Advisories

Listing reported advisories sorted by their report date.

Magento stored cross-site scripting vulnerability
GitHub

magento/project-community-edition

>= 2.4.2-p1, < 2.4.2-p2 · < 2.3.7-p1 · <= 2.0.2 · = 2.4.2 · = 2.3.7

2025-11-06 20:57:47
Magento affected by a business logic error in the placeOrder graphql mutation
GitHub

magento/project-community-edition

>= 2.4.2-p1, < 2.4.2-p2 · < 2.3.7-p1 · <= 2.0.2 · = 2.4.2 · = 2.3.7

2025-11-06 17:30:18
Magento XML Injection vulnerability in the Widgets Update Layout
GitHub

magento/project-community-edition

>= 2.4.2-p1, < 2.4.2-p2 · < 2.3.7-p1 · <= 2.0.2 · = 2.4.2 · = 2.3.7

2025-11-06 17:29:28
Magento improper access control vulnerability within Magento's Media Gallery Upload workflow
GitHub

magento/project-community-edition

>= 2.4.2-p1, < 2.4.2-p2 · < 2.3.7-p1 · <= 2.0.2 · = 2.4.2 · = 2.3.7

2025-11-06 17:29:20
Magento affected by remote code execution vulnerability in the CMS page scheduled update feature
GitHub

magento/project-community-edition

>= 2.4.2-p1, < 2.4.2-p2 · < 2.3.7-p1 · <= 2.0.2 · = 2.4.2 · = 2.3.7

2025-11-06 17:29:08
Magento DOM-based Cross-Site Scripting (XSS) vulnerability
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.4-p1, < 2.4.4-p10 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-11-06 17:21:45
Magento Path Traversal vulnerability
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.4-p1, < 2.4.4-p10 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-11-06 17:21:30
Magento Stored Cross-Site Scripting (XSS) vulnerability
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.4-p1, < 2.4.4-p10 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-11-06 17:19:34
Magento does not properly restrict excessive authentication attempts
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.4-p1, < 2.4.4-p10 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-11-06 17:19:18
Magento OS Command ('OS Command Injection') vulnerability
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.4-p1, < 2.4.4-p10 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-11-06 16:57:47
Magento OS Command ('OS Command Injection') vulnerability
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.4-p1, < 2.4.4-p10 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-11-06 16:57:33
Magento Improper Authorization vulnerability
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.4-p1, < 2.4.4-p10 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-11-06 16:53:56
Magento Improper Authorization vulnerability
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.4-p1, < 2.4.4-p10 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-11-06 16:49:31
Magento Improper Authorization vulnerability
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.4-p1, < 2.4.4-p10 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-11-06 16:49:19
Magento Improper Authorization vulnerability
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.4-p1, < 2.4.4-p10 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-11-06 16:13:14
Magento Improper Authorization vulnerability
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.4-p1, < 2.4.4-p10 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-11-06 16:13:07
OpenMage vulnerable to XSS in Admin Notifications
GitHub

openmage/magento-lts

< 20.16.0

2025-11-03 20:24:10
MantisBT unauthorized disclosure of private project column configuration
GitHub

mantisbt/mantisbt

< 2.27.2

2025-11-03 20:13:28
MantisBT lacks verification when changing a user's email address
GitHub

mantisbt/mantisbt

< 2.27.2

2025-11-03 20:12:19
MantisBT Vulnerable to Denial-of-Service (DoS) via Excessive Note Length
GitHub

mantisbt/mantisbt

< 2.27.2

2025-11-03 17:07:41
MantisBT vulnerable to authentication bypass for some passwords due to PHP type juggling
GitHub

mantisbt/mantisbt

< 2.27.2

2025-11-03 17:07:37
Statamic Vulnerable to Superadmin Account Takeover via Stored Cross-Site Scripting and Lack of Proper X-CSRF-TOKEN Server-Side Validation
GitHub

statamic/cms

<= 5.22.0

2025-10-30 17:22:54
Drupal JSON Field is vulnerable to XSS
GitHub

drupal/json_field

< 1.5

2025-10-30 17:11:07
Drupal Plausible tracking is vulnerable to XSS
GitHub

drupal/plausible_tracking

< 1.0.2

2025-10-30 17:10:59
Drupal Acquia DAM allows Forceful Browsing
GitHub

drupal/acquia_dam

< 1.1.5

2025-10-30 17:06:31
Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass
GitHub

drupal/simple_oauth

>= 6.0.0, < 6.0.7

2025-10-30 17:06:21
Drupal CivicTheme Design System allows Cross-Site Scripting (XSS)
GitHub

