Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
M URL Redirection to Untrusted Site ('Open Redirect')	oro/platform >=1.7.0, <1.7.4	Composer	21 May 2024
M Unquoted Search Path or Element	LizardByte/Sunshine [0.17.0,0.23.0)	Unmanaged (C/C++)	21 May 2024
M Exposure of Sensitive Information to an Unauthorized Actor	keepassxreboot/keepassxc [0,]	Unmanaged (C/C++)	21 May 2024
M Exposure of Sensitive Information to an Unauthorized Actor	keepassxreboot/keepassxc [0,]	Unmanaged (C/C++)	21 May 2024
M Violation of Secure Design Principles	passbolt/passbolt_api <2.11.0	Composer	21 May 2024
M Uncontrolled Resource Consumption	github.com/stacklok/minder/internal/verifier/sigstore/container <0.0.51	Go	21 May 2024
H Prototype Pollution	@bit/loader *	npm	21 May 2024
M Generation of Predictable Initialization Vectors (IVs)	github.com/bincyber/go-sqlcrypter/providers/awskms *	Go	21 May 2024
H Prototype Pollution	@blackprint/engine >=0.8.12 <0.9.2	npm	21 May 2024
M Uncontrolled Resource Consumption	taurusxin/ncmdump [0,]	Unmanaged (C/C++)	21 May 2024
M Uncontrolled Resource Consumption	taurusxin/ncmdump [0,]	Unmanaged (C/C++)	21 May 2024
M Insufficiently Protected Credentials	github.com/aquasecurity/trivy/pkg/fanal/image/registry/google <0.51.2	Go	21 May 2024
M Insufficiently Protected Credentials	github.com/aquasecurity/trivy/pkg/fanal/image/registry/ecr <0.51.2	Go	21 May 2024
M Insufficiently Protected Credentials	github.com/aquasecurity/trivy/pkg/fanal/image/registry/azure <0.51.2	Go	21 May 2024
M Improper Neutralization of Server-Side Includes Within a Web Page	verbb/formie <2.1.6	Composer	21 May 2024
C Malicious Package	fetch-datas *	npm	21 May 2024
C Malicious Package	tcm-app-migration-miles-react *	npm	21 May 2024
H Prototype Pollution	@apidevtools/json-schema-ref-parser >=11.0.0 <11.2.0	npm	21 May 2024
M Always-Incorrect Control Flow Implementation	requests [,2.32.2)	pip	21 May 2024
C Heap-based Buffer Overflow	fluent/fluent-bit [2.0.7,2.2.3) [3.0.0,3.0.4)	Unmanaged (C/C++)	20 May 2024
C Malicious Package	@westpac-components-web/hooks *	npm	20 May 2024
C Malicious Package	@ozon-ob-foundation/communication *	npm	20 May 2024
C Malicious Package	@ozon-ob-foundation/tracker *	npm	20 May 2024
C Malicious Package	@ozon-fe/media-player *	npm	20 May 2024
C Malicious Package	@ozon-ob-foundation/event-bus *	npm	20 May 2024
C Malicious Package	@ozon-ob-toolbox/format-date *	npm	20 May 2024
C Malicious Package	test_dependency_confusion12 *	npm	20 May 2024
C Malicious Package	brand-adidas-asset-fonts *	npm	20 May 2024
C Malicious Package	brand-adidas-design-tokens *	npm	20 May 2024
C Malicious Package	cors-app *	npm	20 May 2024

APPLICATION

OPERATING SYSTEM