Advisories

Listing reported advisories sorted by their report date.

Magento Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:46:20
Magento Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:46:00
Magento Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:45:26
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:45:05
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:44:47
Magento Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:44:22
Magento Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:43:59
Magento stored Cross-Site Scripting (XSS) vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:43:34
Magento Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:43:06
Magento Business Logic Error vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:42:39
Magento Incorrect Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5

2025-02-28 02:42:14
Magento Stored Cross-Site Scripting (XSS) Vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:40:35
Magento Stored Cross-Site Scripting (XSS) Vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:40:11
Adobe Commerce Path Traversal
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:39:50
Magento Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:39:16
Magento Stored Cross-Site Scripting (XSS) Vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:38:48
Magento Stored Cross-Site Scripting (XSS) Vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:38:28
Magento Information Exposure vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:38:05
Magento Stored Cross-Site Scripting (XSS) Vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:37:08
Magento Stored Cross-Site Scripting (XSS) Vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:36:33
Adobe Commerce Improper Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:35:50
Magento Stored Cross-Site Scripting (XSS) Vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p4 · >= 2.4.5-p1, < 2.4.5-p11 · >= 2.4.6-p1, < 2.4.6-p9 · = 2.4.8-beta1 · < 2.4.4-p12 · <= 2.0.2 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2025-02-28 02:35:28
Mautic allows Relative Path Traversal in assets file upload
GitHub

mautic/core

< 5.2.3

2025-02-26 20:09:28
Mautic allows Improper Authorization in Reporting API
GitHub

mautic/core

>= 1.0.1, < 5.2.3

2025-02-26 20:08:32
Mautic allows Remote Code Execution and File Deletion in Asset Uploads
GitHub

mautic/core

< 5.2.3

2025-02-26 20:07:46
MediaWiki UnlinkedWikibase Cross-site Scripting vulnerability
GitHub

samwilson/unlinked-wikibase

>= 1.41.0, < 1.41.1 · >= 1.40.0, < 1.40.2 · < 1.42.0 · < 1.39.6

2025-02-25 15:21:45
Moodle allows teachers to evade trusttext config when restoring glossary entries
GitHub

moodle/moodle

>= 4.3.0-beta, < 4.3.10 · >= 4.5.0-beta, < 4.5.2 · >= 4.4.0-beta, < 4.4.6 · < 4.1.16

2025-02-24 22:15:09
Moodle has a SQL injection risk in course search module list filter
GitHub

moodle/moodle

>= 4.3.0-beta, < 4.3.10 · >= 4.5.0-beta, < 4.5.2 · >= 4.4.0-beta, < 4.4.6 · < 4.1.16

2025-02-24 22:12:39
Moodle allows reflected XSS via question bank filter
GitHub

moodle/moodle

>= 4.3.0-beta, < 4.3.10 · >= 4.5.0-beta, < 4.5.2 · >= 4.4.0-beta, < 4.4.6

2025-02-24 22:12:17
Moodle has an IDOR in badges allows disabling of arbitrary badges
GitHub

moodle/moodle

>= 4.3.0-beta, < 4.3.10 · >= 4.5.0-beta, < 4.5.2 · >= 4.4.0-beta, < 4.4.6 · < 4.1.16

2025-02-24 22:09:04
Moodle has a stored XSS in ddimageortext question type
GitHub

moodle/moodle

>= 4.3.0-beta, < 4.3.10 · >= 4.5.0-beta, < 4.5.2 · >= 4.4.0-beta, < 4.4.6 · < 4.1.16

2025-02-24 22:08:24
Moodle has a stored XSS risk in admin live log
GitHub

moodle/moodle

>= 4.3.0-beta, < 4.3.10 · >= 4.5.0-beta, < 4.5.2 · >= 4.4.0-beta, < 4.4.6 · < 4.1.16

2025-02-24 22:02:54
Moodle has an arbitrary file read risk through pdfTeX
GitHub

moodle/moodle

>= 4.3.0-beta, < 4.3.10 · >= 4.5.0-beta, < 4.5.2 · >= 4.4.0-beta, < 4.4.6 · < 4.1.16

2025-02-24 22:02:28
Moodle's feedback response viewing and deletions did not respect Separate Groups mode
GitHub

moodle/moodle

>= 4.3.0-beta, < 4.3.10 · >= 4.5.0-beta, < 4.5.2 · >= 4.4.0-beta, < 4.4.6 · < 4.1.16

2025-02-24 22:02:24
Moodle's non-searchable tags can still be discovered on the tag search page and in the tags block
GitHub

moodle/moodle

>= 4.3.0-beta, < 4.3.10 · >= 4.5.0-beta, < 4.5.2 · >= 4.4.0-beta, < 4.4.6 · < 4.1.16

2025-02-24 22:02:19
Easy!Appointments Improper Restriction of Excessive Authentication Attempts
GitHub

alextselegidis/easyappointments

<= 1.5.0

2025-02-24 19:03:40
Leantime allows Cross-Site Scripting (XSS)
GitHub

leantime/leantime

< 3.3

2025-02-21 23:54:33
Leantime affected by Improper Neutralization of HTML Tags
GitHub

leantime/leantime

< 3.3

2025-02-21 23:54:27
Leantime has Missing Authorization Check for Host Parameter
GitHub

leantime/leantime

< 3.3

2025-02-21 23:53:23
Leantime allows Stored Cross-Site Scripting (XSS)
GitHub

leantime/leantime

< 3.3

2025-02-21 22:48:47
Leantime allows Cross-Site Request Forgery (CSRF)
GitHub

leantime/leantime

< 3.1.2

2025-02-21 22:48:42
Leantime allows Cross Site Scripting (XSS) and SQL Injection (SQLi)
GitHub

leantime/leantime

< 3.3

2025-02-21 22:48:27
Leantime allows Stored Cross-Site Scripting (XSS)
GitHub

leantime/leantime

<= 3.1.4

2025-02-21 22:15:53
Leantime allows Refelected Cross-Site Scripting (XSS)
GitHub

leantime/leantime

< 3.3

2025-02-21 22:15:28
Leantime has Insufficiently Protected Credentials
GitHub

leantime/leantime

< 3.3

2025-02-21 22:15:21
Leantime allows Stored Cross-Site Scripting (XSS)
GitHub

leantime/leantime

< 3.3

2025-02-21 22:15:01
Leantime has Host Header Injection Vulnerability
GitHub

leantime/leantime

< 3.1.2

2025-02-21 22:14:51
The Preview plugin in CKEditor allows Cross-site scripting (XSS)
GitHub

ckeditor/ckeditor

< 4.4.3

2025-02-19 19:03:04
Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability
GitHub

ckeditor/ckeditor

< 4.25.0

2025-02-18 19:04:16
Remote code execution in alextselegidis/easyappointments
GitHub

alextselegidis/easyappointments

<= 1.5.0

2025-02-14 20:38:05
« Previous Next »

Showing 251 to 300 of 5932 results

1 2 3 4 5 6 7 8 9 10 ... 118 119