Upcoming
Vulnerabilities that other sources know about before their CVE record appears in cvelistV5. Data from the GitHub Advisory Database (CC BY 4.0), OSV.dev sources and the Zero Day Initiative; see sources and licenses.
CVE IDs that a GitHub advisory, an OSV.dev record or a ZDI advisory already names, but that cvelistV5 doesn't contain yet: usually reserved and about to be published. Each badge links to the source's record.
234 CVE IDs · page 5 of 5
| CVE ID | First seen | Severity | Affects | Title | Sources |
|---|---|---|---|---|---|
| CVE-2024-30173 | 2024-04-02 | Medium 6.5 | causal/oidc | OpenID Connect Authentication (oidc) Typo3 extension Authentication Bypass | GitHub advisory |
| CVE-2024-1314 | 2024-02-08 | High 8.6 | kinto-attachment | Kinto Attachment's attachments can be replaced on read-only records | GitHub advisory OSV.dev |
| CVE-2014-4920 | 2023-03-16 | Unscored | twitter-bootstrap-rails | Reflective Cross-site Scripting Vulnerability in twitter-bootstrap-rails | GitHub advisory |
| CVE-2022-3102 | 2022-09-21 | Unscored | jwcrypto | jwcrypto token substitution can lead to authentication bypass | GitHub advisory OSV.dev |
| CVE-2016-1000273 | 2022-07-20 | Critical 10.0 | net.bull.javamelody:javamelody-core | Java Melody vulnerable to cross-site scripting | GitHub advisory |
| CVE-2018-18855 | 2022-06-28 | Unscored | io.spray:spray-json_2.10 | Uncontrolled Resource Consumption in Spray JSON | GitHub advisory |
| CVE-2021-30492 | 2021-04-29 | Unscored | zendesk/zendesk_api_client_php | Lack of Input Validation in zendesk_api_client_php for Zendesk Subdomain | GitHub advisory |
| CVE-2019-19723 | 2020-09-04 | Unscored | passport-cognito | Improper Authorization in passport-cognito | GitHub advisory |
| CVE-2013-7035 | 2020-09-04 | Medium 6.5 | react | Cross-Site Scripting in react | GitHub advisory |
| CVE-2017-16034 | 2020-09-01 | Unscored | pidusage | Command Injection in pidusage | GitHub advisory |
| CVE-2016-1000249 | 2020-09-01 | High 7.3 | fury-adapter-swagger | fury-adapter-swagger allows arbitrary file read from system | GitHub advisory |
| CVE-2016-1000242 | 2020-09-01 | High 7.5 | mqtt | Denial of Service in mqtt | GitHub advisory |
| CVE-2016-1000241 | 2020-09-01 | Unscored | pivottable | Cross-Site Scripting (XSS) in pivottable | GitHub advisory |
| CVE-2016-1000240 | 2020-09-01 | Unscored | c3 | Cross-Site Scripting in c3 | GitHub advisory |
| CVE-2016-1000238 | 2020-09-01 | Unscored | node-krb5 | Spoofing attack due to unvalidated KDC in node-krb5 | GitHub advisory |
| CVE-2016-1000235 | 2020-09-01 | Unscored | fuelux | fuelux vulnerable to Cross-Site Scripting in Pillbox feature | GitHub advisory |
| CVE-2016-1000233 | 2020-09-01 | Unscored | swagger-ui | Cross-Site Scripting in swagger-ui | GitHub advisory |
| CVE-2016-1000234 | 2020-09-01 | Unscored | jqtree | Cross-Site Scripting in jqtree | GitHub advisory |
| CVE-2016-1000231 | 2020-09-01 | Unscored | emojione | Cross-Site Scripting in emojione | GitHub advisory |
| CVE-2016-1000230 | 2020-09-01 | Unscored | rendr | XSS in client rendered block templates in rendr | GitHub advisory |
| CVE-2016-1000228 | 2020-09-01 | Unscored | gmail-js | DOM-based XSS in gmail-js | GitHub advisory |
| CVE-2016-1000227 | 2020-09-01 | Unscored | bootstrap-tagsinput | Cross-Site Scripting in bootstrap-tagsinput | GitHub advisory |
| CVE-2016-1000226 | 2020-09-01 | Unscored | swagger-ui | Cross-Site Scripting in swagger-ui | GitHub advisory |
| CVE-2016-1000225 | 2020-09-01 | Critical 9.8 | sequelize | SQL Injection via GeoJSON in sequelize | GitHub advisory |
| CVE-2016-1000224 | 2020-09-01 | Medium 4.2 | ezseed-transmission | Insecure Defaults Leads to Potential MITM in ezseed-transmission | GitHub advisory |
| CVE-2016-3942 | 2020-09-01 | Medium 6.3 | jsrender | Template Injection in jsrender | GitHub advisory |
| CVE-2016-1000223 | 2020-09-01 | High 8.7 | jws | Forgeable Public/Private Tokens in jws | GitHub advisory |
| CVE-2015-7982 | 2020-09-01 | Unscored | gm | Command Injection in gm | GitHub advisory |
| CVE-2014-8881 | 2020-09-01 | Medium 5.3 | bleach | Regular Expression Denial of Service in bleach | GitHub advisory |
| CVE-2014-4179 | 2020-09-01 | High 7.5 | yar | Denial of Service in yar | GitHub advisory |
| CVE-2014-8882 | 2020-08-31 | High 7.5 | validator | Regular Expression Denial of Service in validator | GitHub advisory |
| CVE-2015-4130 | 2020-08-31 | Unscored | ungit | Command Injection in ungit | GitHub advisory |
| CVE-2014-8883 | 2020-08-31 | Medium 5.3 | nhouston | Directory Traversal in nhouston | GitHub advisory |
| CVE-2013-3364 | 2020-08-31 | High 8.2 | ep_imageconvert | Unauthenticated Remote Command Injection in ep_imageconvert | GitHub advisory |
Machine-readable: /api/upcoming · /api/upcoming/reported