Advisories

Listing reported advisories sorted by their report date.

Zenario CMS vulnerable to CRLF injection
GitHub

zendframework/zendframework

>= 2.0.0beta4, < 2.3.8 · >= 2.4.0rc1, < 2.4.1 · >= 2.4, < 2.4.1 · >= 2.0, < 2.3.8 · < 1.12.12

2024-02-01 19:21:08
Open Redirection in Login Handling
GitHub

typo3/cms-core

>= 10.0.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 9.0.0, <= 9.5.24 · >= 8.0.0, <= 8.7.39 · >= 7.0.0, <= 7.6.50 · >= 6.2.0, <= 6.2.56 · >= 11.0.0, < 11.1.1 · >= 9.0.0, < 9.5.25

2024-02-01 19:01:31
Broken Access Control in Form Framework
GitHub

typo3/cms-form

>= 10.0.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 9.0.0, <= 9.5.24 · >= 8.0.0, <= 8.7.39 · >= 11.0.0, < 11.1.1 · >= 9.0.0, < 9.5.25

2024-02-01 18:56:02
Cross-Site Scripting in Fluid view helpers
GitHub

typo3/cms-core

>= 10.0.0, < 10.4.10 · >= 9.0.0, < 9.5.23 · >= 8.7.0, < 8.7.38

2024-02-01 18:55:57
Cross-Site Scripting in ternary conditional operator
GitHub

typo3fluid/fluid

>= 8.0.0, < 8.7.25 · >= 9.0.0, < 9.5.6 · >= 2.6.0, < 2.6.1 · >= 2.5.0, < 2.5.5 · >= 2.4.0, < 2.4.1 · >= 2.3.0, < 2.3.5 · >= 2.2.0, < 2.2.1 · >= 2.1.0, < 2.1.4 · >= 2.0.0, < 2.0.5

2024-02-01 18:55:14
smarty Cross-site Scripting vulnerability in Javascript escaping
GitHub

smarty/smarty

>= 4.0.0, < 4.3.1 · < 3.1.48

2024-02-01 17:59:15
C5 Firefly III CSV Injection.
GitHub

grumpydictator/firefly-iii

< 6.1.7

2024-01-31 18:05:47
Craft CMS Audit Plugin Cross Site Scripting vulnerability
GitHub

superbig/craft-audit

< 3.0.2

2024-01-30 18:43:06
Craft CMS Feed-Me
GitHub

craftcms/cms

< 4.6.2

2024-01-30 18:43:05
Moodle cross-site request forgery (CSRF) vulnerability
GitHub

moodle/moodle

>= 2.8.0, < 2.8.2 · >= 2.7.0, < 2.7.4 · < 2.6.7

2024-01-29 02:52:11
Moodle External function mod_assign_save_submission does not check due dates
GitHub

moodle/moodle

>= 2.8, < 2.8.11 · >= 2.7, < 2.7.13 · >= 3.0, < 3.0.3 · >= 2.9, < 2.9.5

2024-01-26 20:48:55
Moodle XSS from profile fields from external db
GitHub

moodle/moodle

>= 2.8, < 2.8.11 · >= 2.7, < 2.7.13 · >= 3.0, < 3.0.3 · >= 2.9, < 2.9.5

2024-01-26 20:47:44
Moodle all messaging conversations could be viewed
GitHub

moodle/moodle

>= 3.6, < 3.6.4

2024-01-26 20:46:24
Moodle allows attackers to discover hidden course names
GitHub

moodle/moodle

>= 2.8.0, < 2.8.11 · >= 3.0.0, < 3.0.3 · >= 2.9.0, < 2.9.5

2024-01-26 20:15:10
Moodle allows attackers to obtain sensitive category-detail information
GitHub

moodle/moodle

>= 2.8.0, < 2.8.11 · >= 3.0.0, < 3.0.3 · >= 2.9.0, < 2.9.5 · < 2.7.13

2024-01-26 20:14:56
Moodle allows attackers to modify "Exclude grade" settings
GitHub

moodle/moodle

>= 2.8.0, < 2.8.11 · >= 3.0.0, < 3.0.3 · >= 2.9.0, < 2.9.5

2024-01-26 20:14:35
Moodle allows attackers to discover student e-mail addresses
GitHub

