Advisories

Listing reported advisories sorted by their report date.

Missing Authorization in TYPO3 extension
GitHub

directmailteam/direct-mail

< 5.2.4

2021-07-26 21:33:33
Incorrect Authorization in TeamPass
GitHub

nilsteampassnet/teampass

<= 2.1.27.36

2021-07-26 21:12:20
Missing Authorization in TeamPass
GitHub

nilsteampassnet/teampass

<= 2.1.27.36

2021-07-26 21:11:20
Exposure of Resource to Wrong Sphere in LibreNMS
GitHub

librenms/librenms

< 1.65.1

2021-07-26 19:20:01
Improper Input Validation in Firefly III
GitHub

grumpydictator/firefly-iii

<= 4.7.17.3

2021-07-22 21:50:39
Information Disclosure in User Authentication
GitHub

typo3/cms-core

>= 10.0.0, < 10.4.18 · >= 11.0.0, < 11.3.1 · >= 9.0.0, < 9.5.28 · >= 8.0.0, < 8.7.41 · >= 7.0.0, < 7.6.52

2021-07-22 20:24:01
Cross-Site Scripting in Backend Grid View
GitHub

typo3/cms-core

>= 10.0.0, < 10.4.18 · >= 11.0.0, < 11.3.1 · >= 9.0.0, < 9.5.28 · >= 8.0.0, < 8.7.41

2021-07-20 17:43:43
Cross-Site Scripting in Page Preview
GitHub

typo3/cms-core

>= 10.0.0, < 10.4.18 · >= 11.0.0, < 11.3.1 · >= 9.0.0, < 9.5.28

2021-07-20 17:02:53
TYPO3-CORE-SA-2021-012: Information Disclosure in User Authentication
FriendsOfPHP

typo3/cms-core

>=10.0.0, <10.4.18 · >=11.0.0, <11.3.1 · >=9.0.0, <9.5.28

2021-07-20 09:18:25
TYPO3-CORE-SA-2021-012: Information Disclosure in User Authentication
FriendsOfPHP

typo3/cms

>=10.0.0, <10.4.18 · >=11.0.0, <11.3.1 · >=9.0.0, <9.5.28

2021-07-20 09:18:25
TYPO3-CORE-SA-2021-011: Cross-Site Scripting in Backend Grid View
FriendsOfPHP

typo3/cms-core

>=10.0.0, <10.4.18 · >=11.0.0, <11.3.1 · >=9.0.0, <9.5.28

2021-07-20 09:18:06
TYPO3-CORE-SA-2021-011: Cross-Site Scripting in Backend Grid View
FriendsOfPHP

typo3/cms

>=10.0.0, <10.4.18 · >=11.0.0, <11.3.1 · >=9.0.0, <9.5.28

2021-07-20 09:18:06
TYPO3-CORE-SA-2021-010: Cross-Site Scripting in Query Generator & Query View
FriendsOfPHP

typo3/cms-core

>=10.0.0, <10.4.18 · >=11.0.0, <11.3.1 · >=9.0.0, <9.5.28

2021-07-20 09:17:46
TYPO3-CORE-SA-2021-010: Cross-Site Scripting in Query Generator & Query View
FriendsOfPHP

typo3/cms

>=10.0.0, <10.4.18 · >=11.0.0, <11.3.1 · >=9.0.0, <9.5.28

2021-07-20 09:17:46
TYPO3-CORE-SA-2021-009: Cross-Site Scripting in Page Preview
FriendsOfPHP

typo3/cms-core

>=10.0.0, <10.4.18 · >=11.0.0, <11.3.1 · >=9.0.0, <9.5.28

2021-07-20 09:17:26
TYPO3-CORE-SA-2021-009: Cross-Site Scripting in Page Preview
FriendsOfPHP

typo3/cms

>=10.0.0, <10.4.18 · >=11.0.0, <11.3.1 · >=9.0.0, <9.5.28

2021-07-20 09:17:26
SQL injection in pimcore/pimcore
GitHub

pimcore/pimcore

< 10.0.7

2021-07-13 16:18:51
Files or Directories Accessible to External Parties in ether/logs
GitHub

ether/logs

< 3.0.4

2021-07-09 14:04:21
Arbitrary file upload in Fork CMS
GitHub

forkcms/forkcms

<= 5.9.2

2021-07-08 13:59:31
Cross-site scripting in LavaLite-CMS
GitHub

lavalite/cms

<= 5.8.0

2021-07-08 13:53:20
XSS Injection in Media Collection Title was possible
GitHub

sulu/sulu

< 1.6.41

2021-07-02 18:03:49
Cross-site scripting (XSS) from field and configuration text displayed in the Panel
GitHub

