Advisories

Listing reported advisories sorted by their report date.

FeehiCMS User[avatar] unrestricted upload
GitHub

feehi/cms

<= 2.1.1

2024-08-30 19:53:35
FeehiCMS BannerForm[img] unrestricted upload
GitHub

feehi/cms

<= 2.1.1

2024-08-30 19:53:33
FeehiCMS file upload vulnerability
GitHub

feehi/cms

<= 2.1.1

2024-08-30 19:53:23
CVE-2024-50343: Incorrect response from Validator when input ends with ` `
FriendsOfPHP

symfony/symfony

>=6.4.0, <6.4.11 · >=5.4.0, <5.4.43 · >=7.1.0, <7.1.4 · >=7.0.0, <7.1.0 · >=6.3.0, <6.4.0 · >=6.2.0, <6.3.0 · >=6.1.0, <6.2.0 · >=6.0.0, <6.1.0 · >=5.3.0, <5.4.0 · >=5.2.0, <5.3.0 · >=5.1.0, <5.2.0 · >=5.0.0, <5.1.0 · >=4.0.0, <5.0.0 · >=3.0.0, <4.0.0 · >=2.0.0, <3.0.0

2024-08-30 08:00:00
CVE-2024-50343: Incorrect response from Validator when input ends with ` `
FriendsOfPHP

symfony/validator

>=6.4.0, <6.4.11 · >=5.4.0, <5.4.43 · >=7.1.0, <7.1.4 · >=7.0.0, <7.1.0 · >=6.3.0, <6.4.0 · >=6.2.0, <6.3.0 · >=6.1.0, <6.2.0 · >=6.0.0, <6.1.0 · >=5.3.0, <5.4.0 · >=5.2.0, <5.3.0 · >=5.1.0, <5.2.0 · >=5.0.0, <5.1.0 · >=4.0.0, <5.0.0 · >=3.0.0, <4.0.0 · >=2.0.0, <3.0.0

2024-08-30 08:00:00
Powermail TYPO3 extension Broken Access Control in the OutputController
GitHub

in2code/powermail

>= 11.0.0, < 12.4.0 · >= 9.0.0, < 10.9.0 · >= 8.0.0, < 8.5.0 · < 7.5.0

2024-08-29 18:04:58
WWBN AVideo Remote Code Execution
GitHub

wwbn/avideo

>= 12.4, <= 14.2

2024-08-29 18:03:37
"powermail" (powermail) Insecure Direct Object Reference (IDOR)
GitHub

in2code/powermail

>= 11.0.0, < 12.4.0 · >= 9.0.0, < 10.9.0 · >= 8.0.0, < 8.5.0 · < 7.5.0

2024-08-29 17:59:04
Kirby has insufficient permission checks in the language settings
GitHub

getkirby/cms

>= 3.9.0, <= 3.9.8.1 · >= 3.8.0, <= 3.8.4.3 · >= 3.7.0, <= 3.7.5.4 · >= 3.10.0, <= 3.10.1 · >= 4.0.0, <= 4.3.0 · <= 3.6.6.5

2024-08-29 17:55:32
TYPO3-EXT-SA-2024-006: Multiple vulnerabilities in "powermail" (powermail)
FriendsOfPHP

in2code/powermail

>=12.0.0, <12.4.0 · >=9.0.0, <10.9.0 · >=8.0.0, <8.5.0 · <7.5.0

2024-08-27 06:59:00
Froxlor: /etc/pure-ftpd/db/mysql.conf is chmod 644 but contains <SQL_UNPRIVILEGED_PASSWORD>
GitHub

froxlor/froxlor

<= 2.2.0-rc3

2024-08-23 18:54:33
nukeviet Deserialization of Untrusted Data vulnerability
GitHub

nukeviet/nukeviet

<= 4.5

2024-08-21 20:09:00
Concrete CMS vulnerable to Stored Cross-site Scripting
GitHub

concrete5/concrete5

>= 9.0.0RC1, < 9.3.3

2024-08-20 20:02:06
Concrete CMS Stored Cross-site Scripting vulnerability
GitHub

concrete5/concrete5

>= 9.0.0RC1, < 9.3.3 · < 8.5.18

2024-08-19 22:08:02
Bolt CMS Cross-site Scripting vulnerability
GitHub

bolt/bolt

<= 3.7.1

2024-08-19 21:49:30
Automad arbitrary file upload vulnerability
GitHub

automad/automad

<= 2.0.0-alpha.5 · < 2.0.0-alpha.5

2024-08-19 21:03:26
Cross-Site Request Forgery (CSRF) in automad/automad
GitHub

automad/automad

< 2.0.0-alpha.1 · <= 1.10.9

2024-08-19 20:52:33
Cross site scripting in automad/automad
GitHub

automad/automad

< 1.8.0

2024-08-19 20:49:57
Cross site scripting in moodle
GitHub

moodle/moodle

<= 3.10.9

2024-08-15 22:21:39
Persistent Cross-site Scripting in eZ Platform Rich Text Field Type
GitHub

ezsystems/ezplatform-richtext

>= 3.3.0, < 3.3.40

2024-08-14 18:08:23
Persistent Cross-site Scripting in Ibexa RichText Field Type
GitHub

