Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Airsonic
CRITICAL 9.8
CVE-2019-10907
Airsonic 10.2.1 uses Spring's default remember-me mechanism based on MD5, with a fixed key of airsonic in GlobalSecurityConfig.java. An attacker able…
Patch available
Fix from $2,300
2019-04-07
Airsonic
CRITICAL 9.8
CVE-2019-10908
In Airsonic 10.2.1, RecoverController.java generates passwords via org.apache.commons.lang.RandomStringUtils, which uses java.util.Random internally.…
Patch available
Fix from $2,300
2019-04-07
Airsonic
CRITICAL 9.8
CVE-2018-20222
XXE issue in Airsonic before 10.1.2 during parse.
Fix: 10.1.2+
Fix from $2,300
2019-04-04