moodle/moodle

>= 2.8.0, < 2.8.11 · >= 3.0.0, < 3.0.3 · >= 2.9.0, < 2.9.5 · < 2.7.13

2024-01-26 20:14:12
Moodle cross-site request forgery (CSRF) vulnerability
GitHub

moodle/moodle

>= 2.8.0, < 2.8.11 · >= 3.0.0, < 3.0.3 · >= 2.9.0, < 2.9.5 · < 2.7.13

2024-01-26 20:13:43
Moodle provides calendar-event data without considering whether an activity is hidden
GitHub

moodle/moodle

>= 2.8.0, < 2.8.11 · >= 3.0.0, < 3.0.3 · >= 2.9.0, < 2.9.5 · < 2.7.13

2024-01-26 20:13:14
Moodle allows attackers to bypass intended access restrictions
GitHub

moodle/moodle

>= 2.9.0, < 2.9.3 · >= 2.8.0, < 2.8.9 · < 2.7.11

2024-01-26 20:12:45
Moodle allows attackers to read SCORM contents
GitHub

moodle/moodle

>= 2.9.0, < 2.9.3 · >= 2.8.0, < 2.8.9 · < 2.7.11

2024-01-26 20:12:20
Moodle does not properly implement group-based access restrictions
GitHub

moodle/moodle

>= 2.9.0, < 2.9.3 · >= 2.8.0, < 2.8.9 · < 2.7.11

2024-01-26 20:11:34
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
GitHub

moodle/moodle

>= 2.9.0, < 2.9.3 · >= 2.8.0, < 2.8.9 · < 2.7.11

2024-01-26 20:11:19
Moodle multiple cross-site scripting (XSS) vulnerabilities
GitHub

moodle/moodle

>= 2.9.0, < 2.9.3 · >= 2.8.0, < 2.8.9 · < 2.7.11

2024-01-26 20:10:59
Moodle cross-site request forgery (CSRF) vulnerability
GitHub

moodle/moodle

>= 2.9.0, < 2.9.3 · >= 2.8.0, < 2.8.9 · < 2.7.11

2024-01-26 20:10:44
Moodle cross-site scripting (XSS) vulnerability
GitHub

moodle/moodle

>= 2.9.0, < 2.9.2 · >= 2.8.0, < 2.8.8 · < 2.7.10

2024-01-26 20:10:14
Moodle mishandles group-based authorization checks
GitHub

moodle/moodle

>= 2.9.0, < 2.9.2 · >= 2.8.0, < 2.8.8 · < 2.7.10

2024-01-26 20:09:54
Moodle context freezing
GitHub

moodle/moodle

>= 3.6, < 3.6.3

2024-01-26 19:28:28
Moodle Secure layout contained an insecure link in Boost theme
GitHub

moodle/moodle

>= 3.6, < 3.6.3 · >= 3.5, < 3.5.5

2024-01-26 19:27:04
Moodle Stored HTML in assignment submission comments allowed links to be opened directly
GitHub

moodle/moodle

>= 3.6.0, < 3.6.3 · >= 3.5.0, < 3.5.5 · >= 3.2.0, < 3.4.8 · < 3.1.17

2024-01-26 18:28:21
Moodle Users could elevate their role when accessing the LTI tool on a provider site
GitHub

moodle/moodle

>= 3.6, < 3.6.3 · >= 3.5, < 3.5.5 · < 3.4.8

2024-01-26 18:20:18
Moodle uses predictable password-recovery tokens
GitHub

moodle/moodle

>= 2.9.0, < 2.9.2 · >= 2.8.0, < 2.8.8 · < 2.7.10

2024-01-26 18:11:43
Moodle Open Redirect Vulnerability
GitHub

moodle/moodle

>= 3.6.0, <= 3.6.3 · >= 3.5.0, <= 3.5.5 · >= 3.4.0, <= 3.4.8 · <= 3.1.17

2024-01-26 18:04:43
Moodle XML import of ddwtos could lead to intentional remote code execution
GitHub

