Advisories

Listing reported advisories sorted by their report date.

filp whoops Cross-site Scripting vulnerability
GitHub

filp/whoops

< 2.1.13

2024-04-23 22:58:16
Coaster CMS Stored Cross-site Scripting vulnerability
GitHub

web-feet/coastercms

= 5.5.0

2024-04-23 22:57:41
Elefant CMS PHP Code Execution Vulnerability
GitHub

elefant/cms

< 2.0.7

2024-04-23 22:56:58
Sensitive Cookie Without HttpOnly and Secure Flag
GitHub

mautic/core

< 2.1.1

2024-04-23 22:56:43
nZEDb Cross-site Scripting (XSS) in the 404 error page
GitHub

nzedb/nzedb

< 0.8.0.0

2024-04-23 22:53:40
PHPOffice Common Improper Restriction of XML External Entity Reference
GitHub

phpoffice/common

< 0.2.9

2024-04-23 22:51:47
Moodle Unauthorized searching of arbitrary blogs by typing full url
GitHub

moodle/moodle

>= 3.0, < 3.0.10 · >= 2.7, < 2.7.20 · >= 3.2, < 3.2.3 · >= 3.1, < 3.1.6

2024-04-23 22:51:20
getID3 is vulnerable to XML External Entity (XXE)
GitHub

james-heinrich/getid3

< 1.9.9

2024-04-23 22:47:40
FriendsOfSymfony FOSUserBundle denial of service via login form
GitHub

friendsofsymfony/user-bundle

>= 1.3.0, < 1.3.3 · >= 1.2.0, < 1.2.5

2024-04-23 22:47:12
Moodle Denial of Service
GitHub

moodle/moodle

>= 3.5, < 3.5.14 · >= 3.9, < 3.9.2 · >= 3.8, < 3.8.5 · >= 3.7, < 3.7.8

2024-04-23 22:43:12
KumbiaPHP Cross-site Scripting
GitHub

kumbiaphp/kumbiapp

<= 1.1.1

2024-04-23 22:42:10
Moodle Cross-Site Request Forgery (CSRF)
GitHub

moodle/moodle

>= 3.0, < 3.0.10 · >= 2.7, < 2.7.20 · >= 3.2, < 3.2.3 · >= 3.1, < 3.1.6

2024-04-23 22:41:45
Moodle Exposure of Sensitive Information to an Unauthorized Actor
GitHub

moodle/moodle

>= 3.10.0, < 3.10.4 · >= 3.9.0, < 3.9.7 · >= 3.8.0, < 3.8.9

2024-04-23 22:41:15
Moodle Information Disclosure vulnerability
GitHub

moodle/moodle

>= 3.10, < 3.10.4 · >= 3.5, < 3.5.18 · >= 3.9, < 3.9.7 · >= 3.8, < 3.8.9

2024-04-23 22:41:12
moodle Improper Access Control
GitHub

moodle/moodle

>= 3.7.0, < 3.7.1 · >= 3.6.0, < 3.6.5 · < 3.5.7

2024-04-23 22:41:10
moodle Improper Access Control
GitHub

moodle/moodle

>= 3.7.0, < 3.7.1 · >= 3.6.0, < 3.6.5 · < 3.5.7

2024-04-23 22:41:10
phpWhois arbitrary code execution via a crafted whois record
GitHub

jsmitty12/phpwhois

<= 4.3.1 · <= 4.3.0 · <= 4.2.6 · <= 4.2.5 · <= 1.0.0 · < 5.1.0

2024-04-23 22:40:25
FrozenNode Laravel-Administrator unrestricted file upload
GitHub

frozennode/administrator

<= 5.0.12

2024-04-23 22:39:52
Zend Framework SQL injection vulnerability
GitHub

zendframework/zendframework1

>= 1.12.0, < 1.12.9 · >= 2.1.0, < 2.1.99 · >= 2.0.0, < 2.0.99 · >= 2.3.0, < 2.3.3 · >= 2.2.0, < 2.2.8

2024-04-23 22:39:04
Drupal Users without "Administer comments" can set comment visibility on nodes they can edit
GitHub

drupal/drupal

>= 8.0.0, < 8.1.10

2024-04-23 22:37:19
Drupal cross-site scripting vulnerability
GitHub

drupal/core

>= 8.4.0, < 8.4.5 · >= 7.0, < 7.57

2024-04-23 22:36:54
Drupal Core Remote Code Execution Vulnerability
GitHub

drupal/core

>= 8.5.0, < 8.5.1 · >= 8.4.0, < 8.4.6 · >= 8.5, < 8.5.1 · >= 8.4, < 8.4.6 · >= 8.0, < 8.3.9 · >= 7.0, < 7.58

