Advisories via GitHub

Listing reported advisories via GitHub sorted by their report date.

Typo3 Information Disclosure in User Authentication
GitHub

typo3/cms

>= 9.0.0, < 9.5.6

2024-06-05 17:09:31
Cross-Site Scripting in TYPO3 CMS Backend
GitHub

typo3/cms

>= 8.0.0, < 8.7.5

2024-06-05 17:07:16
Cross-Site Scripting in TYPO3 CMS
GitHub

typo3/cms

>= 7.6.0, < 7.6.16 · >= 8.0.0, < 8.6.1

2024-06-05 17:05:49
Insecure Unserialize in TYPO3 Backend
GitHub

typo3/cms

>= 7.6.0, < 7.6.13 · >= 6.2.0, < 6.2.29 · >= 8.0.0, < 8.4.1

2024-06-05 17:04:44
Cache Flooding in TYPO3 Frontend
GitHub

typo3/cms

>= 7.6.0, < 7.6.11 · >= 6.2.0, < 6.2.27 · >= 8.0.0, < 8.3.1

2024-06-05 16:55:38
Authentication Bypass in TYPO3 Frontend
GitHub

typo3/cms

>= 8.2.0, < 8.6.1

2024-06-05 16:55:02
Authentication Bypass in TYPO3 CMS
GitHub

typo3/cms

>= 8.0.0, < 8.7.17 · >= 7.0.0, < 7.6.30 · >= 9.0.0, < 9.3.2

2024-06-05 16:52:47
Information Disclosure in TYPO3 CMS
GitHub

typo3/cms

>= 7.6.0, < 7.6.22 · >= 8.0.0, < 8.7.5

2024-06-05 16:43:52
Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS
GitHub

typo3/cms

>= 8.0.0, < 8.7.17 · >= 7.0.0, < 7.6.30 · >= 9.0.0, < 9.3.2

2024-06-05 16:41:49
Information Disclosure in TYPO3 CMS
GitHub

typo3/cms

>= 7.6.0, < 7.6.22 · >= 8.0.0, < 8.7.5

2024-06-05 15:11:37
Privilege Escalation & SQL Injection in TYPO3 CMS
GitHub

typo3/cms

>= 8.5.0, < 8.7.17 · >= 9.0.0, < 9.3.2

2024-06-05 15:10:20
TYPO3 Remote Code Execution in third party library swiftmailer
GitHub

typo3/cms

>= 7.6.0, < 7.6.15 · >= 6.2.0, < 6.2.30 · >= 8.0.0, < 8.5.1

2024-06-05 15:08:05
Arbitrary Code Execution in TYPO3 CMS
GitHub

typo3/cms

>= 7.6.0, < 7.6.22 · >= 8.0.0, < 8.7.5

2024-06-05 15:07:10
Insecure Deserialization in TYPO3 CMS
GitHub

typo3/cms

>= 8.5.0, < 8.7.17 · >= 9.0.0, < 9.3.2

2024-06-05 15:06:19
Cross-Site Scripting (XSS) vulnerability in typolinks
GitHub

typo3/cms

>= 7.6.0, < 7.6.10 · >= 6.2.0, < 6.2.26 · >= 8.0.0, < 8.2.1

2024-06-05 15:04:24
Cross-Site Scripting (XSS) in TYPO3 Backend
GitHub

typo3/cms

>= 7.6.0, < 7.6.11 · >= 6.2.0, < 6.2.27 · >= 8.0.0, < 8.3.1

2024-06-05 15:03:29
Cross-Site Scripting in third party library mso/idna-convert
GitHub

