	14 Apr 2024
M Incorrect Authorization	winter/wn-dusk-plugin <2.1.0	Composer	14 Apr 2024
H Infinite loop	org.bouncycastle:bcprov-jdk15to18 [1.71,1.78)	Maven	14 Apr 2024
H Infinite loop	org.bouncycastle:bcprov-jdk18on [1.71,1.78)	Maven	14 Apr 2024
H Denial of Service (DoS)	github.com/traefik/traefik/v2/pkg/config/static <2.11.2	Go	14 Apr 2024
H Denial of Service (DoS)	github.com/traefik/traefik/v3/pkg/config/static >=3.0.0-beta1 <3.0.0-rc5	Go	14 Apr 2024
M Incorrect Authorization	org.apache.kafka:kafka [3.5.0, 3.6.2)	Maven	12 Apr 2024
M Heap-based Buffer Overflow	ffmpeg [,n7.0)	Unmanaged (C/C++)	12 Apr 2024
M NULL Pointer Dereference	swftools [0,]	Unmanaged (C/C++)	12 Apr 2024
C Code Injection	github.com/tiagorlampert/chaos/services/client *	Go	12 Apr 2024
M Information Exposure	com.ruoyi:ruoyi-common [0,]	Maven	12 Apr 2024
M Information Exposure Through Sent Data	phin <3.7.1	npm	12 Apr 2024
H Information Exposure	reportico-web/reportico >=0.0.0	Composer	12 Apr 2024
H Cross-site Scripting (XSS)	mautic/core >=1.0.0-beta2, <4.4.12	Composer	12 Apr 2024
M Information Exposure Through an Error Message	azure.identity [,1.11.0)	NuGet	12 Apr 2024
M Open Redirect	org.springframework:spring-web [,5.3.34) [6.0.0, 6.0.19) [6.1.0, 6.1.6)	Maven	12 Apr 2024
C Improper Control of Generation of Code ('Code Injection')	org.apache.zeppelin:zeppelin-jdbc [,0.11.1)	Maven	12 Apr 2024
M Information Exposure	matrix-appservice-irc *	npm	12 Apr 2024
M Cross-site Scripting (XSS)	org.apache.zeppelin:zeppelin-interpreter [0.8.2,0.11.1)	Maven	12 Apr 2024
M Resource Exhaustion	idna [,3.7)	pip	12 Apr 2024

APPLICATION

OPERATING SYSTEM