2024-04-23 22:36:49
Drupal Comment reply form allows access to restricted content
GitHub

drupal/core

>= 8.4.0, < 8.4.5 · >= 7.0, < 7.57

2024-04-23 22:36:49
Drupal Core Remote Code Execution Vulnerability
GitHub

drupal/core

>= 8.5, < 8.5.3 · >= 8.0, < 8.4.8 · >= 7.0, < 7.59

2024-04-23 22:36:10
Drupal Cross-Site Scripting vulnerability
GitHub

drupal/core

= 6.20

2024-04-23 22:35:51
Drupal Settings Tray access bypass
GitHub

drupal/core

>= 8.4.0, < 8.4.5

2024-04-23 22:35:39
Drupal access bypass vulnerability
GitHub

drupal/core

>= 7.0, < 7.57

2024-04-23 22:34:14
Drupal access bypass vulnerability
GitHub

drupal/core

>= 8.4.0, < 8.4.5

2024-04-23 22:34:06
Drupal Entity access bypass for entities that do not have UUIDs or have protected revisions
GitHub

drupal/core

>= 8.0, < 8.3.7

2024-04-23 22:33:47
Drupal Remote code execution
GitHub

drupal/core

>= 8.0, < 8.2.7

2024-04-23 22:32:49
Drupal REST API can bypass comment approval
GitHub

drupal/core

>= 8.0, < 8.3.7

2024-04-23 22:32:44
Drupal core access bypass vulnerability
GitHub

drupal/core

>= 8.0, < 8.3.4 · >= 7.0, < 7.56

2024-04-23 22:30:59
Drupal Core Cross-site scripting vulnerability
GitHub

drupal/core

>= 8.8.0, < 8.8.10 · >= 9.0.0, < 9.0.6 · >= 8.9.0, < 8.9.6

2024-04-23 22:30:54
Drupal Core Access bypass vulnerability
GitHub

drupal/core

>= 8.8.0, < 8.8.10 · >= 9.0.0, < 9.0.6 · >= 8.9.0, < 8.9.6

2024-04-23 22:30:49
Drupal Core Access bypass vulnerability
GitHub

drupal/core

>= 9.0.0, < 9.0.1 · >= 8.9.0, < 8.9.1 · >= 8.8.0, < 8.8.8

2024-04-23 22:30:44
Drupal Core Arbitrary PHP code execution vulnerability
GitHub

drupal/core

>= 9.0.0, < 9.0.1 · >= 8.9.0, < 8.9.1 · >= 8.8.0, < 8.8.8

2024-04-23 22:30:39
Drupal Core Open Redirect vulnerability
GitHub

drupal/core

>= 7.0.0, < 7.70

2024-04-23 22:29:41
Drupal Core Cross-site scripting vulnerability
GitHub

drupal/core

>= 8.8.0, < 8.8.10 · >= 9.0.0, < 9.0.6 · >= 8.9.0, < 8.9.6 · >= 7.0.0, < 7.73

2024-04-23 22:29:33
Drupal SQL Injection vulnerability
GitHub

drupal/core

= 6.20

2024-04-23 22:29:24
Drupal CRLF injection vulnerability in the drupal_set_header function
GitHub

drupal/core

>= 6.0, < 6.38

2024-04-23 22:29:19
Drupal Form API ignores access restrictions on submit buttons
GitHub

drupal/core

>= 6.0, < 6.38

2024-04-23 22:28:48
Drupal Brute force amplification attacks via XML-RPC
GitHub

drupal/core

>= 7.0, < 7.43 · >= 6.0, < 6.38

2024-04-23 22:28:03
Drupal File upload access bypass and denial of service
GitHub

drupal/core

>= 8.0, < 8.0.4 · >= 7.0, < 7.43

2024-04-23 22:20:03
Drupal Open redirect vulnerability in the drupal_goto function
GitHub

drupal/core

>= 6.0, < 6.38

2024-04-23 22:20:03
Drupal arbitrary code execution
GitHub

drupal/core

>= 6.0, < 6.38

2024-04-23 22:18:10
Drupal Cross-site scripting (XSS) vulnerability
GitHub

drupal/core

>= 8.0, < 8.1.10

2024-04-23 22:17:48
Drupal Unprivileged access to config export
GitHub

drupal/core

>= 8.0, < 8.1.10

2024-04-23 22:17:37
Drupal sensitive information disclosure
GitHub

drupal/core

>= 8.0, < 8.2.3 · >= 7.0, < 7.52

2024-04-23 22:17:27
Drupal cross site scripting vulnerability
GitHub

drupal/core

>= 8.0, < 8.4.0 · >= 7.0, < 7.57

2024-04-23 22:16:24
Drupal external link injection vulnerability
GitHub

drupal/core

>= 7.0, < 7.57

2024-04-23 22:16:17
« Previous Next »

Showing 1701 to 1750 of 5933 results

1 2 ... 32 33 34 35 36 37 38 ... 118 119