drupal/civictheme

< 1.12.0

2025-10-30 17:06:13
Drupal CivicTheme Design System allows Forceful Browsing
GitHub

drupal/civictheme

< 1.12.0

2025-10-30 17:06:07
Drupal Umami Analytics allows Cross-Site Scripting (XSS)
GitHub

drupal/umami_analytics

< 1.0.1

2025-10-30 17:05:32
Drupal Currency allows Cross Site Request Forgery
GitHub

drupal/currency

< 3.5.0

2025-10-30 17:05:25
Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables
GitHub

drupal/reverse_proxy_header

< 1.1.2

2025-10-30 17:05:16
Drupal Access code allows Brute Force Attempts
GitHub

drupal/access_code

< 2.0.5

2025-10-30 17:05:07
Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax
GitHub

code16/sharp

< 9.11.1

2025-10-29 10:52:08
PrivateBin is missing HTML sanitization of attached filename in file size hint
GitHub

privatebin/privatebin

>= 1.7.7, < 2.0.2

2025-10-28 20:14:09
Moodle course access permissions are not properly checked in course_output_fragment_course_overview
GitHub

moodle/moodle

>= 5.0.0-beta, < 5.0.3

2025-10-24 20:59:28
Moodle sends quiz-related messages to inactive/suspended users
GitHub

moodle/moodle

>= 5.0.0-beta, < 5.0.3 · >= 4.5.0-beta, < 4.5.7

2025-10-24 20:59:23
Moodle exposed the names of hidden groups to users
GitHub

moodle/moodle

>= 4.2.0-beta, < 4.4.11 · >= 5.0.0-beta, < 5.0.3 · >= 4.5.0-beta, < 4.5.7 · < 4.1.21

2025-10-24 20:59:13
Moodle has a time restriction bypass
GitHub

moodle/moodle

>= 4.2.0-beta, < 4.4.11 · >= 5.0.0-beta, < 5.0.3 · >= 4.5.0-beta, < 4.5.7 · < 4.1.21

2025-10-24 20:58:54
Moodle's error handling leads to sensitive information disclosure
GitHub

moodle/moodle

>= 5.0.0-beta, < 5.0.3 · >= 4.5.0-beta, < 4.5.7

2025-10-24 20:58:33
Moodle vulnerable to brute-force password guesses
GitHub

moodle/moodle

>= 4.2.0-beta, < 4.4.11 · >= 5.0.0-beta, < 5.0.3 · >= 4.5.0-beta, < 4.5.7 · < 4.1.21

2025-10-24 20:58:13
RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency
GitHub

spiral/roadrunner

< 2025.1.0

2025-10-24 20:57:41
Moodle does not properly enforce MFA
GitHub

moodle/moodle

>= 4.4.0-beta, < 4.4.11 · >= 5.0.0-beta, < 5.0.3 · >= 4.5.0-beta, < 4.5.7

2025-10-24 17:43:17
Magento Improper Access Control Leads to Privilege escalation
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · < 2.4.4-p10 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-10-23 22:23:23
Magento Improper Authorization leads to Security feature bypass
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · < 2.4.4-p10 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-10-23 22:23:18
Magento Improper Authorization leads to Security feature bypass
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · < 2.4.4-p10 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-10-23 22:23:15
Magento Improper Authorization Leading to Security feature bypass
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · < 2.4.4-p10 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-10-23 22:23:00
Magento Improper Access Control Leads to Privilege escalation
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · < 2.4.4-p10 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-10-23 22:22:55
Magento Improper Authorization leads to security feature bypass
GitHub

magento/project-community-edition

>= 2.4.7-beta1, < 2.4.7-p2 · >= 2.4.6-p1, < 2.4.6-p7 · >= 2.4.5-p1, < 2.4.5-p9 · < 2.4.4-p10 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-10-23 22:22:42
Magento does not properly protect credentials
GitHub

magento/project-community-edition

>= 2.4.8-beta1, < 2.4.8-beta2 · >= 2.4.7-beta1, < 2.4.7-p5 · >= 2.4.6-p1, < 2.4.6-p10 · >= 2.4.5-p1, < 2.4.5-p12 · < 2.4.4-p13 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-10-23 22:22:10
Magento Improper Access Control leads to Security feature bypass
GitHub

magento/project-community-edition

>= 2.4.8-beta1, < 2.4.8-beta2 · >= 2.4.7-beta1, < 2.4.7-p5 · >= 2.4.6-p1, < 2.4.6-p10 · >= 2.4.5-p1, < 2.4.5-p12 · < 2.4.4-p13 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-10-23 22:22:05
« Previous Next »

Showing 101 to 150 of 6384 results

1 2 3 4 5 6 7 8 9 10 ... 127 128