Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
M URL Redirection to Untrusted Site ('Open Redirect')	umbraco.cms.web.backoffice [8.18.5, 8.18.14) [10.5.0, 10.8.6) [12.0.0, 12.3.10) [13.0.0, 13.3.1)	NuGet	21 May 2024
M URL Redirection to Untrusted Site ('Open Redirect')	umbraco.cms.core [8.18.5, 8.18.14) [10.5.0, 10.8.6) [12.0.0, 12.3.10) [13.0.0, 13.3.1)	NuGet	21 May 2024
H Uncontrolled Resource Consumption	cesanta/mjs [0,]	Unmanaged (C/C++)	21 May 2024
M Improper Input Validation	omero-web [,5.26.0)	pip	21 May 2024
M Open Redirect	oro/crm >=1.7.0, <1.7.4	Composer	21 May 2024
H Improper Encoding or Escaping of Output	tink-crypto/tink-cc [2.0.0,2.1.3)	Unmanaged (C/C++)	21 May 2024
M Memory Leak	ic-stable-structures >=0.6.0 <0.6.4	Cargo	21 May 2024
M URL Redirection to Untrusted Site ('Open Redirect')	oro/platform >=1.7.0, <1.7.4	Composer	21 May 2024
M Unquoted Search Path or Element	LizardByte/Sunshine [0.17.0,0.23.0)	Unmanaged (C/C++)	21 May 2024
M Exposure of Sensitive Information to an Unauthorized Actor	keepassxreboot/keepassxc [0,]	Unmanaged (C/C++)	21 May 2024
M Exposure of Sensitive Information to an Unauthorized Actor	keepassxreboot/keepassxc [0,]	Unmanaged (C/C++)	21 May 2024
M Violation of Secure Design Principles	passbolt/passbolt_api <2.11.0	Composer	21 May 2024
M Uncontrolled Resource Consumption	github.com/stacklok/minder/internal/verifier/sigstore/container *	Go	21 May 2024
H Prototype Pollution	@bit/loader *	npm	21 May 2024
M Generation of Predictable Initialization Vectors (IVs)	github.com/bincyber/go-sqlcrypter/providers/awskms *	Go	21 May 2024
H Prototype Pollution	@blackprint/engine >=0.8.12 <0.9.2	npm	21 May 2024
M Uncontrolled Resource Consumption	taurusxin/ncmdump [0,]	Unmanaged (C/C++)	21 May 2024
M Uncontrolled Resource Consumption	taurusxin/ncmdump [0,]	Unmanaged (C/C++)	21 May 2024
M Insufficiently Protected Credentials	github.com/aquasecurity/trivy/pkg/fanal/image/registry/google *	Go	21 May 2024
M Insufficiently Protected Credentials	github.com/aquasecurity/trivy/pkg/fanal/image/registry/ecr *	Go	21 May 2024
M Insufficiently Protected Credentials	github.com/aquasecurity/trivy/pkg/fanal/image/registry/azure *	Go	21 May 2024
M Improper Neutralization of Server-Side Includes Within a Web Page	verbb/formie <2.1.6	Composer	21 May 2024
C Malicious Package	fetch-datas *	npm	21 May 2024
C Malicious Package	tcm-app-migration-miles-react *	npm	21 May 2024
H Prototype Pollution	@apidevtools/json-schema-ref-parser >=11.0.0 <11.2.0	npm	21 May 2024
M Always-Incorrect Control Flow Implementation	requests [,2.32.0)	pip	21 May 2024
C Heap-based Buffer Overflow	fluent/fluent-bit [2.0.7,2.2.3) [3.0.0,3.0.4)	Unmanaged (C/C++)	20 May 2024
C Malicious Package	@westpac-components-web/hooks *	npm	20 May 2024
C Malicious Package	@ozon-ob-foundation/communication *	npm	20 May 2024
C Malicious Package	@ozon-ob-foundation/tracker *	npm	20 May 2024

APPLICATION

OPERATING SYSTEM