Advisories

Listing reported advisories sorted by their report date.

Drupal has open redirect vulnerability in the Overlay module
GitHub

drupal/drupal

>= 7.0, < 7.24

2024-10-30 17:57:21
phpBB 3.0.7 allows remote attackers to bypass intended access restrictions
GitHub

phpbb/phpbb

> 3.0.6, < 3.0.7-PL1

2024-10-30 17:54:19
phpBB vulnerability related to use of "forum id" in circumstances related to a "global announcement."
GitHub

phpbb/phpbb

< 3.0.5

2024-10-30 17:52:01
phpBB vulnerable to sensitive information disclosure
GitHub

phpbb/phpbb

< 3.0.4

2024-10-30 17:14:55
phpBB's Smiley Pack acp_icons.php main pack vulnerable to cross site scripting
GitHub

phpbb/phpbb

< 3.3.11

2024-10-30 16:42:40
HTML Purifier allows remote attackers to obtain sensitive information
GitHub

ezyang/htmlpurifier

<= 4.2.0

2024-10-29 21:31:44
HTML Purifier Cross-site Scripting vulnerability
GitHub

ezyang/htmlpurifier

< 2.0.1

2024-10-29 21:20:56
Cross site scripting in ameos_tarteaucitron
GitHub

ameos/ameos_tarteaucitron

< 1.2.23

2024-10-28 18:46:13
Funadmin Cross-site Scripting vulnerability
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-28 14:38:36
Logic flaw in Funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-25 21:48:55
SQL injection in funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-25 21:48:15
SQL injection in funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-25 21:48:00
SQL injection in funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-25 21:47:45
SQL injection in funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-25 21:47:30
SQL injection in funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-25 21:47:15
SQL injection in funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-25 21:46:55
SQL injection in funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-25 21:46:35
SQL injection in funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-25 21:46:05
Remote code execution in php-heic-to-jpg
GitHub

maestroerror/php-heic-to-jpg

< 1.0.5

2024-10-24 21:45:56
Pterodactyl Panel has plain-text logging of user passwords when two-factor authentication is disabled
GitHub

pterodactyl/panel

< 1.11.8

2024-10-24 19:07:03
ai-admin-graphql has a Denial of service vulnerability in SaaS and marketplace setups
GitHub

aimeos/ai-admin-graphql

>= 2024.04.1, < 2024.07.2

2024-10-24 17:48:41
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature
GitHub

baserproject/basercms

<= 5.1.1

2024-10-24 17:45:59
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature
GitHub

baserproject/basercms

<= 5.1.1

2024-10-24 17:45:11
baserCMS has a Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request
GitHub

baserproject/basercms

<= 5.1.1

2024-10-24 17:44:22
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts and Contents list Feature
GitHub

baserproject/basercms

<= 5.1.1

2024-10-24 17:43:43
SQL injection in funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-21 19:43:42
Cross-site Scripting via uploaded SVG
GitHub

sulu/sulu

>= 2.0.0-RC1, < 2.5.21 · >= 2.6.0-RC1, < 2.6.5 · >= 2.0.0-RC1, < 2.6.5

2024-10-18 14:42:41
Path traversal in redaxo
GitHub

redaxo/source

<= 5.17.1

2024-10-17 22:07:59
Injection of arbitrary HTML/JavaScript code through the media download URL
GitHub

sulu/sulu

>= 2.0.0, <= 2.5.20 · >= 2.6.0, <= 2.6.4 · = 2.5.20 · = 2.6.4

2024-10-17 16:27:23
Admidio Vulnerable to HTML Injection In The Messages Section
GitHub

admidio/admidio

< 4.3.12

2024-10-16 19:50:42
Magento Open Source Cross-Site Scripting (XSS) vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 19:12:09
Magento Open Source Improper Input Validation vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 19:11:50
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 19:11:15
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 19:10:40
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 19:10:14
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 19:09:54
Magento Open Source stored Cross-Site Scripting (XSS) vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:27:40
Magento Open Source Improper Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:27:18
Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:26:48
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:25:23
Magento Open Source Incorrect Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:24:31
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:23:57
Magento Open Source Information Exposure vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:23:33
Magento Open Source Improper Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:22:45
Magento Open Source Information Exposure vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:18:20
Magento Open Source Improper Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:17:16
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:16:57
Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:16:29
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:15:49
Snipe-IT remote code execution
GitHub

snipe/snipe-it

< 7.0.10

2024-10-11 17:47:52
« Previous Next »

Showing 151 to 200 of 5593 results

1 2 3 4 5 6 7 8 9 10 ... 111 112