@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +56 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)

swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G336-C7WV-8HP3...

Open Redirect in hekto

Withdrawn: Duplicate of GHSA-qmm9-x5gr-4gfm...

Cross-Site Scripting in keystone

Withdrawn: Duplicate of GHSA-7qcx-jmrc-h2rr...

Regular Expression Denial of Service in highcharts

Withdrawn: Duplicate of GHSA-xmc8-cjfr-phx3...

Sandbox Breakout / Arbitrary Code Execution in safer-eval

Withdrawn: Duplicate of GHSA-hgch-jjmr-gp7w...

Denial of Service in protobufjs

Withdrawn: Duplicate of GHSA-762f-c2wg-m8c8...

Denial of Service in https-proxy-agent

Withdrawn: Duplicate of GHSA-8g7p-74h8-hg48...

Regular Expression Denial of Service in is-my-json-valid

Withdrawn: Duplicate of GHSA-f522-ffg8-j8r6...

Withdrawn

Withdrawn: duplicate of GHSA-2m39-62fm-q8r3...

Withdrawn

Withdrawn: duplicate of GHSA-wjr4-2jgw-hmv8...

coturn < 4.5.1.3 Information Disclosure Vulnerability

coturn is prone to an information disclosure vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

CVE-2020-15084

In express-jwt NPM package up and including version 5.3.3, the algorithms entry to be specified in the configuration is not being enforced. When algorithms is not specified in the configuration, with the combination of jwks-rsa, it may lead to authorization bypass. You are affected by this...

GHSA-6PHF-73Q6-GH87 vulnerabilities

Vulnerabilities for packages: trino, hadoop-fips...

GHSA-MVR2-9PJ6-7W5J vulnerabilities

Vulnerabilities for packages: druid...

GHSA-MVR2-9PJ6-7W5J vulnerabilities

Vulnerabilities for packages: druid, spark-fips, spark, hadoop-fips...

GHSA-V3XW-C963-F5HC vulnerabilities

Vulnerabilities for packages: hive...

WordPress XSS Vulnerability (May 2020) - Windows

WordPress is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress";...

GHSA-H4RC-386G-6M85 vulnerabilities

Vulnerabilities for packages: hive...

CVE-2020-11008

Technical details for CVE-2020-11008 are not present in the provided connected documents. The sources discuss related CVEs and general Git credential leakage vectors but do not specify affected versions, root cause, fixes, or exploitation status for this CVE. Monitor for updates.

Remote Code Execution (RCE) vulnerability in dropwizard-validation

Summary A server-side template injection was identified in the self-validating @SelfValidating feature of dropwizard-validation enabling attackers to inject arbitrary Java EL expressions, leading to Remote Code Execution RCE vulnerability. If you're using a self-validating bean via @SelfValidatin...