getkirby/cms

<= 3.5.6

2021-07-02 16:38:11
List of order ids, number, items total and token value exposed for unauthorized uses via new API
GitHub

sylius/sylius

>= 1.9.0, < 1.9.5

2021-06-28 18:23:22
Missing Authentication for Critical Function
GitHub

shopware/platform

<= 6.4.1.0

2021-06-25 15:36:06
Session Fixation
GitHub

shopware/platform

<= 6.3.5.1

2021-06-25 15:35:08
Cross-site scripting
GitHub

shopware/shopware

< 5.6.10

2021-06-25 15:33:56
Exposure of Sensitive Information to an Unauthorized Actor
GitHub

shopware/shopware

< 5.6.10

2021-06-25 15:32:29
Exposure of Sensitive Information to an Unauthorized Actor
GitHub

shopware/platform

<= 6.4.1.0

2021-06-25 15:30:09
Exposure of Sensitive Information to an Unauthorized Actor
GitHub

shopware/platform

<= 6.3.5.0

2021-06-25 15:29:11
Exposure of Sensitive Information to an Unauthorized Actor
GitHub

shopware/platform

<= 6.4.1.0

2021-06-25 15:26:55
non-admin users can create integration role with administrator role
GitHub

shopware/platform

<= 6.4.1.0

2021-06-24 19:31:04
Internal hidden fields are visible on to many associations in admin api
GitHub

shopware/platform

<= 6.4.1.0

2021-06-24 19:20:57
Private files publicly accessible with Cloud Storage providers
GitHub

shopware/platform

<= 6.4.1.0

2021-06-24 19:20:28
Creation of order credits was not validated by acl in admin orders
GitHub

shopware/platform

<= 6.4.1.0

2021-06-24 19:19:59
Canceling of orders not related to the logged-in user
GitHub

shopware/platform

<= 6.4.1.0

2021-06-24 18:04:48
Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem
GitHub

league/flysystem

>= 2.0.0, < 2.1.1 · < 1.1.4

2021-06-24 18:03:17
Cross-site scripting (XSS) vulnerability in the system log
FriendsOfPHP

contao/contao

>=4.11.0, <4.11.5 · >=4.10.0, <4.11.0 · >=4.5.0, <4.9.16

2021-06-23 10:12:00
Cross-site scripting (XSS) vulnerability in the system log
FriendsOfPHP

contao/core-bundle

>=4.11.0, <4.11.5 · >=4.10.0, <4.11.0 · >=4.5.0, <4.9.16

2021-06-23 10:12:00
Cross-site scripting in PageKit
GitHub

pagekit/pagekit

<= 1.0.18

2021-06-17 17:32:03
CVE-2021-32693: Authentication granted to all firewalls instead of just one
FriendsOfPHP

symfony/security-http

>=5.3.0, <5.3.2

2021-06-17 15:00:00
CVE-2021-32693: Authentication granted to all firewalls instead of just one
FriendsOfPHP

symfony/symfony

>=5.3.0, <5.3.2

2021-06-17 15:00:00
Remote Code Execution vulnerability in PHPMailer 6.4.1 running on Windows
GitHub

phpmailer/phpmailer

< 6.5.0

2021-06-16 19:50:58
RCE affecting Windows hosts via UNC paths to translation files
FriendsOfPHP

phpmailer/phpmailer

<6.5.0

2021-06-16 16:20:00
Untrusted code may be run from an overridden address validator
FriendsOfPHP

phpmailer/phpmailer

<6.5.0

2021-06-16 16:20:00
elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE
GitHub

studio-42/elfinder

< 2.1.59

2021-06-15 21:01:46
elFinder unsafe upload filtering leading to remote code execution
GitHub

studio-42/elfinder

< 2.1.58

2021-06-14 22:14:27
Grav's Twig processing allowing dangerous PHP functions by default
GitHub

getgrav/grav

<= 1.7.10

2021-06-09 22:18:43
CVE-2020-26136 GraphQL doesn't honour MFA when using basic auth
FriendsOfPHP

silverstripe/graphql

>=4.0.0-alpha1, <4.0.0-alpha2 · >=3.0.0, <3.5.0

2021-06-08 01:46:00
CVE-2021-25817 XXE: Vulnerability in CSSContentParser
FriendsOfPHP

silverstripe/framework

>=4.0.0, <4.7.4

2021-06-07 22:31:00
CVE-2021-28661 Default GraphQL permission checker not inherited by query subclass
FriendsOfPHP

silverstripe/graphql

>=3.0.0, <3.5.2

2021-06-07 22:31:00
« Previous Next »

Showing 4551 to 4600 of 5933 results

1 2 ... 89 90 91 92 93 94 95 ... 118 119