moodle/moodle

>= 3.5.0, < 3.5.2 · >= 3.4.0, < 3.4.5 · >= 3.2.0, < 3.3.8 · < 3.1.14

2024-01-26 18:00:34
Moodle Cross-site request forgery (CSRF) vulnerability
GitHub

moodle/moodle

>= 2.8, < 2.8.12 · >= 3.0, < 3.0.4 · >= 2.9, < 2.9.6 · < 2.7.14

2024-01-26 17:52:55
Moodle Reflected XSS in mod_data advanced search
GitHub

moodle/moodle

>= 2.8, < 2.8.11 · >= 2.7, < 2.7.13 · >= 3.0, < 3.0.3 · >= 2.9, < 2.9.5

2024-01-26 17:11:32
Moodle allows attackers to obtain manager privileges
GitHub

moodle/moodle

>= 2.7.0, < 2.7.10 · >= 2.9.0, < 2.9.2 · >= 2.8.0, < 2.8.8

2024-01-26 01:55:05
Moodle allows attackers to delete files
GitHub

moodle/moodle

>= 2.7.0, < 2.7.10 · >= 2.9.0, < 2.9.2 · >= 2.8.0, < 2.8.8

2024-01-26 01:54:42
Moodle allows attackers to enter additional answer attempts
GitHub

moodle/moodle

>= 2.7.0, < 2.7.10 · >= 2.9.0, < 2.9.2 · >= 2.8.0, < 2.8.8

2024-01-26 01:54:18
Moodle multiple cross-site scripting (XSS) vulnerabilities
GitHub

moodle/moodle

>= 2.9.0, < 2.9.1 · >= 2.8.0, < 2.8.7 · >= 2.7.0, < 2.7.9

2024-01-26 01:18:54
Moodle cross-site scripting (XSS) vulnerability
GitHub

moodle/moodle

>= 2.9.0, < 2.9.1 · >= 2.8.0, < 2.8.7 · >= 2.7.0, < 2.7.9

2024-01-26 01:18:30
Moodle open redirect vulnerability
GitHub

moodle/moodle

>= 2.9.0, < 2.9.1 · >= 2.8.0, < 2.8.7 · >= 2.7.0, < 2.7.9

2024-01-26 01:14:10
Moodle allows attackers to bypass file-management restrictions
GitHub

moodle/moodle

>= 2.8.0, < 2.8.6 · >= 2.7.0, < 2.7.8 · < 2.6.11

2024-01-26 01:13:11
Moodle allows attackers to obtain sensitive course-structure information
GitHub

moodle/moodle

>= 2.8.0, < 2.8.6 · >= 2.7.0, < 2.7.8 · < 2.6.11

2024-01-26 01:11:26
Moodle allows attackers to bypass intended login restrictions
GitHub

moodle/moodle

>= 2.8.0, < 2.8.6 · >= 2.7.0, < 2.7.8 · < 2.6.11

2024-01-26 01:10:53
Moodle cross-site scripting (XSS) vulnerability
GitHub

moodle/moodle

>= 2.8.0, < 2.8.6 · >= 2.7.0, < 2.7.8 · < 2.6.11

2024-01-26 01:05:30
Moodle allows attackers obtain full-name information
GitHub

moodle/moodle

>= 2.8.0, < 2.8.6 · >= 2.7.0, < 2.7.8 · < 2.6.11

2024-01-26 01:05:06
Moodle does not set the RISK_XSS bit for graders
GitHub

moodle/moodle

>= 2.8.0, < 2.8.6 · >= 2.7.0, < 2.7.8 · < 2.6.11

2024-01-26 01:04:47
Moodle cross-site scripting (XSS) vulnerability
GitHub

moodle/moodle

>= 2.8.0, < 2.8.4 · >= 2.7.0, < 2.7.6 · < 2.6.9

2024-01-26 01:04:25
Exposure of Sensitive Information to an Unauthorized Actor in pimcore
GitHub

pimcore/pimcore

< 10.3.1

2024-01-26 00:35:42
« Previous Next »

Showing 2151 to 2200 of 5933 results

1 2 ... 41 42 43 44 45 46 47 ... 118 119