Advisories via GitHub

Listing reported advisories via GitHub sorted by their report date.

Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 19:09:54
Magento Open Source stored Cross-Site Scripting (XSS) vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:27:40
Magento Open Source Improper Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:27:18
Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:26:48
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:25:23
Magento Open Source Incorrect Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:24:31
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:23:57
Magento Open Source Information Exposure vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:23:33
Magento Open Source Improper Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:22:45
Magento Open Source Information Exposure vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:18:20
Magento Open Source Improper Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:17:16
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:16:57
Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:16:29
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:15:49
Snipe-IT remote code execution
GitHub

snipe/snipe-it

< 7.0.10

2024-10-11 17:47:52
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 17:09:27
Livewire Remote Code Execution on File Uploads
GitHub

livewire/livewire

>= 3.0.0-beta.1, < 3.5.2 · < 2.12.7 · < 3.5.2

2024-10-09 23:52:22
Information Disclosure in TYPO3 Page Tree
GitHub

typo3/cms-backend

>= 12.0.0, < 12.4.21 · >= 11.0.0, < 11.5.40 · >= 10.0.0, < 10.4.46 · >= 13.0.0, < 13.3.1 · < 11.5.40

2024-10-09 16:19:54
Denial of Service in TYPO3 Bookmark Toolbar
GitHub

typo3/cms-backend

>= 11.0.0, <= 11.5.39 · >= 10.0.0, <= 10.4.45 · >= 12.0.0, < 12.4.20 · = 13.0.0

2024-10-08 22:18:30
Drupal Full Path Disclosure
GitHub

drupal/drupal

>= 8.0.0, <= 11.0.4 · >= 11.0.0, < 11.0.5 · >= 10.3.0, < 10.3.6 · >= 8.0.0, < 10.3.6 · >= 8.0.0, < 10.2.9 · = 11.x-dev

2024-10-08 14:54:52
Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name
GitHub

krayin/laravel-crm

<= 1.3.0

2024-10-07 19:27:15
LimeSurvey Cross Site Scripting vulnerability
GitHub

limesurvey/limesurvey

< 6.5.12

2024-10-07 19:26:38
LimeSurvey Cross Site Scripting vulnerability
GitHub

limesurvey/limesurvey

< 6.5.0

2024-10-07 19:02:00
Lara-zeus Dynamic Dashboard and Artemis do not validate paragraph widget values which can be used for XSS
GitHub

lara-zeus/dynamic-dashboard

>= 3.0.0, <= 3.0.1 · >= 1.0.0, <= 1.0.6

2024-10-07 14:55:31
Mediawiki Cargo extension vulnerable to Cross-site Scripting
GitHub

mediawiki/cargo

< 3.6.1

2024-10-07 14:50:53
Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS
GitHub

dev-lancer/minecraft-motd-parser

<= 1.0.5

2024-10-04 18:51:36
Contao allows admin an account to upload SVG file containing malicious JavaScript
GitHub

contao/contao

<= 5.4.1

2024-10-02 22:35:35
Zenario Cross Site Scripting in the Image library
GitHub

tribalsystems/zenario

<= 9.7.61188

2024-10-02 22:35:25
October allows an admin account to upload PDF containing malicious JavaScript
GitHub

october/october

<= 3.6.4

2024-10-02 22:35:21
Zenario allows authenticated admin users to upload PDF files containing malicious code
GitHub

tribalsystems/zenario

<= 9.7.61188

2024-10-02 22:35:06
LibreNMS vulnerable to Stored Cross-site Scripting via File Upload
GitHub

librenms/librenms

< 24.9.0

2024-10-01 22:27:33
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Transports" feature
GitHub

librenms/librenms

< 24.9.0

2024-10-01 20:31:25
LibreNMS has Stored Cross-site Scripting vulnerability in "Device Group" Name
GitHub

librenms/librenms

< 24.9.0

2024-10-01 20:31:19
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Rules" feature
GitHub

librenms/librenms

< 24.9.0

2024-10-01 20:31:14
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Templates" feature
GitHub

librenms/librenms

< 24.9.0

2024-10-01 20:31:10
LibreNMS has Stored Cross-site Scripting vulnerability in "Device Dependencies" feature
GitHub

librenms/librenms

< 24.9.0

2024-10-01 20:31:06
Pagekit Cross-site Scripting vulnerability
GitHub

pagekit/pagekit

<= 1.0.18

2024-10-01 18:09:22
starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field
GitHub

starcitizentools/citizen-skin

>= 2.6.3, < 2.31.0

2024-09-30 17:48:33
MantisBT vulnerable to information disclosure with user profiles
GitHub

mantisbt/mantisbt

<= 2.26.3

2024-09-30 17:48:17
Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting
GitHub

filament/tables

>= 3.0.0, < 3.2.115

2024-09-27 20:51:02
IDOR vulnerability in account profile page
GitHub

aimeos/ai-controller-frontend

>= 2023.04.1, < 2023.10.9 · >= 2022.04.1, < 2022.10.8 · >= 2021.04.1, < 2021.10.8 · < 2020.10.15 · = 2024.04.1

2024-09-26 17:38:31
Cross site scripting in Concrete CMS
GitHub

concrete5/concrete5

>= 9.0.0, < 9.3.4 · < 8.5.19

2024-09-25 19:00:29
Cross site scripting in Concrete CMS
GitHub

concrete5/concrete5

>= 9.0.0, < 9.3.4 · < 8.5.19

2024-09-25 18:56:47
powermail TYPO3 extension has Insecure Direct Object Reference
GitHub

in2code/powermail

>= 12.0.0, < 12.4.1 · >= 11.0.0, < 12.4.1 · >= 9.0.0, < 10.9.1 · >= 8.0.0, < 8.5.1 · < 7.5.1

2024-09-23 16:35:14
Mautic allows users enumeration due to weak password login
GitHub

mautic/core

>= 5.1.0, < 5.1.1

2024-09-18 22:10:06
Mautic has insufficient authentication in upgrade flow
GitHub

mautic/core

>= 1.0.0-beta3, < 4.4.13 · >= 5.0.0-alpha, < 5.1.1

2024-09-18 22:06:15
Mautic has an XSS in contact tracking and page hits report
GitHub

mautic/core-lib

>= 1.0.0-beta4, < 4.4.13 · >= 5.0.0-alpha, < 5.1.1

2024-09-18 22:06:00
Mautic vulnerable to XSS in contact/company tracking (no authentication)
GitHub

mautic/core

>= 5.0.0-alpha, < 5.1.1 · >= 2.6.0, < 4.4.13

2024-09-18 22:05:35
Mautic vulnerable to Cross-site Scripting (XSS) - stored (edit form HTML field)
GitHub

mautic/core

>= 5.0.0-alpha, < 5.1.1 · >= 1.0.0-beta, < 4.4.13

2024-09-18 22:05:04
auditor-bundle vulnerable to Cross-site Scripting because name of entity does not get escaped
GitHub

damienharper/auditor-bundle

< 6.0.0 · < 5.2.6

2024-09-18 19:37:21
« Previous Next »

Showing 551 to 600 of 4580 results

1 2 ... 9 10 11 12 13 14 15 ... 91 92