ibexa/fieldtype-richtext

>= 4.6.0, < 4.6.10

2024-08-14 18:08:20
Concrete CMS Stored XSS in getAttributeSetName
GitHub

concrete5/concrete5

>= 9.0.0, < 9.3.3 · < 8.5.18

2024-08-08 20:40:13
Shopware vulnerable to blind SQL-injection in DAL aggregations
GitHub

shopware/core

>= 6.6.0.0, <= 6.6.5.0 · <= 6.5.8.12

2024-08-08 14:53:58
Shopware vulnerable to Server Side Template Injection in Twig using Context functions
GitHub

shopware/core

>= 6.6.0.0, <= 6.6.5.0 · <= 6.5.8.12

2024-08-08 14:50:12
Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag
GitHub

shopware/core

>= 6.6.0.0, <= 6.6.5.0 · <= 6.5.8.12

2024-08-08 14:48:03
Shopware vulnerable to Improper Access Control with ManyToMany associations in store-api
GitHub

shopware/core

>= 6.6.0.0, <= 6.6.5.0 · <= 6.5.8.12

2024-08-08 14:42:59
Microweber Cross Site Scripting (XSS) vulnerability
GitHub

microweber/microweber

<= 2.0.16

2024-08-08 13:26:09
Magento Open Source Incorrect Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.6-p1, < 2.4.6-p6 · >= 2.4.5-p1, < 2.4.5-p8 · < 2.4.4-p9 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-08-07 17:43:56
Magento Open Source Cross-Site Scripting (XSS) vulnerability
GitHub

magento/community-edition

>= 2.4.6-p1, < 2.4.6-p6 · >= 2.4.5-p1, < 2.4.5-p8 · < 2.4.4-p9 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-08-07 17:43:49
Magento Open Source Improper Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.6-p1, < 2.4.6-p6 · >= 2.4.5-p1, < 2.4.5-p8 · < 2.4.4-p9 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-08-07 17:43:36
Magento Open Source Improper Authentication vulnerability
GitHub

magento/community-edition

>= 2.4.6-p1, < 2.4.6-p6 · >= 2.4.5-p1, < 2.4.5-p8 · < 2.4.4-p9 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-08-07 17:43:01
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability
GitHub

magento/community-edition

>= 2.4.6-p1, < 2.4.6-p6 · >= 2.4.5-p1, < 2.4.5-p8 · < 2.4.4-p9 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-08-07 17:42:50
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.6-p1, < 2.4.6-p6 · >= 2.4.5-p1, < 2.4.5-p8 · < 2.4.4-p9 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-08-07 15:58:30
Microweber Reflected Cross-site scripting (XSS) vulnerability
GitHub

microweber/microweber

< 2.0.16

2024-08-06 16:07:54
Microweber Cross Site Scripting (XSS) vulnerability
GitHub

microweber/microweber

<= 2.0.16

2024-08-05 21:19:51
dcat-admin Cross Site Scripting vulnerability
GitHub

dcat/laravel-admin

<= 2.1.3

2024-08-05 21:19:16
ipl/web's `ipl\Web\Common\CsrfCounterMeasure` is susceptible to CSRF
GitHub

ipl/web

< 0.10.1

2024-08-05 14:39:10
Bootstrap vulnerable to Cross-Site Scripting (XSS)
GitHub

twbs/bootstrap

>= 4.0.0, < 4.1.2 · >= 2.3.0, < 3.4.0

2024-08-02 19:14:06
ICEcoder vulnerable to Cross Site Scripting
GitHub

icecoder/icecoder

<= 8.1

2024-08-02 16:09:34
Webtrees Path Traversal vulnerability
GitHub

fisharebest/webtrees

<= 2.1.18

2024-08-02 16:04:11
Dolibarr ERP CRM vulnerable to remote code execution (RCE)
GitHub

dolibarr/dolibarr

< 19.0.2

2024-08-02 15:56:45
ICEcoder Path Traversal vulnerability
GitHub

icecoder/icecoder

<= 8.1

2024-08-02 13:35:27
Concrete CMS vulnerable to Stored Cross-site Scripting
GitHub

concrete5/concrete5

>= 9.0.0, <= 9.3.2

2024-08-02 13:27:51
ICEcoder vulnerable to Cross Site Scripting
GitHub

icecoder/icecoder

<= 8.1

2024-08-02 13:19:59
Cross-site Scripting in Backdrop CMS
GitHub

backdrop/backdrop

< 1.24.2

2024-08-02 10:31:21
Bootstrap Cross-Site Scripting (XSS) vulnerability
GitHub

twbs/bootstrap

>= 2.0.0, <= 3.4.1

2024-08-01 21:28:40
Bootstrap Cross-site Scripting vulnerability
GitHub

twbs/bootstrap

>= 4.0.0-beta, < 4.0.0-beta.2 · >= 2.0.4, < 3.4.0

2024-08-01 21:03:45
Bootstrap Cross-site Scripting vulnerability
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.23 · >= 9.0.0, < 9.5.4 · >= 4.0.0, < 4.1.2

2024-08-01 21:03:39
Bootstrap Cross-site Scripting vulnerability
GitHub

twbs/bootstrap

>= 4.0.0, < 4.1.2 · >= 2.3.0, < 3.4.0

2024-08-01 21:03:34
XSS vulnerability that affects bootstrap
GitHub

twbs/bootstrap

< 3.4.0

2024-08-01 21:03:26
« Previous Next »

Showing 651 to 700 of 5933 results

1 2 ... 11 12 13 14 15 16 17 ... 118 119