Vulnerabilities
Last updated 2 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
Vantage6: 2FA can be circumvented with hacked email access | Medium Risk 6.0 | 5 months ago | 19 hours ago |
|
|
Vantage6: No limit on emails sent for password/MFA reset | Low Risk 3.0 | 5 months ago | 19 hours ago |
|
|
vantage6 collaboration admins can extend their influence by expanding the collaboration | Low Risk 2.7 | 2 years ago | 1 month ago |
|
|
vantage6's CORS settings overly permissive | Medium Risk 4.2 | 2 years ago | 1 month ago |
|
|
vantage6 remote code execution vulnerability | High Risk 8.8 | 2 years ago | 1 month ago |
|
|
vantage6 may create unencrypted tasks in encrypted collaboration | Low Risk 3.5 | 2 years ago | 1 month ago |
|
|
vantage6 has insecure SSH configuration for node and server containers | Medium Risk 6.5 | 2 years ago | 1 month ago |
|
|
vantage6-server node accepts non-whitelisted algorithms from malicious server | High Risk 7.2 | 2 years ago | 1 month ago |
|
|
vantage6-server node accepts non-whitelisted algorithms from malicious server | High Risk 7.2 | 2 years ago | 1 month ago |
|
|
Pickle serialization vulnerable to Deserialization of Untrusted Data | High Risk 7.2 | 3 years ago | 1 month ago |
|
|
Defining resource name as integer may give unintended access in vantage6 | Medium Risk 5.4 | 3 years ago | 1 month ago |
|
|
vantage6 vulnerable to Improper Preservation of Permissions | Medium Risk 6.5 | 3 years ago | 1 month ago |
|
|
vantage6 refresh tokens do not expire | High Risk 8.8 | 3 years ago | 1 month ago |
|
|
vantage6 does not properly delete linked resources when deleting a collaboration | Low Risk 3.7 | 3 years ago | 1 month ago |
|
|
vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review | High Risk 8.0 | 3 months ago | 2 months ago |
|
|
vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review | Unknown | 2 months ago | 2 months ago |
|
|
Vantage6: Set admin user and password from environment or configuration | Medium Risk 6.0 | 5 months ago | 3 months ago |
|
|
vantage6 node has an Improper Access Control issue | Medium Risk 6.0 | 5 months ago | 3 months ago |
|
|
Vantage6: 2FA can be circumvented with hacked email access | Unknown | 3 months ago | 3 months ago |
|
|
Vantage6: No limit on emails sent for password/MFA reset | Unknown | 3 months ago | 3 months ago |
|
|
Vantage6: Set admin user and password from environment or configuration | Unknown | 3 months ago | 3 months ago |
|
|
vantage6 node has an Improper Access Control issue | Unknown | 3 months ago | 3 months ago |
|
|
No summary available | Medium Risk 6.5 | 2 years ago | 3 months ago |
|
|
vantage6's CORS settings overly permissive | Medium Risk 4.2 | 3 months ago | 3 months ago |
|
|
vantage6 vulnerable to Observable Response Discrepancy | Medium Risk 6.5 | 3 years ago | 3 months ago |
|
|
No summary available | Unknown | 3 years ago | 3 months ago |
|
|
No summary available | Medium Risk 5.4 | 3 years ago | 3 months ago |
|
|
Defining resource name as integer may give unintended access in vantage6 | Medium Risk 5.4 | 3 months ago | 3 months ago |
|
|
vantage6 vulnerable to username timing attack | Low Risk 3.7 | 2 years ago | 3 months ago |
|
|
No summary available | Low Risk 3.7 | 2 years ago | 3 months ago |
|
|
vantage6 vulnerable to username timing attack | Low Risk 3.7 | 3 months ago | 3 months ago |
|
|
No summary available | Critical 9.8 | 2 years ago | 3 months ago |
|
|
No summary available | Critical 9.8 | 2 years ago | 3 months ago |
|
|
vantage6 has insecure SSH configuration for node and server containers | Medium Risk 6.5 | 3 months ago | 3 months ago |
|
|
vantage6 vulnerable to a username timing attack on recover password/MFA token | Medium Risk 5.3 | 2 years ago | 3 months ago |
|
|
vantage6 vulnerable to a username timing attack on recover password/MFA token | Medium Risk 5.3 | 3 months ago | 3 months ago |
|
|
vantage6 collaboration admins can extend their influence by expanding the collaboration | Low Risk 2.7 | 3 months ago | 3 months ago |
|
|
Vantage6 Server JWT secret not cryptographically secure | Low Risk 3.0 | 1 year ago | 4 months ago |
|
|
vantage6 lacks brute-force protection on change password functionality | Low Risk 3.0 | 1 year ago | 4 months ago |
|
|
No summary available | Critical 9.8 | 1 year ago | 5 months ago |
|
|
No summary available | High Risk 7.5 | 1 year ago | 5 months ago |
|
|
No summary available | High Risk 8.8 | 2 years ago | 1 year ago |
|
|
No summary available | High Risk 8.8 | 2 years ago | 1 year ago |
|
|
Improper Access Control in vantage6 | Medium Risk 5.4 | 3 years ago | 1 year ago |
|
|
No summary available | High Risk 8.8 | 2 years ago | 2 years ago |
|
|
No summary available | Medium Risk 4.3 | 2 years ago | 2 years ago |
|
|
No summary available | Medium Risk 4.3 | 3 years ago | 2 years ago |
|
|
No summary available | Medium Risk 4.3 | 3 years ago | 2 years ago |
|
|
No summary available | High Risk 7.2 | 3 years ago | 2 years ago |
|
|
No summary available | Unknown | 3 years ago | 2 years ago |
Page 1