PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/drakkan/sftpgo/v2 SFTPGo: Denial of service via malformed SSH channel request Medium Risk 6.5 6 hours ago 6 hours ago
github.com/drakkan/sftpgo/v2 SFTPGo source-side file-pattern filter bypass during copy operations Medium Risk 4.3 6 hours ago 6 hours ago
github.com/drakkan/sftpgo/v2 SFTPGo has insufficient access control for password reset Medium Risk 6.5 2 years ago 1 month ago
github.com/drakkan/sftpgo/v2 SFTPGo has path confinement bypass in public browsable share partial ZIP download Medium Risk 5.9 3 months ago 3 months ago
github.com/drakkan/sftpgo/v2 SFTPGo has stored XSS via inline parameter on public shares and user file download Low Risk 3.7 3 months ago 3 months ago
github.com/drakkan/sftpgo/v2 SFTPGo has path confinement bypass in public browsable share partial ZIP download in github.com/drakkan/sftpgo Unknown 3 months ago 3 months ago
github.com/drakkan/sftpgo/v2 SFTPGo has stored XSS via inline parameter on public shares and user file download in github.com/drakkan/sftpgo Unknown 3 months ago 3 months ago
github.com/drakkan/sftpgo/v2 SFTPGo improperly sanitizes placeholders in group home directories/key prefixes Medium Risk 6.0 7 months ago 6 months ago
github.com/drakkan/sftpgo/v2 SFTPGo Vulnerable to Path Traversal and Permission Bypass via Path Normalization Discrepancy Medium Risk 6.0 7 months ago 6 months ago
github.com/drakkan/sftpgo/v2 SFTPGo improperly sanitizes placeholders in group home directories/key prefixes in github.com/drakkan/sftpgo Unknown 7 months ago 6 months ago
github.com/drakkan/sftpgo/v2 SFTPGo Vulnerable to Path Traversal and Permission Bypass via Path Normalization Discrepancy in github.com/drakkan/sftpgo Unknown 7 months ago 6 months ago
github.com/drakkan/sftpgo/v2 SFTPGo has insufficient sanitization of user provided rsync command in github.com/drakkan/sftpgo Unknown 1 year ago 7 months ago
github.com/drakkan/sftpgo/v2 sftpgo vulnerable to brute force takeover of OpenID Connect session cookies in github.com/drakkan/sftpgo Unknown 1 year ago 7 months ago
github.com/drakkan/sftpgo/v2 SFTPGo allows administrators to restrict command execution from the EventManager in github.com/drakkan/sftpgo Unknown 1 year ago 7 months ago
github.com/drakkan/sftpgo/v2 SFTPGo has insufficient access control for password reset in github.com/drakkan/sftpgo Unknown 2 years ago 7 months ago
github.com/drakkan/sftpgo/v2 SFTPGo WebClient vulnerable to Cross-site Scripting in github.com/drakkan/sftpgo Unknown 2 years ago 7 months ago
github.com/drakkan/sftpgo/v2 SFTPGo vulnerable to recovery codes abuse in github.com/drakkan/sftpgo Unknown 2 years ago 7 months ago
github.com/drakkan/sftpgo/v2 SFTPGo has insufficient sanitization of user provided rsync command High Risk 7.5 1 year ago 1 year ago
github.com/drakkan/sftpgo/v2 sftpgo vulnerable to brute force takeover of OpenID Connect session cookies Medium Risk 6.0 1 year ago 1 year ago
github.com/drakkan/sftpgo/v2 SFTPGo allows administrators to restrict command execution from the EventManager Medium Risk 6.0 1 year ago 1 year ago
github.com/drakkan/sftpgo/v2 SFTPGo vulnerable to recovery codes abuse High Risk 8.3 4 years ago 2 years ago
Data courtesy of OSV.dev
Page 1