typo3/cms

>= 7.6.0, < 7.6.10 · >= 8.0.0, < 8.2.1

2024-06-05 15:02:40
Information Disclosure in TYPO3 Backend
GitHub

typo3/cms

>= 7.6.0, < 7.6.10 · >= 6.2.0, < 6.2.26 · >= 8.0.0, < 8.2.1

2024-06-05 15:01:47
SQL Injection in TYPO3 Frontend Login
GitHub

typo3/cms

>= 7.6.0, < 7.6.10 · >= 6.2.0, < 6.2.26

2024-06-05 14:23:21
Missing Access Check in TYPO3 CMS
GitHub

typo3/cms

>= 6.2.0, < 6.2.25 · >= 8.0.0, < 8.1.1 · >= 7.6.0, < 7.6.8

2024-06-05 14:22:27
Insecure Unserialize in TYPO3 Import/Export
GitHub

typo3/cms

>= 7.6.0, < 7.6.10 · >= 6.2.0, < 6.2.26 · >= 8.0.0, < 8.2.1

2024-06-05 14:21:13
Cross-Site Scripting in TYPO3 Backend
GitHub

typo3/cms

>= 7.6.0, < 7.6.10 · >= 6.2.0, < 6.2.26 · >= 8.0.0, < 8.2.1

2024-06-05 14:19:40
Privilege Escalation in TYPO3 CMS
GitHub

typo3/cms

>= 6.2.0, < 6.2.20 · >= 8.0.0, < 8.0.1 · >= 7.6.0, < 7.6.5

2024-06-05 14:18:58
Cross-Site Scripting in TYPO3 Backend
GitHub

typo3/cms

>= 6.2.0, < 6.2.20 · >= 8.0.0, < 8.0.1 · >= 7.6.0, < 7.6.5

2024-06-05 14:17:47
Authentication Bypass in TYPO3 CMS
GitHub

typo3/cms

>= 6.2.0, < 6.2.20 · >= 8.0.0, < 8.0.1 · >= 7.6.0, < 7.6.5

2024-06-05 14:17:21
Digital products download without proper payment status check
GitHub

aimeos/ai-client-html

>= 2023.04.1, < 2023.10.14 · >= 2022.04.1, < 2022.10.12 · >= 2021.04.1, < 2021.10.21 · >= 2020.04.1, < 2020.10.27 · >= 2024.04.1, < 2024.04.4

2024-06-05 13:30:57
Remote code execution in web server context
GitHub

aimeos/aimeos-core

>= 2024.04.1, < 2024.04.5

2024-06-05 13:29:48
Vulnerable embedded jQuery Version
GitHub

pimcore/admin-ui-classic-bundle

<= 1.4.2

2024-06-05 13:28:37
Reflected Cross-Site Scripting (XSS) in Dolibarr
GitHub

dolibarr/dolibarr

< 19.0.2

2024-06-04 18:23:50
Moodle Unsanitized HTML in site log for config_log_created
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4 · >= 4.2.0, < 4.2.7 · < 4.1.10

2024-06-04 17:37:36
Moodle CSRF risk in analytics management of models
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4 · >= 4.2.0, < 4.2.7 · < 4.1.10

2024-06-04 17:36:36
Moodle ReCAPTCHA can be bypassed on the login page
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4

2024-06-04 17:35:50
Moodle Logout CSRF in admin/tool/mfa/auth.php
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4

2024-06-04 17:34:49
Flooding Server with Thumbnail files
GitHub

pimcore/pimcore

>= 11.0.0, < 11.2.4

2024-06-04 17:18:23
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4 · >= 4.2.0, < 4.2.7 · < 4.1.10

2024-06-04 16:01:42
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4 · >= 4.2.0, < 4.2.7 · < 4.1.10

2024-06-04 16:00:31
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4 · >= 4.2.0, < 4.2.7 · < 4.1.10

2024-06-04 16:00:06
Moodle CSRF risk in admin preset tool management of presets
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4 · >= 4.2.0, < 4.2.7 · < 4.1.10

2024-06-04 15:54:05
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4 · >= 4.2.0, < 4.2.7 · < 4.1.10

2024-06-04 15:53:20
Moodle Cross-site Scripting (XSS)
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4 · >= 4.2.0, < 4.2.7 · < 4.1.10

2024-06-04 15:52:45
Moodle Improper Input Validation
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4

2024-06-04 15:52:12
Moodle broken access control when setting calendar event type
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4 · >= 4.2.0, < 4.2.7 · < 4.1.10

2024-06-04 15:51:20
Moodle Cross-site Scripting (XSS)
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4 · >= 4.2.0, < 4.2.7 · < 4.1.10

2024-06-04 15:21:11
Moodle stored Cross-site Scripting (XSS)
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4 · >= 4.2.0, < 4.2.7 · < 4.1.10

2024-06-04 15:20:12
Denial of Service (DoS) attack possibility in TYPO3 component Indexed Search
GitHub

typo3/cms

>= 6.2.0, < 6.2.19 · >= 7.6.0, < 7.6.4

2024-06-04 15:13:21
Typo3 Arbitrary File Disclosure in Form Component
GitHub

typo3/cms

>= 6.2.0, < 6.2.20

2024-06-04 15:01:38
Cross-Site Scripting (XSS) in TYPO3 component CSS styled content
GitHub

typo3/cms

>= 6.2.0, < 6.2.19 · >= 7.6.0, < 7.6.4

2024-06-04 14:48:42
XML External Entity (XXE) Processing in TYPO3 Core
GitHub

typo3/cms

>= 6.2.0, < 6.2.19 · >= 7.6.0, < 7.6.4

2024-06-04 14:47:02
Cross-Site Scripting (XSS) in TYPO3 component Backend
GitHub

typo3/cms

>= 6.2.0, < 6.2.19

2024-06-04 14:45:21
TYPO3 Cross-Site Scripting (XSS) in form component
GitHub

typo3/cms

>= 6.2.0, < 6.2.18

2024-06-03 19:42:13
« Previous Next »

Showing 451 to 500 of 4252 results

1 2 ... 7 8 9 10 11 12 13 ... 85 86